Please consider strengthening your password and turning on 2FA!

[Michael]

I have received confirmation that several of the previously hacked members were reusing weak passwords that were connected to other "known" leaked accounts.

PLEASE CONSIDER STRENGTHENING YOUR PASSWORD AND TURNING ON 2FA.

Use a random password generator such as https://www.avast.com/en-us/random-password-generator

To modify your password click: on your Avatar, the cogwheel symbol, Password & Security.

To turn on 2FA: click: on your Avatar, the cogwheel symbol, Password & Security, choose Two-Step verification. You can select verification via email (less secure) or via an authenticator app (such as Google Authenticator or Miscrosoft Authenticator).

The email verification is almost worthless if a scammer already has access to your email. The 2FA via an Authenticator app works flawlessly and exceptionally well. You only get prompted once a month for the verification code.

*2FA is now optional. If you logged in while 2FA was turned on, and you do not want to use it, simply go to Password & Security and turn it off.

Thank you for doing your part to help keep your fellow members safe.

-Michael

 

[Michael]

Sorry, Michael. I have been deleting accounts that suddenly require me to use 2 or 3 step verifications. 2 step verifications do NOT prevent a hacker form gaining access to websites. I wish I didn't have to do this, but I refuse to jump through hoops to simply access a forum.

I understand, please hang in there as we try to determine how this person gained access to several accounts. If we determine it was in fact phishing or just weak passwords, then we will lift this requirement.

 

[SilentSquirrel]

I don't need no scammer-vax
I'll do my own research.




(Can you find the LOL in this?)

 

[Ca_Varminter]

This is the new Reality of Having an Online presence.......
Being an IT engineer....
I think this a Good move on the Admins part to keep Members transactions Safe

 

[Peashooter]

I soldiered thru this, and think i got it.
Pretty hard for me to do these things as i do not like to share the phone number i have ( what sites most often fish for i think ) and also that phone, well it is only temporary i carry the damn thing, dont need it dont want it, but for family reasons i do have one ATM

In general i have never used that complex passwords for things like a forum online, if compromised ill just ask to get killed and them make a new one.

Youtube also seem to be doing some new stuff though i dont think in regard to security, but i couldn't even be bothered reading what it was, but got a notification on 2 of my burner accounts.
As i do not want to send pictures of my driving license or passport to youtube, well they demonstrative think i am a child and so some content are blocked for me,,,,,, though what is blocked or not dont make any sense.

Now passwords for other things online,,,,,,OMG i am often way past 25 letters / numbers / symbols for that.

 

[shambozzie]

Always willing to learn something. Got the popcorn ready. Following this one.

 

[d3vnull]

Thank you for a good chuckle anyway on listing credentials.

 

[BigTinBoat]

Sorry, Michael. I have been deleting accounts that suddenly require me to use 2 or 3 step verifications. 2 step verifications do NOT prevent a hacker form gaining access to websites. I wish I didn't have to do this, but I refuse to jump through hoops to simply access a forum.

If 2 step doesn't make each individual account more secure then please by all means tell us what it does do. If a "hacker" has your password and the site requires 2 step authentication, without the authenticating device/code how does he/she access the account?

 

[Michael]

C'mon now, we're all in this sport together.

PLEASE CONSIDER STRENGTHENING YOUR PASSWORD AND TURNING ON 2FA to help protect your fellow members.

-Michael

 

[Elis5173]

How about making passwords expire after some time. I'm sure it would get a little annoying but it would also atleast slow down the hackers along as you don't use weak passwords.

 

[Ricochet]

Having to verify every time i switch from my phone to my desktop is gettin old fast...

 

[d3vnull]

No, I'm not embarrassed at all. You didn't answer any of my questions. I was hoping you had the answers to Internet security that millions of skilled technicians have been unable to resolve. So, exactly how many years have you spent working in the computing industry?

Please stop. It doesn't matter if it a user error or coder/designer error it still comes down to human error.

We are talking small amounts of money in scams here compared to the industrial size exploits going on across the industry. 2FA removes the "small fries" on the outskirts, which will eliminate the majority (or all) of the issue we are experiencing.

 

[OldSpook]

Having to verify every time i switch from my phone to my desktop is gettin old fast...

There is a checkbox on your desktop when you authenticate. It says, "Remember me for 30 days"... Does it fix that problem? I've never used it before today.

 

[Ricochet]

There is a checkbox on your desktop when you authenticate. It says, "Remember me for 30 days"... Does it fix that problem? I've never used it before today.

Yea, and then they made me change my password.. had to redo it all over again.. sequence was not good... they should have made me change password, THEN do the 2 step log in... i got to do it all 4 times today

 

[OldSpook]

Yea, and then they made me change my password.. had to redo it all over again.. sequence was not good... they should have made me change password, THEN do the 2 step log in... i got to do it all 4 times today

Yeah, it bothered me too but I wrestled through it.

 

[Ricochet]

Yeah, it bothered me too but I wrestled through it.

I think I've survived now too. All for the better good. If they catch the hacker, i hope they hang him in public

 

[Chuck-in-Ohio]

And my silly self has trouble with the texting function on my phone.....

I thought that the first rule of the Puzzle Palace was that you can't talk about the Puzzle Palace.

I might have my movies mixed up, don't hack me bro.......

And thank you.

 

[Feinwerk]

@Michael ,
Thank you for removing the requirement to make two factor authentication mandatory. I made a stronger password and am once more enjoying quick access. I like how the change password process rates the strength of the password. That should help. There may be legacy users still using weaker passwords unless you have required everyone to change them to meet the new standards.

Thanks for all you do to make Airgun Nation a great forum.

Regards,
Feinwerk

 

[2L8]

As always,
Thank you Michael.

Patrick

 

[Gunnertrones]

Done.