Flight Rising Discussion

Hello, FR Community -

It has come to our attention that bad actors that have gained access to hacked passwords lists (gained from other sites/sources) are actively using them to try and gain access to older Flight Rising accounts (likely to try and offload valuable items). It is common for raids like this to take advantage of the fact that individuals use the same password across a wide group of sites or services, and the intruders are employing that strategy here. We want to be clear: we have no reason to believe that the website's security itself is under threat, nor have they done any damage that cannot be mostly amended.

Yesterday, we announced that we would be increasing security measures to help prevent intrusions like this. While development around these measures has been in progress for several months, obviously there is a necessity to bump the priority on them and we will be deploying them as soon as they are thoroughly tested.

For now, we have made the decision to place Flight Rising into an unscheduled maintenance mode primarily to allow our team time to rest, as this has been a considerable resource drain on as small a group as ours. In keeping with our anti-crunch philosophy, we have to give those members time for rejuvenation and mental health reasons. We don't have a planned time for when the site will reopen, but at this time, we anticipate that it won't be more than a day.

The timing isn't great, we understand, as Night of the Nocturne is still running. The team will, of course, be extending this event to compensate for the downtime, and we'll have more information on that when we come back out of maintenance.

As we mentioned in our messaging yesterday, we urge everyone to take stock of the email address they have attached to their Flight Rising account. When access is restored to the site, please take the time to update your email address if necessary, and change your password to something complex that you do not use for other sites or services. That is the best thing you can do for yourself and for your community as a whole.

We appreciate everyone's understanding while think of the wellbeing of our team and use tonight to recharge. We'll provide you updates as often we can.

Your Flight Rising Founders,

Undel, Akiri, and Xhaztol

Hello everyone! We're back. Thank you for your patience while we took some much needed time to both rest and implement some additional (temporary) security measures. We can't go into the details of the temporary measures, but our goal with them is to help you protect your account from bad actors with password lists on the backend until our longer-term, more permanent measures are in place. In the meantime, if you haven't changed your [I]Flight Rising[/I] password yet to something unique, you should do that at your earliest convenience. We will also be monitoring the site throughout the week and over the holiday weekend. Speaking of holiday weekend, we're also extending [I]Night of the Nocturne[/I] by one full day. [info][b]The [I]Night of the Nocturne[/I] event will now end on Monday, January 3rd at 06:00 server time.[/b] You'll have an additional day before your Strange Chests turn to dust, too. [/info] Finally, we have fed your dragons, but unfortunately due to disruptions and the amount of work that was needed for security reasons, we missed a couple energy ticks overnight. A very small number of players may have lost their well-fed bonus. We apologize for the inconvenience and any frustration this may cause. [emoji=fae sad size=1]

Hello everyone, we hope you had a safe, healthy, and enjoyable holiday.

Maintenance has concluded and we've implemented some security measures. For you, you should be aware that if it's been some time since you logged in or we see odd looking login attempts for your account, we'll email you a code before granting account access. From there you have to enter the code—sent to your account's registered email address—on the Flight Rising website to verify that it is in fact you attempting to log into your account.

This security measure applies to all accounts as we can't protect inactive accounts with measures that require manual activation by the end-user. It also can't be opted out of at this time due to the ongoing raid attempts.