Memberlist Function DISABLED

[Scott Greczkowski]

As a security percaution I have disabled the Memberlist function here on SatelliteGuys.

As you might have heard over the weekend Gawker had its userlist stolen which included all the passwords for all Gawker accounts (Gawker is parent company of sites like Gizmodo, Lifehacker and a few others.)

The usernames and passwords were posted to the internet via a number of torrent sites.Over a million accounts were posted.

To protect people here at SatelliteGuys who might use the same password they used on the Gawker sites I have disabled the memberlist to keep bots from scanning for matching user account names here and then using your password gaining full control of your account.

If you do use the same password here that you do (or did) use on the Gawker sites I highly recomend that you consider changing your password here.

Thanks for your understanding!

 

[raoul5788]

Thanks for watching out for us, Scott. Will it be enabled at some future point?

 

[Bobby]

That's where it went! Now, I understand. Thanks Scott....

 

[navychop]

Hmmmm. Not happy. But I can't see a way around the necessity, either.

 

[raoul5788]

So Scott, will it return at some point?

 

[Scott Greczkowski]

Doubtfull. In researching it found out that Bot's are harvesting the data and spaming members by email and also via PM.

In addition bots are trying every min to access the memberlist function trying to download it to exploit the Gawker accounts and passwords. In talking with some vBulletin guys I wouldn't be surprised if the feature is removed entirely from the next version of the software as it is that much of a security hole.

 

[raoul5788]

Gotcha! Thanks.

 

[Ramy]

It was a nice feature but oh well.

 

[rockymtnhigh]

Fully understood, but it sucks. TOo bad we couldn't find a way to just make it viewable by pub members....

 

[Scott Greczkowski]

There is no sercurity level settings for it unfortunately, its eaither on or off.

Looking at the logs this morning it appears bots from russia and china tried accessing it over 2000 times in an hour.

 

[navychop]

Maybe once a month you could post a "top 100" posters in the Pub? Just names and post counts?

 

[Scott Greczkowski]

I will see what I can do.

 

[rockymtnhigh]

There is no sercurity level settings for it unfortunately, its eaither on or off.

Looking at the logs this morning it appears bots from russia and china tried accessing it over 2000 times in an hour.

Good enough reason to kill it. Those bots are everywhere, all the time.