Page 1 of 1

Login

Posted: Tue Feb 15, 2011 12:01 pm
by Polchraine
I hit the logout button by mistake.

I then went straight to Login and got the "you have exceeded the maximum number of login attempts ... " message. One correct login and I exceed teh limit? Something is wrong.

Re: Login

Posted: Tue Feb 15, 2011 12:08 pm
by Christel
I'll look into it and get back to you.

:D

Re: Login

Posted: Tue Feb 15, 2011 12:23 pm
by Christel
I have checked your account and it all looks fine.
There is a thread in GOM called Login as well, could I ask you to read that?
I am sure that is the explanation to what happened to you.

It looks like we more and more are seeing login attempts from spammers.
Be that real or machines.

Re: Login

Posted: Tue Feb 15, 2011 1:32 pm
by Ovenpaa
This is my theory:

A forum member is logged in as usual, everything is OK and he is reading new posts/posting and enjoying himself etc. Meanwhile a nasty spam server connects to full-bore.co.uk, traverses the user list and then selects a small block of users at random and attempts to login as using legitimate user names with a list of well chosen passwords, typically:

1) User name as password
2) The word password as password
3) full-bore as password
4) FULL-BORE as password - this is 4th attempt to the CAPTCHA prompt kicks in, the spam server moves to another site/user (They need to be fairly discreet or site admins will spot this in the logs and block the spam server IP address)

Meanwhile the legitimate forum user logs off as usual unaware of the attempted login using his/hers credential and without seeing anything unusual and takes the dog for a walk or whatever, comes back an hour later, attempts to login and is presented with CAPTCHA prompt and wonders what on earth is happening.

The good news is he site has the CAPTCHA prompt set to kick in after three failed login attempts, the bad news is defeating CAPTCHA is becoming easier by the day, if we do see this I would suggest a tougher CAPTCHA system be installed, this will have implications on those with waning eyesight :(
Oopps

Re: Login

Posted: Tue Feb 15, 2011 2:08 pm
by dromia
You don't mean copying that pished text into a box do you?

I never get that right and you only get three attamps at that too, thats me b******d then. :(

Re: Login

Posted: Tue Feb 15, 2011 2:19 pm
by Christel
Dromia,

Hopefully it will never get to that, Ovenpaa was just explaining to Polchraine what he thinks is happening when the text appears for no apparent reason.

Re: Login

Posted: Tue Feb 15, 2011 2:41 pm
by Ovenpaa
...and the good news is the Viking can reset passwords in the Abyss, always assuming the forum member knows how to get hold of her and hasn't hacked her off LMAO

Re: Login

Posted: Wed Feb 16, 2011 6:36 pm
by Polchraine
christel wrote:I'll look into it and get back to you.

:D
I knew i had seen it somewhere