Badmovies.org Forum

Other Topics => Off Topic Discussion => Topic started by: Allhallowsday on August 05, 2012, 11:42:40 PM

Title: New password for Badmovies.org Forum
Post by: Allhallowsday on August 05, 2012, 11:42:40 PM
What is this?  I received an email, the text of which is copied below.  I've not forgotten or ever changed my password: 

Dear Allhallowsday,

This mail was sent because the 'forgot password' function has been applied to your account. To set a new password click the following link:

http://www.badmovies.org/forum/index.php?action=reminder;sa=setpassword;u=1302;code=71c931c9b5

IP: 201.73.178.98

Username: Allhallowsday

Regards,
The Badmovies.org Forum Team.
Title: Re: New password for Badmovies.org Forum
Post by: bob on August 06, 2012, 12:46:09 AM
I got the samething.  :question:
Title: Re: New password for Badmovies.org Forum
Post by: dean on August 06, 2012, 01:09:37 AM
Same here. Looks like someone's trying to join the fun.
Title: Re: New password for Badmovies.org Forum
Post by: dean on August 06, 2012, 01:11:24 AM
Same I.P too. Incidentally some should move this to the trouble tickets so it gets attention
Title: Re: New password for Badmovies.org Forum
Post by: Psycho Circus on August 06, 2012, 04:05:17 AM
Me too, just found it in my spam inbox.  :question:
Title: Re: New password for Badmovies.org Forum
Post by: Trevor on August 06, 2012, 04:38:07 AM
I received nothing like this but it is a bit weird.
Title: Re: New password for Badmovies.org Forum
Post by: Andrew on August 06, 2012, 06:51:46 AM
This was someone trying to brute force guess some account passwords.  When that didn't work (the system only allows a few before it temporarily locks out more attempts) it appears they, for some reason, used the forum's forgot password function.

Two possibilities exist.  One is that they hoped the lost password function would allow them to guess a secret phrase and still gain access to the account.  The other is that the attack was carried out by a piece of software, and either by nature or setting it resorts to the lost password function.

The attempts came from a ISP in Brazil.  None of them gained access to any account.  I've now put a permanent block in place, but that's just a temporary measure for anyone who really wants to get into an account.  Please always use a strong password that will resist attempts to guess it.
Title: Re: New password for Badmovies.org Forum
Post by: Allhallowsday on August 06, 2012, 09:00:43 AM
Thank you Andrew

In future, I will post any such problems in the Trouble Ticket section; I didn't even think of it. 
Title: Re: New password for Badmovies.org Forum
Post by: Flangepart on August 06, 2012, 06:15:09 PM
Thanks for the heads up, guys.
Title: Re: New password for Badmovies.org Forum
Post by: BoyScoutKevin on August 16, 2012, 05:28:39 PM
Not to belabor the point, but I got the same message, but it is good to know I am not going mad, as I did wonder if I had asked for a new password, but when I was able to log one with the old password, I just ignored the message.