Password update prompt

Former_MSE_Andrea · 2018-02-09 15:09:52

Hi everyone As eagle-eyed regular forum members have noticed already, we're asking you all to update your passwords. You should be doing this regularly for your own peace of mind. Some hadn't been updated for some time and we want to make sure you change them regularly. Thanks for your patience. Have a great weekend. Andrea

Options

Comments

tronator Posts: 2,857 Forumite

10 February 2018 at 3:47PM
Options
jamesd wrote: »

MSE has an ongoing project to add encrypted connection support. It's not supported by this version of the forum software and it's not easy for the biggest places to upgrade or change forum software.

I highly doubt that the vBulletin doesn't support SSL.
https://www.vbulletin.org/forum/showpost.php?p=2574789&postcount=3

SSL should transparent to the software used. You just need to use relative URLs throughout your site instead of hard coding http:// into the script and css URLs.

The only problem I see is external mixed content. But most (if not all) file hosting services are ussing SSL these days. So it's only a matter of changing links of embedded content to https.

0
onomatopoeia99 Posts: 6,964 Forumite

10 February 2018 at 3:51PM
Options
MSE_Andrea wrote: »

As eagle-eyed regular forum members have noticed already, we're asking you all to update your passwords. You should be doing this regularly for your own peace of mind.

Please explain why. Unless your database has been compromised ( which you would tell us, wouldn't you?) there should be no need to change passwords every five minutes.

Actually, what would be more helpful to know is why the main website is served over https (indeed it is force redirected there if one connects via http) despite containing mainly static content, yet this part of the site which requires a login has no certificate and cannot be reached over https. That's backwards.

Proud member of the wokerati, though I don't eat tofu.Home is where my books are.Solar PV 5.2kWp system, SE facing, >1% shading, installed March 2019.Mortgage free July 2023
0
luxor4t Posts: 11,125 Forumite

10 February 2018 at 4:17PM
Options
I tried replacing my old password with the same word but it seems my 'perfectly OK for the last however many years' password was too short for MSE now. So I have replaced it with a different word of exactly the same length - which was accepted.
Confused? Yes, me too.

I can cook and sew, make flowers grow.
0
jamesd Posts: 26,103 Forumite

10 February 2018 at 4:39PM edited 10 February 2018 at 10:15PM
Options
tronator wrote: »

I highly doubt that the vBulletin doesn't support SSL.

MSE is using version 3.8.4 which was released in 2009 then heavily customised. Whatever the details this old version was given by MSE as a reason for not yet using https here.

0
tealady Posts: 3,743 Forumite

10 February 2018 at 8:31PM
Options
Lorian wrote: »

As a matter of good security you should make sure your email address and password on other sites, like Amazon and Ebay are NOT the same as you have here or on any other forum.

Without any further information it would still be prudent to change your password on any other sites where you may have used the same password with the same email address.

And as annoying as it may seem, don't change your password here back to the same as it was.

The password I use for MSE is nothing like the one I use for important stuff like baning.
My MSE password is one I use for general chat room stuff so I couldn't give a monkeys if people guess what it is.;)

Find out who you are and do that on purpose (thanks to Owain Wyn Jones quoting Dolly Parton)
0
GibbsRule_No3. Posts: 391 Forumite

10 February 2018 at 9:40PM
Options
Yay! They fixed it for me and on a weekend. Back to my old user name. Thank you MSE and two others who know who they are. Darn maybe it is not fixed, this is the new name.

Paddle No 21:wave:
0
GibbsRule_No3 Posts: 610 Forumite

10 February 2018 at 9:48PM
Options
Okay, so I logged out of the new name and logged in again with the old one, so hopefully this post does appear as my old self. :j

Paddle No 21 :wave:
0
[Deleted User] Posts: 26,612 Forumite

10 February 2018 at 10:18PM
Options
GibbsRule_No3_with_3_posts_. wrote: »

Darn maybe it is not fixed, this is the new name.

GibbsRule_No3_with_643_posts wrote: »

Okay, so I logged out of the new name and logged in again with the old one, so hopefully this post does appear as my old self. :j

Well done Gibbs (No4?)

0
Alan_Cross Posts: 1,226 Forumite

11 February 2018 at 1:29PM
Options
This all smacks of MSE having been hacked... and I mean big time...

What are we not being told?

0
[Deleted User] Posts: 0 Newbie

11 February 2018 at 3:16PM edited 11 February 2018 at 3:40PM
Options
arghh drove me crazy as it wouldn't accept my email address even though Ive been using it for 2 years, had to use another email before it let me back into MSE with a new password.Never mind

0

This discussion has been closed.

★ ★ ★ Meet your Ambassadors

MSE News

Bank of Scotland, Halifax and Lloyds to close 177 branches in 2024/25 – here's the full list, plus alternatives
Bank of Scotland, Halifax and Lloyds, which are all part of the Lloyds Banking Group, will shut at least 177 of their bank branches in 2024 and 2025, the Group has confirmed.
Barclaycard's cutting minimum repayments – you could be in debt YEARS longer paying DOUBLE the interest
If you've got debt on a Barclaycard, it's likely the minimum you have to repay each month will be cut from July. If you're unaware, and don't act, you could stay in debt for many years longer and pay possibly £1,000s more in interest.
NatWest, RBS and Ulster Bank to close at least 100 branches in 2024/25 – here's the full list, plus alternatives
NatWest, Royal Bank of Scotland (RBS) and Ulster Bank, which are all part of the NatWest Group, will shut at least 100 of their bank branches in 2024/25, after RBS announced a further 18 closures.
Co-op Bank customer? You could be moved to Coventry Building Society in future – here's what's happening
The building society has today agreed to a potential takeover of the high street bank – though it's still very early days and the deal needs regulatory approval.
Got a text, email or letter from the Met Police? Don't ignore it – you may need to act to protect yourself from scams
If you got a text message or email from the Metropolitan Police between 4pm and 6pm on Wednesday 17 April – or you get a letter in the next few days – don't ignore it.
Save up to £1 on your takeaway coffee – while saving the planet
Many of us regularly reach for a cup of coffee or tea to give us a caffeine boost, but if you’re out and about and can't bring a thermos from home, the cost of this can quickly mount up.
Chase customer? Check if you can get its boosted 5.1% easy-access saver
If you have a Chase current account, you may be able to get a table-topping 5.1% easy-access savings rate to go with it, as the bank has launched a new, temporary bonus offer for some existing customers.
New online state pension boosting tool promised to Martin Lewis hit by delays – here's what you need to know
The tool was first promised to MoneySavingExpert.com founder Martin Lewis on ITV's The Martin Lewis Money Show Live last summer and was expected to launch before the end of the 2023/24 financial year.
Spotify to hike prices by up to £24 a year – here's what's happening
If you've got a Spotify Individual, Duo or Family account you'll see prices rise by up to £2 a month (equivalent to £24 a year) in a month's time, the music streaming service has announced.

View All

Password update prompt

Comments

Categories

Get our FREE Weekly email full of deals & guides - and it’s spam-free