Password reset questions and feedback

Wizard_of_Id

Martin only operates on twitter these days, has anyone with real concerns about security tweeted him about them?

ScorpiondeRooftrouser

venison wrote: »

What I'm about to say is in no way official but what I would ask is that people are patient, I have no idea why we are being asked to change our passwords and TBH I don't care as its no big deal.
What I do know is that MSE has been having problems with spammers, most of the spam is being removed so fast that most of you never see it, I spotted 2 spam threads at 7.24pm and 7.25 tonight and by 7.26 they were history.
And remember we are asked to be nice to other MSE members the same applies to MSE staff, or it should.
Thanks x

It's not about being nice! They are a commercial company. It's about being businesslike. It has nothing to do with individual members of staff; even if they do call themselves "MSEAndrea".

The suggestion that their security has been compromised and people's passwords and user names have been exposed to hackers is incredibly commercially damaging to them. They ought to be jumping to deny it, if it isn't true. Why aren't they? How long does it take someone to type "No"? The only sensible answer is that a decision has been made at a high level to stop someone denying it.

joeypesci

Looks like as its just a forum they might not have to actually admit to a breach

https://ico.org.uk/media/for-organisations/documents/1562/guidance_on_data_security_breach_management.pdf

[Deleted User]

Wizard_of_Id wrote: »

Martin only operates on twitter these days, has anyone with real concerns about security tweeted him about them?

"Martin" sold this site some years back. While he still receives a generous retainer for the use of his name and image, he no longer has any influence on the day-to-day running of this site. He certainly won't be involving himself in password re-sets!

savemoney

This password reset is a pain in the backside and so is the constant spam on here. Password reset has done nothing to cut down on spam. Take the easy way out rather than have proper procedures in place to resolve this issue.

redux

Other forum protections against spam: use better captcha mechanism on account signup, look at IP addresses of spammers and block some if that would be useful

MSE forum procedures: require new user passwords, censor acute accent on some but not all letters, convert some apostrophes to four digit numbers embedded in exclamation marks.

pineapple

jamesd wrote: »

They have told us why they did it and their past excellent disclosure record means there's no reason to worry about more.

They have told us why they did it
They have said they are addressing spam but for some reason have not responded to the hacking questions (asked repeatedly).

their past excellent disclosure record
Disclosure about other companies.

System

I really cant be doing with all this....

pineapple

Judi wrote: »

I really cant be doing with all this....

'Ground Hog Day' comes to mind :rotfl:

redux

Test post: I meant put the captcha on signing up a forum username account, not on trying to make a post

Edit: OK, not needed for this post, but it wanted one for the post I tried to do a couple of minutes ago, and then it didn't post it anyway.