Page 1 of 1

Login Issues

Posted: July 18th, 2011, 5:54 pm
by Janeway
I just wanted to report that I was having login issues. The forum apparently believed I exceded my login attempts, which I assume is set to one, before being asked to fill in the CAPTCHA form (those images are horrible - it took me five times if not more to type in the right response). However, seeing as I hadn't tried to login till a few moments ago, I don't see how this is possible. The password used each time was the same password since I use services such as 1Password and LastPass. Naturally, so was the username. Perhaps an engineer can look into this. I'd rather not have to deal with those horrible CAPTCHA images again or it'll take another five minutes just to login.

Re: Login Issues

Posted: July 18th, 2011, 6:04 pm
by Resistance
It is possible someone tried to brute-force your login. This has happened to me twice thusfar, however my passcode is secure (and I change it often enough that nobody knows the code except me).

Re: Login Issues

Posted: July 18th, 2011, 6:22 pm
by Picard
Yes, Digi is trying everything he can to gain access to our internal forums. He can't get any sleep if he dosen't read it.

So it might have been him.

Re: Login Issues

Posted: July 18th, 2011, 7:09 pm
by Silverado
I'll have a look at the logs when i get home.

Re: Login Issues

Posted: July 19th, 2011, 12:39 am
by Janeway
Well that probably explains it. Too bad Digi doesn't quite understand that he'll be sitting there for years (unless he owns a Google server farm) for any truly complex passwords which I assume we are all using in this day of age. Nevertheless, I'll go generate a new password for FC.

Re: Login Issues

Posted: July 19th, 2011, 1:40 am
by Alexraptor
Digi gets a cookie if he ever manages to crack mine. :P

60+ digit alpha-numeric with both upper and lower case characters. :lol:

Re: Login Issues

Posted: July 19th, 2011, 2:32 am
by Resistance
95 char alpha-numeric mixed case, with symbols and numbers, randomly generated every 2 weeks. I don't think he's going to succeed on getting through mine... :P

Re: Login Issues

Posted: July 19th, 2011, 3:21 am
by Silverado
Anything more then 15 charectors is overkill and a waste of time considering the threat

Re: Login Issues

Posted: July 19th, 2011, 5:36 pm
by Janeway
Ciaran wrote:
Alexraptor wrote:Digi gets a cookie if he ever manages to crack mine. :P

60+ digit alpha-numeric with both upper and lower case characters. :lol:
Alpha-numeric is easy. You should throw in a few symbols, you'd be amazed how much more "secure" your password would be as it's harder to brute force
Yes, the moment you add special characters in addition to the upper and lower case alphanumeric's, it becomes a lot harder to brute force your password without a substantial amount of time and resources that the average users (read: Digi, 99.9% of so called "hackers") will never be able to get their hands on. Of course, this is considering you don't use any dictionary words in the password and whatever mechanism for authentication is also secure.