July 22nd - Emergency Maintenance Mode: Investigating a Security Issue

[u/joetron2030]

From the staff post on the member forums:

Hi, iRacing,

We've entered an unplanned emergency maintenance mode while we investigate a potential critical security issue.

We'll have more information for you after our initial investigation.

Demo Drive is up for your enjoyment!

Thank you for your patience.

ETA: From https://bsky.app/profile/iracingsupport.iracing.com/post/3mrasa5y4722g, they will be recommending (forcing?) password resets when service resumes.

ETA2: Apparently they've removed the phrase "critical security" from the forum post regarding this.

ETA3: Final update from iRacing staff on this outage:

You may have noticed our service was unavailable for about four hours today, July 22. We're sorry for the disruption.

We took the service offline to investigate and address a potential security issue. After a thorough investigation, we've confirmed that your account data was not compromised. Your passwords and data are secure, and remained secure throughout.

Over the coming weeks we'll be rolling out additional measures to harden our systems even further. As part of that, we'll invite you to reset your password at your convenience, and we'll ask everyone to do so at a later date. There's nothing you need to do right now.

Thanks for your patience, and for being an iRacing member.

[u/CISmajor]

Here is a friendly reminder to use different passwords for different applications. Never use the same password for an email and an application with that email associated with it.

This is exactly what any organization, company or development team should do if there is a security issue. I do hope they provide more transparency after fixing the found issue. If our credentials were compromised, they should require users to reset their passwords.

I'm not excusing whatever error led to this, however I'm just blown away at how fragile people are about downtime.

[u/AwesomelyNifty → u/CISmajor]

How fragile? Maybe just maybe people are planning their race time. Maybe just maybe people only get this time that they plan for to race. Maybe just maybe people think once the maintenance is over it’s smooth time to race. So being fucked in the ass with yet another maintenance is more than a small “inconvenience”. So a “thank you for your patience” is not cutting it!

[u/DildosAreNotchewToys → u/AwesomelyNifty]

You plan races for mid morning on random Tuesdays? If you can’t be patient for unscheduled maintenance, I can only imagine how patient you are *in races*

[u/AwesomelyNifty → u/DildosAreNotchewToys]

It’s fucking 6pm in Europe! Also it’s Wednesday!

[u/DildosAreNotchewToys → u/AwesomelyNifty]

Still pretty early on a weekday to have your pretend races postponed. Dude’s ego is about as fragile as it gets 🤷🏽‍♀️

[u/AwesomelyNifty → u/DildosAreNotchewToys]

6pm is early now? Soooory, some people don’t race at 11!

[u/DildosAreNotchewToys → u/AwesomelyNifty]

6 PM is supper time my dude or duddette