Golden-Road.net

Studio 46 - Non-TPiR Discussion => Technical Support => Topic started by: JayC on July 30, 2019, 03:57:27 PM

Title: Forgot Password email
Post by: JayC on July 30, 2019, 03:57:27 PM
I received an email saying the Forgot Password function was applied to my account, but I did not do anything myself. Is this just an error, is it just that I was required to change my password, or is it because someone tried to log in to my account? As a precaution I did change my password.
Title: Re: Forgot Password email
Post by: LiteBulb88 on July 30, 2019, 04:34:06 PM
I got one too. No idea why.
Title: Re: Forgot Password email
Post by: mechamind on July 31, 2019, 12:04:22 AM
I didn't get one.
Title: Re: Forgot Password email
Post by: Thrasher on July 31, 2019, 02:35:01 PM
I did as well. 
Title: Re: Forgot Password email
Post by: Thrasher on July 31, 2019, 02:53:10 PM
Access to the boards for guests has been temporarily revoked.  To access any feature of the forums beyond the login screen, a user must register or log in.
Title: Re: Forgot Password email
Post by: TPIR_rules on July 31, 2019, 03:10:34 PM
Access to the boards for guests has been temporarily revoked.  To access any feature of the forums beyond the login screen, a user must register or log in.
Why?
Title: Re: Forgot Password email
Post by: mechamind on July 31, 2019, 03:10:51 PM
Never mind. I just got one an hour ago.
Title: Re: Forgot Password email
Post by: JayC on July 31, 2019, 03:13:15 PM
I received another password reset email a little bit earlier today.
Title: Re: Forgot Password email
Post by: therealcu2010 on July 31, 2019, 03:17:12 PM
For what its worth, I've banned a lot of spambot accounts lately... not sure if it's related.
Title: Re: Forgot Password email
Post by: mechamind on July 31, 2019, 08:40:09 PM
Another thing: It mentions an IP address in the range of 68.X.X.X, which does not match any of my common locations. If it's not an G-R server address, it's probably the IP where the "clicks" are coming from (though it's wouldn't surprise me if it's coming from more than one computer).
Title: Re: Forgot Password email
Post by: ThomHuge on July 31, 2019, 10:25:28 PM
Another thing: It mentions an IP address in the range of 68.X.X.X, which does not match any of my common locations. If it's not an G-R server address, it's probably the IP where the "clicks" are coming from (though it's wouldn't surprise me if it's coming from more than one computer).

There are sites out there that can localize an IP address; I'd be rather curious to see what result you got if you ran the IP in question through one of them.

/Related: I got a security alert from one of my accounts last week that someone was trying to get into it with the password-reset function; it was from a country on the other side of the world that I've never even heard of, and because it's not where I log in from every day, it locked the account immediately until I did some things on my phone, and the bad guys never got in...but it's a good reminder that the bad guys are always trying to do bad things, and all it takes for them to do it is one mistake from us.
Title: Re: Forgot Password email
Post by: Thrasher on August 01, 2019, 01:53:21 AM
The registration restriction was enacted to test for a few possible security vulnerabilities.

I have no reason at the moment to believe any accounts, passwords, or data was compromised, and will be lifting the restriction shortly. 

The 2.1 release of our forum software has hit release candidate 2 and I'm considering their timeframe for release of the final version and the stability of the release candidate to potentially upgrade.  2.0.x is several years old at this point, although security patches have continued to be put out. If my involvement with the site IS being being stepped up (moved to address the security certificate issue today but hit a paywall issue I don't have the credentials to move past), may also look at other forum software options.