Attention - Password and Security Update - Civinfo
 92Likes
Reply
 
LinkBack Thread Tools
post #1 of 134 (permalink) Old 14th June 2016, 15:58 Thread Starter
Administrator
 
Civ_Admin's Avatar
 
Join Date: 8th September 2014
Posts: 1,221
Thanks: 38
Thanked 272 Times in 134 Posts
iTrader: (0)
Eco display Eco display
Attention - Password and Security Update

Hello all,

Over the next few days we will be implementing some changes to our forum password strength and password expiration policies. To make sure you continue having the best experience possible on the community, we regularly monitor the site and the Internet to keep everyone's account information safe. We've recently become aware of a potential risk to some accounts coming from outside of this community. Just to be safe, we are implementing the following changes to improve security even further:

1) We are asking everyone to change their passwords (and will force a one time reset). Along with every user on the forum, new passwords will need to be more complex, and can't be simple words (sorry, you can't have "fluffy" as your password anymore!). Please use a password unique to this community. Reusing passwords can expose your account indirectly when other websites (Twitter, Linkedin, Badoo, etc) are compromised; and

2) Your passwords will expire on a 365 day basis. When you login on the 366th day, you will have to change it.

We'll also be sending out an email to users to let them know about the changes, in upcoming weeks.

Thanks all,

Helena

Community Management
Kremmen and Farqui like this.
Civ_Admin is offline  
Sponsored Links
Advertisement
 
post #2 of 134 (permalink) Old 15th June 2016, 18:52
drives a shed now
 
Car: 2007 CTS GT i-shift
Join Date: 9th June 2013
Location: UK GB
Posts: 1,429
Thanks: 1,039
Thanked 514 Times in 420 Posts
iTrader: (3)
Excellent to see you taking security seriously
Sure this may invoke some negative comments - that they've used the same password for years...

Last edited by onearmbandit; 15th June 2016 at 18:54.
onearmbandit is offline  
post #3 of 134 (permalink) Old 16th June 2016, 00:56
Supporter
 
chinkzsta's Avatar
 
Car: 07 CTR Nighthawk Black
Join Date: 14th May 2010
Location: London ENGLAND
Posts: 528
Thanks: 89
Thanked 64 Times in 62 Posts
iTrader: (5)
Could have given more notice though.. i didn't get any email and you've resetted my password so I couldnt log in and i thought someone had hacked my account as i sworn i didnt change the password on here.

Edit: seems to still work for me on tapatalk but cant login on the web since i havent received the reset email yet.

Last edited by chinkzsta; 16th June 2016 at 00:59.
chinkzsta is offline  
 
post #4 of 134 (permalink) Old 16th June 2016, 09:08
 
Join Date: 31st March 2008
Posts: 21
Thanks: 0
Thanked 0 Times in 0 Posts
iTrader: (0)
Quote:
Originally Posted by chinkzsta View Post
Could have given more notice though.. i didn't get any email and you've resetted my password so I couldnt log in and i thought someone had hacked my account as i sworn i didnt change the password on here.
Agreed - I sold my Civic 18 months ago and have not been on here for a number of years, so immediately assumed this was an identity theft attempt.


As I will not be contributing to this forum moving forward can one of the admins let me know how I can close my account and have my personal data (not my posts obviously, just email address etc) deleted please? Many thanks.
MattyB is offline  
post #5 of 134 (permalink) Old 16th June 2016, 09:14
Supporter
 
Join Date: 18th May 2010
Location: Sheffield, UK ENGLAND
Posts: 58
Thanks: 4
Thanked 7 Times in 7 Posts
iTrader: (0)
Quote:
Originally Posted by chinkzsta View Post
Could have given more notice though.. i didn't get any email and you've resetted my password so I couldnt log in and i thought someone had hacked my account as i sworn i didnt change the password on here.

Edit: seems to still work for me on tapatalk but cant login on the web since i havent received the reset email yet.


Just experienced the same thing here. Cannot log on using the website and don't receive an email when I try to reset my password.

Tapatalk however is working as normal.


Sent from my iPhone using Tapatalk
gatecrasher3 is offline  
post #6 of 134 (permalink) Old 16th June 2016, 10:10
nub
Banned
 
Join Date: 8th May 2010
Location: eastbourne GB
Posts: 2,020
Thanks: 41
Thanked 169 Times in 147 Posts
iTrader: (3)
How did you know my password was "fluffy" and why have you just told everyone ?


Sent from my iPhone using Tapatalk
nub is offline  
post #7 of 134 (permalink) Old 16th June 2016, 10:12
Administrator
 
Farqui's Avatar
 
Car: x'06 2.2 EX FK3 Milano
Join Date: 29th April 2014
Location: n.Notts ENGLAND
Posts: 17,798
Thanks: 5,716
Thanked 4,144 Times in 3,840 Posts
iTrader: (31)
Eco display Eco display
Garage
The password reset task is a farce, especially on a PC.

It won't let me login at all and I never get an email to reset either, even if I request a reset myself.

Tapatalk barf'd first thing too but seems to have sorted itself out now. *Update: mostly, although I was logged in I couldn't reply to this thread. Pfft.

I'm not the only one suffering, Jon_G contacted me via the TypeAccord forum.

The new layout and unable to login 'enhancement' are going to put people off fast. Someone has already posted above about unregistering.

@Civ_Admin need to sort this mess out!
Farqui is offline  
post #8 of 134 (permalink) Old 16th June 2016, 10:15
Administrator
 
Kremmen's Avatar
 
Car: MY13 1.8 EX Auto
Join Date: 7th January 2007
Location: West London ENGLAND
Posts: 20,944
Thanks: 857
Thanked 1,708 Times in 1,431 Posts
iTrader: (0)
Eco display Eco display
Garage
The board is dead this morning. 4 threads/posts in 2 hours !!!

It seems no one can login, I had to do a copy and paste the email password because typing it in manually didn't work.

Forum is wrecked now and people can't reregister because of the AE detector.
Kremmen is offline  
post #9 of 134 (permalink) Old 16th June 2016, 10:17
Administrator
 
Farqui's Avatar
 
Car: x'06 2.2 EX FK3 Milano
Join Date: 29th April 2014
Location: n.Notts ENGLAND
Posts: 17,798
Thanks: 5,716
Thanked 4,144 Times in 3,840 Posts
iTrader: (31)
Eco display Eco display
Garage
But you got a reset email?
Farqui is offline  
post #10 of 134 (permalink) Old 16th June 2016, 10:18
Administrator
 
Kremmen's Avatar
 
Car: MY13 1.8 EX Auto
Join Date: 7th January 2007
Location: West London ENGLAND
Posts: 20,944
Thanks: 857
Thanked 1,708 Times in 1,431 Posts
iTrader: (0)
Eco display Eco display
Garage
Yes

You know what's next. Another mass email exercise and we will all have to go through the same malarky tomorrow.
Kremmen is offline  
post #11 of 134 (permalink) Old 16th June 2016, 10:20
nub
Banned
 
Join Date: 8th May 2010
Location: eastbourne GB
Posts: 2,020
Thanks: 41
Thanked 169 Times in 147 Posts
iTrader: (3)
Works for me and I haven't changed **** (password still fluffy )


Sent from my iPhone using Tapatalk
nub is offline  
post #12 of 134 (permalink) Old 16th June 2016, 10:21
nub
Banned
 
Join Date: 8th May 2010
Location: eastbourne GB
Posts: 2,020
Thanks: 41
Thanked 169 Times in 147 Posts
iTrader: (3)
On tapatalk btw


Sent from my iPhone using Tapatalk
nub is offline  
post #13 of 134 (permalink) Old 16th June 2016, 11:21
SHOCKD
 
JackW's Avatar
 
Car: BMW 116i 2.0
Join Date: 4th November 2012
Location: Newcastle, UK ENGLAND
Posts: 4,351
Thanks: 208
Thanked 669 Times in 632 Posts
iTrader: (11)
I got a fright too..

Thought someone had attempted to log into my account and wanted a password reset..

Sat at work and shart my self so changed it straight away then searched for this thread.. Panic over..

Just got paypal info and s/c and acc numbers in my messages (now also been deleted) from previous sales.
JackW is offline  
post #14 of 134 (permalink) Old 16th June 2016, 11:31
 
Andrei V's Avatar
 
Car: 07' - 1.8 I-VTEC/SILVER MET.
Join Date: 10th May 2009
Location: Bucharest, Romania RO
Posts: 18
Thanks: 25
Thanked 3 Times in 3 Posts
iTrader: (0)
At this time I can't conect from PC. I always get a wrong user/pass message. I tried few times to reset the password, but I didn't receive any email on the adress provided- which is fully functional, by the way. Now I'm writing from Tapatalk, using my old credentials.

Sent from my MotoE2(4G-LTE) using Tapatalk
Farqui likes this.
Andrei V is offline  
post #15 of 134 (permalink) Old 16th June 2016, 11:54
Supporter
 
chinkzsta's Avatar
 
Car: 07 CTR Nighthawk Black
Join Date: 14th May 2010
Location: London ENGLAND
Posts: 528
Thanks: 89
Thanked 64 Times in 62 Posts
iTrader: (5)
I think you can only wait for the email from the admins with the new random generated password, then login with that and change it.
Andrei V likes this.
chinkzsta is offline  
post #16 of 134 (permalink) Old 16th June 2016, 11:58
 
Andrei V's Avatar
 
Car: 07' - 1.8 I-VTEC/SILVER MET.
Join Date: 10th May 2009
Location: Bucharest, Romania RO
Posts: 18
Thanks: 25
Thanked 3 Times in 3 Posts
iTrader: (0)
Seems the best option I have so far... Thanks!

Sent from my MotoE2(4G-LTE) using Tapatalk
Andrei V is offline  
post #17 of 134 (permalink) Old 16th June 2016, 12:59
Administrator
 
Farqui's Avatar
 
Car: x'06 2.2 EX FK3 Milano
Join Date: 29th April 2014
Location: n.Notts ENGLAND
Posts: 17,798
Thanks: 5,716
Thanked 4,144 Times in 3,840 Posts
iTrader: (31)
Eco display Eco display
Garage
Is the Wiki offline too? - I get a php error (convert to new).
Farqui is offline  
post #18 of 134 (permalink) Old 16th June 2016, 13:15
Administrator
 
Kremmen's Avatar
 
Car: MY13 1.8 EX Auto
Join Date: 7th January 2007
Location: West London ENGLAND
Posts: 20,944
Thanks: 857
Thanked 1,708 Times in 1,431 Posts
iTrader: (0)
Eco display Eco display
Garage
I've noted a few trying to reregister and being declines due to the AE detector.

Considering the lack of posts I reckon most are having issues.
Farqui likes this.
Kremmen is offline  
post #19 of 134 (permalink) Old 16th June 2016, 13:22
 
Join Date: 16th June 2016
Posts: 2
Thanks: 0
Thanked 0 Times in 0 Posts
iTrader: (0)
test
thisbites123 is offline  
post #20 of 134 (permalink) Old 16th June 2016, 13:26
 
Join Date: 16th June 2016
Posts: 2
Thanks: 0
Thanked 0 Times in 0 Posts
iTrader: (0)
Im sorry but just how bloody stupid do you have to be to run an untested come change on a LIVE SITE without making backups or snapshots of previous code?!

I do websites for a a living and anyone who knows anything about modifying code makes a test environment first to check its operational status before pushing it live and even then make a live snapshot of the code prior to any changes so reversions can take please in the event of a unforeseen hiccup.


This code change was pushed live without any testing, how on earth can any administrator do such a foolish thing and then just leave it?!
Farqui likes this.
thisbites123 is offline  
Reply

  Civinfo > Welcome > Site suggestions, feedback and rules

Quick Reply
Message:
Options

Register Now



In order to be able to post messages on the Civinfo forums, you must first register.
Please enter your desired user name, your email address and other required details in the form below.
Your User Name is the name that appears by all your posts on the forum, and so should not be your email address.

User Name:
Password
Please enter a password for your user account. Note that passwords are case-sensitive.

Password:


Confirm Password:
Email Address
Please enter a valid email address for yourself.

Email Address:
OR

Log-in













Similar Threads
Thread Thread Starter Forum Replies Last Post
S-Red Attention attention... please meet my little "red" Robbieee Gallery (8G) 68 3rd January 2009 16:25

Posting Rules  
You may post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

 
For the best viewing experience please update your browser to Google Chrome