Running custom liveries in iRacing has never been easier than with Trading Paints. Sim racers are urged to change their passwords and not use the application for the time being, however: The third-party program has suffered a big security breach, with login data of over 270.000 accounts being leaked.
iRacing's Senior DevOps Engineer Nicholas Bailey has confirmed the issue in a forum post, advising users to try and use a password manager for future passwords that are harder to crack. Trading Paints themselves are aware of the issues and have already begun work to try and fix the problem.
There had initially been some confusion as to whether or not it would be safe to use the Trading Paints downloader after changing passwords. Trading Paints have answered that question in another Tweet, stating that login credentials are not stored in the downloader itself - however, until there is confirmation that nothing else within the software has been compromised, it might be a good idea to stop using Trading Paints altogether and uninstall it to avoid any potential issues.
After the security breach at hand, it could be a possibility that iRacing is going to look into implementing such a service themselves rather than having users rely on a third-party application that could potentially harm their iRacing accounts.
Change Your Passwords!
Spotted by X (formerly Twitter) user Musantro, the breach sees the leaked login credentials being for sale. Of course, this is an enormous security risk, especially for those who used the same combination of email and password for other sites, so it is recommended to change your Trading Paints password and do so on any site that used the same combination as well.iRacing's Senior DevOps Engineer Nicholas Bailey has confirmed the issue in a forum post, advising users to try and use a password manager for future passwords that are harder to crack. Trading Paints themselves are aware of the issues and have already begun work to try and fix the problem.
There had initially been some confusion as to whether or not it would be safe to use the Trading Paints downloader after changing passwords. Trading Paints have answered that question in another Tweet, stating that login credentials are not stored in the downloader itself - however, until there is confirmation that nothing else within the software has been compromised, it might be a good idea to stop using Trading Paints altogether and uninstall it to avoid any potential issues.
How is iRacing Going to React?
With Trading Paints, iRacing users can run custom liveries on their cars and see the designs of anyone else who uses the application when on track. This means easy distribution of paint schemes, as they are all downloaded automatically when entering a session so the user only has to set things up once to see the liveries of their competitors.After the security breach at hand, it could be a possibility that iRacing is going to look into implementing such a service themselves rather than having users rely on a third-party application that could potentially harm their iRacing accounts.
