Page 4 of 7

Re: PASSWORD Security

Posted: Tue Aug 15, 2017 1:49 pm
by mcthulhu
It's still happening - the last 2-3 times I've logged in.

Re: PASSWORD Security

Posted: Tue Aug 15, 2017 2:20 pm
by Iversen
Yes, there was a pause ... and now the mechanism that provokes those messages has started again.

Btw: You should use good passwords, but changing a good one to another good one doesn't in itself help you against our common enemy out there. Each time you log into the forum the 'thing' can try a few new guesses, but thanks to the limit nothing that really amounts to much. The main purpose of the attack seems to be to make our access more cumbersome in the hope that we give up and become silent.

Re: PASSWORD Security

Posted: Fri Aug 18, 2017 4:57 pm
by reineke
It's working.

Re: PASSWORD Security

Posted: Sat Aug 19, 2017 4:37 am
by sfuqua
I only noticed this today. I had a long fight to log in. I hope this can be defeated soon.

Re: PASSWORD Security

Posted: Sat Aug 19, 2017 6:32 am
by Tillumadoguenirurm
Had to answer several captchas just now even though I answered correctly.

Re: PASSWORD Security

Posted: Sun Aug 20, 2017 5:41 am
by luke
Is there a way to block the IP address of the bot or crack-engine that does the repeated attacks?

Re: PASSWORD Security

Posted: Mon Aug 21, 2017 3:28 pm
by Querneus
I have to do the log-in question every day I come here on my laptop, but I never have to on my phone. I wonder why that is.

Re: PASSWORD Security

Posted: Wed Aug 30, 2017 7:47 am
by Cainntear
William Camden wrote:I have started getting those "you have logged in with the wrong password too many times" messages again (after logging in just once), even though I changed to a new password which temporarily solved the problem.

Changing the password doesn't solve the problem -- the problem occurs when the would-be hacker attempts to log in and gets your password wrong -- the problem is that they don't know your password, so changing it can't really help.

Serafín wrote:I have to do the log-in question every day I come here on my laptop, but I never have to on my phone. I wonder why that is.

Lucky timing. Literally. The problem is all down to when the attackers try to log in.

Re: PASSWORD Security

Posted: Wed Aug 30, 2017 7:51 am
by Cainntear
And as I alluded to previous, the rules for what is considered a strong password aren't worth following. There's a nice mathematical demonstration of why four lower case words are actually better than most so-called "strong" passwords. Now considering we're a bunch of polyglots, and most of us already probably use at least two different languages in our passwords, mathematically, we're all pretty safe anyway, particularly if we add in a few random symbols.

Re: PASSWORD Security

Posted: Thu Aug 31, 2017 7:22 am
by Voxel
Tillumadoguenirurm wrote:Had to answer several captchas just now even though I answered correctly.

I have the same problem.
phpBB3 wrote:You exceeded the maximum allowed number of login attempts. In addition to your username and password you now also have to solve the CAPTCHA below.

It's difficult to connect to my account all the time.