Home Page Forums General Discussion SECURITY ALERT!!! Please read

  • This topic is empty.
Viewing 4 posts - 1 through 4 (of 4 total)
  • Author
    Posts
  • #205735
    Anonymous
    Guest

    If you try to log in and it says that you have exceeded your number of failed login attempts, this means a bot or hacker has tried to get on our site using your user name (unless you know that you had a problem logging in recently, forgot your password, or something like that).

    Unfortunately, this is a new trend resulting from recent phpBB software security updates that crippled a previously common spam bot attack method. They are now desperate and trying old-fashioned brute-force password attacks against phpBB forum sites. They only get 3 tries though before being locked out and having to answer our security question.

    We have our community secured with a database of challenge questions that Mormons should find easy to answer, and you can certainly look them up without much effort; but this make it too time consuming for hackers / bots to bother with. They have to attack thousands of sites a day and it isn’t economically worth it for them to stop to try answering a simple question that requires human-level comprehension.

    I have turned off the display of users online and the newest member to the public. Only registered users who log in can now see those at the bottom of the forum index pages. This should help prevent them from farming any more valid user names.

    #240016
    Anonymous
    Guest

    Brian, This has happend several times to me receintly, thanks for the explanation.

    f4h1

    #240017
    Anonymous
    Guest

    And me.

    #240018
    Anonymous
    Guest

    Good, I thought I was being blocked from the site for good.

Viewing 4 posts - 1 through 4 (of 4 total)
  • You must be logged in to reply to this topic.