New logging in method for forums

[northofnowhere]

     Due to recent security related issues, we have switched the method of logging in tot he forums from a user name to an email address.  This will help alleviate certain types of attacks on our login system.  This is not necessarily a permanent solution, just one of many the IT Department is attempting to further protect MOC and the membership from those who would do us and our cause harm.  While we constantly update software and monitor security and rarely announce changes, we wished to convey this one in an announcement as it is a break from what we are all used to.

     The IT Department at MOC hopes this does not unnecessarily inconvenience anyone and any issues or problems should go directly to "it at miopencarry.org".

Sincerely,

Jason E. Reese
MOC IT Department

[CV67PAT]

Coincidentally, I received email notifications of about 6 failed log-on attempts for my account, a few days ago. The IP addresses were spoofed from several locations around the country and a couple from the UK.

[TheQ]

Coincidentally, I received email notifications of about 6 failed log-on attempts for my account, a few days ago. The IP addresses were spoofed from several locations around the country and a couple from the UK.

Ditto. I think this is in response to that. Maybe somebody l33t in Lansing is trying to mess with us over CADL?

[northofnowhere]

I presumed the same as well.  After looking into it quite extensively it has more to do with a generic attack.  In the last month there are quite a pile of other websites, all non related, who are under the same type of threat.  It is a specific type of attack many SMF based forums are under, unrelated to our mission or goals, but just another new thing intelligent people do who have no moral values or proper supervision.  Welcome to the internet.

-jason r.

[METL]

FWIW someone made around 6 attempts on my account as well....     my password pwned them.   (probably not really)

[Super Trucker]

Something else I have noticed over the last few days is the forum time is off. Right now it is 1 hour slow, I looked but didn't see anyplace I could change is this something for the IT guys or am I missing a place with more options?

[northofnowhere]

I believe I addressed the time issue last week.  I think it "was" off and now is on and correct.  Check to make sure you don't have a time offset set up or auto detected.

Profile > Forum Profile > Look and Feel > Set "Time Offset" to 0

With that set up you should be looking at eastern time in relation to the forums.

-jason r.

[Super Trucker]

Thank you Jason, it was set to -1

[kubel]

Ditto. I think this is in response to that. Maybe somebody l33t in Lansing is trying to mess with us over CADL?

It's just a spam bot or two. I wouldn't worry about it too much.

[jeffsayers]

Or perhaps when and if a username and password match is found, the thing simply takes that combination and tries to log into every bank known to man (or computer) to try to find a rich person without enough sense to use a different password for financial accounts?

[northofnowhere]

I think everyones got the jist of this, unstickying to clean up the sticky stuff.