Kineta Lead Admin Faerie Queen

Offline

Joined: Aug 2007

Posts: 5384 OfflineJoined: Aug 2007Posts: 5384





At approximately 4:00 AM PDT on May 24th, two things happened: all user accounts were frozen, requiring users to reset their password before they can log in



the API - a communication tool for 3rd party apps - started returning 404s This means that all user-developed applications stopped working, including: Anime Recommendation Finder, Anime Recommendations, Anime Trakr, AnYme, Atarashii, BetterMyAnimeList, Cafeine, hinatachan, iMAL, Kamuy, MALClient, MALembed, MALgraph, mal-gtk, MALstats, MAL Updater, MAL Updater OS X, MyAniList, MyAnimelistRT, PocketMAL, Shukofukurou, Taiga, themes.moe, Trackma, and others that we may have missed which use MyAnimeList.

Why did this happen?

The red box on the website said that a "vulnerability in the API" is being worked on. If you feel the red box was not enough information and the community deserves more information, I encourage you to contact DeNA's





Is my account safe?

The red box on the website said "Out of an abundance of caution" and "***By entering your MAL username and/or password into services other than the official MyAnimeList website or applications provided by MAL, you are running the risk that the information could be used by the developers of those services. When using any third party service, always consider that you provide your information at your own risk."



This suggests that there has not been any data leaked or hacked. It also suggests that as long as you have not entered your password into any 3rd party applications that you do not trust, your information should be safe. If you still feel your account is unsafe, I encourage you to contact DeNA's





Is my payment information safe?

Your payment information is definitely safe. This data is not stored on MAL's servers. Your credit card information is stored on Stripe, a payment processing company that is PCI DSS compliant. Even if MAL were to have a legitimate security breach (which this was not or DeNA would have had to post the potential ramifications to user data, to the best of my knowledge), your credit card number would still be safe as its stored on Stripe only.





Why did my app stop working? When will it work again?

The red box says the API - what the developers of these applications use to communicate with MAL - is "temporarily disabled". This means all unofficial applications cannot work until the API is enabled again.



For this reason, please do not send any bug reports in mobile and desktop applications not explicitly developed by MyAnimeList. The developers of these applications are not responsible for the apps not working and are not able to fix it until DeNA enables the API again. Both the developers and the moderation team do not know when they will start working again.



If you feel the lack of communication about the API is problematic and are unhappy about not being able to use your apps, I encourage you to contact DeNA's





I cannot recover my MyAnimeList because I forgot/lost my email. Help!



Please contact DeNA's



Please do not share your old passwords with anyone, not even me!



Since many users have not kept their emails current, there is a high volume of requests right now. Based on what users are saying, it will likely take 3 days or more to receive an email from Customer Support.



If you are unable to wait that long, you can contact the moderation team for help. Please be patient with us as we process a high volume of requests: IRC (EU timezone) - please contact Kineta if you've forgotten your email



IRC (EU timezone) - please contact Luna if you remember the email on your account



Discord (EU timezone) - please contact cyruz



Discord (US timezone) - please contact Xinil





Please do not message all of us at once!



If you request help on IRC, please stay connected until someone helps you (or come back later and message again).

We need the following information from you. Please be careful to provide ALL pieces of information to help us process your request faster! The email address on your account. If you don't know it, please list as many possibilities you can think of so we can look for patterns.



Your public IPv4 address. https://www.whatismyip.com



Previous usernames (if applicable), recent list updates (only if your list is private).



The new email address you would like on your account.

Please do not create new accounts to contact admins. In almost all cases, we should be able to help you recover your original account. If you have already created a new duplicate account, please contact

Please contact DeNA's Customer Support . They will help you to recover your account. In your message, please include as much information about your account that you think no one else would know (see below).Since many users have not kept their emails current, there is a high volume of requests right now. Based on what users are saying, it will likely take 3 days or more to receive an email from Customer Support.If you are unable to wait that long, you can contact the moderation team for help. Please be patient with us as we process a high volume of requests:We need the following information from you.In almost all cases, we should be able to help you recover your original account. If you have already created a new duplicate account, please contact Luna or cyruz via PM or profile comment with it so they can remove it.



I just received the "Important: Please reset your password" email, but I already reset my password?



Due to the large number of user accounts on MAL, it takes time to send emails to everyone. If you've already logged into your account successfully, you do not need to reset your password again.





Why don't the moderators know what's going on?



MyAnimeList's moderation staff - the people who maintain the databases, the forums, and do most of your on-site customer support - are not affiliated with DeNA. Half of the moderation staff has been maintaining MAL since before DeNA became owners of MAL. Some of us have been here since even before CraveOnline (our previous owners).



How do the moderators feel about this situation?



The moderation team is disappointed in how DeNA has handled this situation thus far. We feel particularly bad for the 3rd party devs who are receiving so many angry emails and complaints from users when they are just as bewildered as users.



MAL's 3rd party devs have helped to build MyAnimeList into the website it is now. When we had a poor API, dedicated users developed an unofficial API for us. When we had no mobile apps in a mobile era, 3rd party devs created and maintained apps for their users. Outside their own apps, many of these devs have also worked personally with me in projects unrelated to their own apps, trying to make MAL better for more people.



The moderation team firmly believes that "MyAnimeList" is a website for the community, built by its community. I have separated DeNA from "MyAnimeList' in this post because I think these events have made the relationship between MAL and its community fragile. From the moderation team's side, I want to assure you that we are as committed as ever to continue providing a positive and communicative user experience on MAL. I hope that DeNA's actions in the short-term and long-term future will demonstrate the same.





Please give your 3rd party devs some cookies and love - they really need it right now. And please be kind to the moderation staff - we're feeling as upset as you are. We have been waiting for our owners, DeNA, to make a statement to the community. Unfortunately, Xinil and I feel it is not possible to wait any longer.At approximately 4:00 AM PDT on May 24th, two things happened:This means that all user-developed applications stopped working, including:The red box on the website said that ais being worked on. If you feel the red box was not enough information and the community deserves more information, I encourage you to contact DeNA's Customer Support The red box on the website saidandThis suggests that there has not been any data leaked or hacked. It also suggests that as long as you have not entered your password into any 3rd party applications that you do not trust, your information should be safe. If you still feel your account is unsafe, I encourage you to contact DeNA's Customer Support Your payment information is definitely safe. This data is not stored on MAL's servers. Your credit card information is stored on Stripe, a payment processing company that is PCI DSS compliant. Even if MAL were to have a legitimate security breach (which this was not or DeNA would have had to post the potential ramifications to user data, to the best of my knowledge), your credit card number would still be safe as its stored on Stripe only.The red box says the API - what the developers of these applications use to communicate with MAL - is "temporarily disabled". This means all unofficial applications cannot work until the API is enabled again.For this reason,. The developers of these applications are not responsible for the apps not working and are not able to fix it until DeNA enables the API again. Both the developers and the moderation team do not know when they will start working again.If you feel the lack of communication about the API is problematic and are unhappy about not being able to use your apps, I encourage you to contact DeNA's Customer Support Please give your 3rd party devs some cookies and love - they really need it right now. And please be kind to the moderation staff - we're feeling as upset as you are. BBCode Modified by Kineta, May 27, 2018 3:48 AM



Open Staff Apps ✧ Guidelines & FAQ ✧ Report Abuse ✧ とわ [Art]