World of KJ http://www.worldofkj.com/forum/ |
|
Brute Force Attack -- Please Read http://www.worldofkj.com/forum/viewtopic.php?f=3&t=61345 |
Page 1 of 1 |
Author: | Eagle [ Tue Feb 22, 2011 9:29 am ] |
Post subject: | Brute Force Attack -- Please Read |
All, I believe your accounts have, for the most part, been unsuccessfully attacked by a malicious party attempting to brute-force account login credentials. The board includes several features to prevent these types of attacks, and I have since added additional restrictions to help prevent the attacks. In the interim, it would be helpful if all users would change their password. This can be done via the User Control Panel -> Profile -> Edit Account Settings. If you believe your account has been compromised, please contact me via email and we will confirm your identity and help you reset your account. Thanks, Karl |
Author: | Eagle [ Tue Feb 22, 2011 9:42 am ] |
Post subject: | Re: Brute Force Attack -- Please Read |
After more research, it appears the attacks are coming from a russian server, it also appears WoKJ is not alone in being attacked. |
Author: | Argos [ Tue Feb 22, 2011 9:56 am ] |
Post subject: | Re: Brute Force Attack -- Please Read |
If you make me an administrator, I might be able to stop it. |
Author: | Eagle [ Tue Feb 22, 2011 10:01 am ] |
Post subject: | Re: Brute Force Attack -- Please Read |
If you have valid suggestions, please feel free to post them. |
Author: | Price [ Tue Feb 22, 2011 11:34 am ] |
Post subject: | Re: Brute Force Attack -- Please Read |
OK! Who pissed off Mr. R? |
Author: | Korrgan [ Tue Feb 22, 2011 3:39 pm ] |
Post subject: | Re: Brute Force Attack -- Please Read |
Anything worthy of a ban I've done recently was this Russian bitch hacking my account. Yu hear that, Lecter? |
Author: | Proud Ryu [ Tue Feb 22, 2011 4:05 pm ] |
Post subject: | Re: Brute Force Attack -- Please Read |
Maybe it's the guy at the bottom of this thread viewtopic.php?f=12&t=61114&p=1662701#p1662701 |
Author: | Eagle [ Tue Feb 22, 2011 5:07 pm ] |
Post subject: | Re: Brute Force Attack -- Please Read |
I don't think so, it doesn't seem to be WoKJ specific, rather phpbb specific. |
Author: | Jmart [ Tue Feb 22, 2011 5:42 pm ] |
Post subject: | Re: Brute Force Attack -- Please Read |
How can we recognize if our account has been compromised? |
Author: | Eagle [ Tue Feb 22, 2011 6:11 pm ] |
Post subject: | Re: Brute Force Attack -- Please Read |
If you can still login, it's safe to assume it hasn't been. Still a good idea to make sure your password has at a minimum letters and numbers, and ideally a symbol. A password with letters, numbers, symbols and no actual words is almost impossible to brute force attack. |
Author: | i.hope [ Tue Feb 22, 2011 9:17 pm ] |
Post subject: | Re: Brute Force Attack -- Please Read |
I'm scared. |
Author: | Price [ Tue Feb 22, 2011 9:19 pm ] |
Post subject: | Re: Brute Force Attack -- Please Read |
I changed my password just in case,but it still asks me for that CAPTCHA 'enter words' thingy. Is that normal? |
Author: | Eagle [ Tue Feb 22, 2011 10:07 pm ] |
Post subject: | Re: Brute Force Attack -- Please Read |
It will ask if you've had more than 2 failed attempts recently. A lot of people will experience it because the brute force attack basically means they went through the member list and tried to guess the password. Only on a very small handful of accounts did they try more than 3 times, typically once they hit the captcha they move on to the next account. |
Author: | Price [ Wed Feb 23, 2011 5:07 am ] |
Post subject: | Re: Brute Force Attack -- Please Read |
It did ask me that with the old password, but it also did ask me with my first attempt with the new password, saying I had tried too many logins, while as I said in reality it was my first try. |
Author: | Bradley Witherberry [ Wed Feb 23, 2011 8:21 am ] |
Post subject: | Re: Brute Force Attack -- Please Read |
Fortunately, my account seems untampered with - - I'm still the same old Bradley Witherberry who thinks that Inception is the finest film ever made (next to TDK, of course). |
Author: | Eagle [ Wed Feb 23, 2011 9:13 am ] |
Post subject: | Re: Brute Force Attack -- Please Read |
Price wrote: It did ask me that with the old password, but it also did ask me with my first attempt with the new password, saying I had tried too many logins, while as I said in reality it was my first try. It doesn't instantly reset, there are a few events that trigger resetting the number of failed logins, but i'm not sure what they are off the top of my head. |
Author: | Mister Ecks [ Wed Feb 23, 2011 9:40 am ] |
Post subject: | Re: Brute Force Attack -- Please Read |
Someone please hold me. |
Author: | Chippy [ Wed Feb 23, 2011 3:48 pm ] |
Post subject: | Re: Brute Force Attack -- Please Read |
It was Loyal. |
Author: | TonyMontana [ Wed Feb 23, 2011 6:33 pm ] |
Post subject: | Re: Brute Force Attack -- Please Read |
I've changed my password to studmonkey70-1. My question: Eagle suggested using a password with no actual words, but would studmonkey be ok? The way I see it, it is two actual words, but when combined together, it makes zero actual words. Please let me know if this sounds secure enough, if not I'll change it again. |
Author: | David [ Wed Feb 23, 2011 6:41 pm ] |
Post subject: | Re: Brute Force Attack -- Please Read |
lol... ![]() |
Author: | matatonio [ Mon Feb 28, 2011 1:11 am ] |
Post subject: | Re: Brute Force Attack -- Please Read |
i dont know what the hell just happen but i believe ive been "attacked", but all is well i guess :/ |
Author: | Price [ Mon Feb 28, 2011 5:41 am ] |
Post subject: | Re: Brute Force Attack -- Please Read |
matatonio wrote: i dont know what the hell just happen but i believe ive been "attacked", but all is well i guess :/ What?!?! The Kohl's guy again? ![]() |
Author: | matatonio [ Mon Feb 28, 2011 8:47 pm ] |
Post subject: | Re: Brute Force Attack -- Please Read |
Price wrote: matatonio wrote: i dont know what the hell just happen but i believe ive been "attacked", but all is well i guess :/ What?!?! The Kohl's guy again? ![]() thanks for bringing back traumatizing memories ... ![]() |
Author: | STEVE ROGERS [ Wed Apr 13, 2011 7:39 am ] |
Post subject: | Re: Brute Force Attack -- Please Read |
Chippy wrote: It was Loyal. ![]() |
Page 1 of 1 | All times are UTC - 5 hours [ DST ] |
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group http://www.phpbb.com/ |