Attention - Password and Security Update

[HalfPint]

Hello all,

Over the next few days we will be implementing some changes to our forum password strength and password expiration policies. To make sure you continue having the best experience possible on the community, we regularly monitor the site and the Internet to keep everyone's account information safe. We've recently become aware of a potential risk to some accounts coming from outside of this community. Just to be safe, we are implementing the following changes to improve security even further:

1) We are asking everyone to change their passwords (and will force a one time reset). Along with every user on the forum, new passwords will need to be more complex, and can't be simple words (sorry, you can't have "fluffy" as your password anymore!). Please use a password unique to this community. Reusing passwords can expose your account indirectly when other websites (Twitter, Linkedin, Badoo, etc) are compromised; and

2) Your passwords will expire on a 365 day basis. When you login on the 366th day, you will have to change it.

We'll also be sending out an email to users to let them know about the changes, in upcoming weeks.

Thanks all,

Helena

Community Management

[danham]

Please reconsider some of these new policies. It is absurd to think that having a simple password here puts me at risk of anything beyond some potential embarrassment if my account gets hacked and used to post something I didn't write. The requirement of 10 characters, symbol, expiration, etc. gives a false impression of security (a stolen 20-character password is just as easy to harvest, use and sell online as a 6-character one) and only makes it more difficult to use the forum on my various devices.

The warning about not using the same password across multiple sites is valid, but treating a forum like this as if it were my banking site is overkill and irritating.

Thank you,

-dan

[TelemarkTumalo]

I hear you Dan. Just spent 2 weeks on the road, and without my laptop, that had all of my logins, passwords, etc., I could not access my f800 account, because I could not remember my new LI and PW that the f800 forum "brain trust" required that I put in a few weeks ago. Their system was hacked, corrupted and my secret info. about my 2009 f800 ST was potentially violated. Lord knows I wouldn't want my fork oil weight known by an outsider.

[oxytotl]

This appeared in my spam box. Have not opened anything apart from the main text.



Is this from Verticalscope?

[guidoveloce]

It seems to be a mail from VerticalScope, if I remember right, I've also received the same mail but I've deleted it. Anyway, this is only the notifications that some database have been hacked. We already know it, the same text of this mail was posted on the forum.

[notacop]

The management is just trying to get us to go away and leave the forum to the total sign-in geeks.
Didn't we go through this recently?
Seems when companies buy up forums because they are a potential source income because of popularity they don't care enough to fortify the web sites.
Kinda like Microsoft not offering anti spam and malware software for free. We'll make you vulnerable and then require you to accept our incompetence.

[oxytotl]

It seems to be a mail from VerticalScope, if I remember right, I've also received the same mail but I've deleted it. Anyway, this is only the notifications that some database have been hacked. We already know it, the same text of this mail was posted on the forum.

Sorry Guido, I obviously missed that post although of course I was aware of the password problems. It was just odd that it ended up in my spam folder - and it did look like spam and Verticalscope isn't a name that's at the forefront of my shrinking brain.

[TelemarkTumalo]

Here comes WikiLeaks

[notacop]

"but don't worry about old age, it doesn't last that long!"

Yeah, it's horrible, man. Every dawning is one day closer to death. Just keep trying something new!

[notacop]

Just got an email from this site, ostensibly, letting me know that my account had been breached on another site. I need to change my password, etc.
Anyone else getting a similar notice?


DragonByte Security has detected that your account has been the subject of a breach on another site. We recommend you change your password and enable two-factor authentication to stop your account from being a target of further breaches.

Exactis (exactis.com) happened on 05-31-18, added to the system on 15:00, 25th Jul 2018

Just spent some time looking at my page info and don't see where I change passwords. Any help out there?

[guidoveloce]

no, I've never received a warning like that. but for further security I would change my pw... honestly, I would haven't do it, but since I have an admin account I pay more attention to the security.

[Sundog52]

no, I've never received a warning like that.....

+1

[FirstBMW]

So my new password is "NotMyPassword" seems safe enough

[Richard230]

I prefer "1234". "password" is also a good one.

But, no. I haven't received a warning like that - yet.

[WildWilly]

I tried to reset my password to "givemeafreakingpasswordorI'llhuntyoudownandkillyo u" but was told it was already taken.

[oxytotl]

I wondered if "thisisnotmypassword" would be better? Not so many letters to type.

[notacop]

in the name of international security I guess I'll ignore the message I got. What could be worse than the Schwartz Wald troll trolling someplace?
Besides, I still have no idea how to change my password.

[guidoveloce]

Besides, I still have no idea how to change my password.

in the user CP you can change a lot of things, including the pw.

[Daboo]

That same kind of message is coming to other web forums as well.

FWIW, I have different levels of passwords. Forums get the same thing. If one gets breached, no harm done.

My paranoia level and passwords go up once we start getting financial data mixed in.

So if someone gets my F800Riders password...I don't care.

Chris

[steve n rose]

Just got an email from this site, ostensibly, letting me know that my account had been breached on another site. I need to change my password, etc.
Anyone else getting a similar notice?


DragonByte Security has detected that your account has been the subject of a breach on another site. We recommend you change your password and enable two-factor authentication to stop your account from being a target of further breaches.

Exactis (exactis.com) happened on 05-31-18, added to the system on 15:00, 25th Jul 2018

Just spent some time looking at my page info and don't see where I change passwords. Any help out there?

We received a similar email a couple of days ago and thought it was a scam of some sort so deleted it.

[notacop]

user CP, ah, found it.

[HalfPint]

Just got an email from this site, ostensibly, letting me know that my account had been breached on another site. I need to change my password, etc.
Anyone else getting a similar notice?


DragonByte Security has detected that your account has been the subject of a breach on another site. We recommend you change your password and enable two-factor authentication to stop your account from being a target of further breaches.

Exactis (exactis.com) happened on 05-31-18, added to the system on 15:00, 25th Jul 2018

Just spent some time looking at my page info and don't see where I change passwords. Any help out there?

I haven't seen something like this.

Can you forward that email to me, please?

I will send you a PM with my contact information.

- Cricket

[notacop]

Bombs away!

[WildWilly]

I'm worried that someone will steal my bank password and get all $4.87.

[HalfPint]

I haven't seen something like this.

Can you forward that email to me, please?

I will send you a PM with my contact information.

- Cricket

We do have added security on this site, but it looks like a plugin may have gotten glitchy and sent out some false alerts. The tech team is looking into resolving this.

Just in case, I want to remind everyone that it is never a good idea to use the same password on multiple sites. If you do, you might want to consider changing it.

- Cricket

[guidoveloce]

HalfPint, please could you set the "thanks" button to appear in any post and not only in the first post of each thread?
being sure of your solicitude I thank you in advance.

guido

[oxytotl]

HalfPint, please could you set the "thanks" button to appear in any post and not only in the first post of each thread?
being sure of your solicitude I thank you in advance.

guido

I would have preferred to press the 'thanks' button rather than 'like' to yours and Halfpints posts ...............

[FirstBMW]

I'm worried that someone will steal my bank password and get all $4.87.

Holy crap how did you get so rich?
My account has about enough money in it to keep it open is all lol

[notacop]

That $4.87 represents a lifetime of scrimping and saving, being frugal and diligent in spending and letting the tab at the bar go out of sight!
I can see your retirement being one of unending good times!

[HalfPint]

HalfPint, please could you set the "thanks" button to appear in any post and not only in the first post of each thread?
being sure of your solicitude I thank you in advance.

guido

Let me see what I can find out on this.

- Cricket

[guidoveloce]

hi Cricket, thanks. your colleague Niall has already tried to set it, but seems that the system doesn't record the change, so he warned the tech staff.

[HalfPint]

hi Cricket, thanks. your colleague Niall has already tried to set it, but seems that the system doesn't record the change, so he warned the tech staff.

They are still trying to fix this!

- Cricket