They're here! More Muvipix.com Guides by Steve Grisetti!
The Muvipix.com Guides to Premiere & Photoshop Elements 2024
As well as The Muvipix.com Guide to CyberLink PowerDirector 21
Because there are stories to tell
muvipix.com

Possible Login Issues

Any updates to our site, contest information or noteworthy announcements will be posted here.

Possible Login Issues

Postby Ron » Thu Jan 20, 2011 8:14 am

Has anyone in the recent past had any issues trying to login? To be specific, when trying to login, have you received this message:

You exceeded the maximum allowed number of login attempts. In addition to your username and password you now also have to solve the CAPTCHA below.

This would not occur if you click the "Log me on automatically each visit" option when logging in.

There are boards out there that are being attacked with auto login attempts with various (common) usernames. Just want to find out if ours is one of them.

Thanks!
Regards,
-Ron

Dell, Win10 Pro, Intel Core i7-6700 CPU @3.4GhHz, 8GB ram. 64-bit
User avatar
Ron
Site Admin
Site Admin
 
Posts: 3219
Joined: Sat Oct 21, 2006 8:57 am
Location: Maine, USA

Re: Possible Login Issues

Postby SWard » Thu Jan 20, 2011 8:55 am

I got this either last week or earlier this week. I had only tried once and just assumed I typed my password in wrong. I entered my info again and typed in the caption that was displayed and got in to the forum.

Sue
Dell XPS 600; PentiumD Processor 930 w/ Dual Core (3.0 GHz,800 FSB); 2Gb RAM; 256Mb Nvidia GeForce 7800 GTX Video; 500Gb Performance RAID 0; 250Gb Serial ATA HD (Internal); 500Gb WD External; 1TB WD External; XP Media Center 2005 Ed SP2
User avatar
SWard
Premiere Member
Premiere Member
 
Posts: 64
Joined: Thu Feb 14, 2008 2:18 pm
Location: Minneapolis, MN

Re: Possible Login Issues

Postby Gerlinde » Thu Jan 20, 2011 10:09 am

Same her Ron. I was able to fix this by using the >delete all board cookies< option on the Board Index page.
A) i7-3930K 3.2GHz (3.8GHz Turbo), 32GB DDR3-1600, SSD 256GB, 2x1TB+2x2TB Seagate Barracuda (72krpm), Geforce GTX 550 Ti (1GB), Win10 Pro 64-bit
B) Sony Vaio i7-3632QM,12gb DDR3-1333MHz, GeForce® GT 640M LE (2GB), 750GB (7200rpm), Win10 Pro64-bit
User avatar
Gerlinde
Moderator
Moderator
 
Posts: 1018
Joined: Fri Jun 22, 2007 3:45 pm
Location: San Diego,CA

Re: Possible Login Issues

Postby John 'twosheds' McDonald » Thu Jan 20, 2011 10:13 am

SWard wrote:I got this either last week or earlier this week. I had only tried once and just assumed I typed my password in wrong.

Same here. I just closed down Firefox then re-started.
AMD Ryzen 3900x 12C/24T, ASUS x570 mobo, Arctic Liquid Freezer ll 280, Win11 64 bit, 64GB RAM, Radeon RX 570 graphics, Samsung 500GB NVMe 980 PRO (C:), Samsung 970 Evo SSD (D:), Dell U2717D Monitor, Synology DS412+ 8TB NAS, Adobe CS6.
User avatar
John 'twosheds' McDonald
Moderator
Moderator
 
Posts: 4236
Joined: Mon Feb 19, 2007 11:57 am
Location: Cheshire, UK

Re: Possible Login Issues

Postby Chuck Engels » Thu Jan 20, 2011 11:22 am

Same as Sue, got this just the other day after only one login attempt.
1. Thinkpad W530 Laptop, Core i7-3820QM Processor 8M Cache 3.70 GHz, 16 GB DDR3, NVIDIA Quadro K1000M 2GB Memory.

2. Cybertron PC - Liquid Cooled AMD FX6300, 6 cores, 3.50ghz - 32GB DDR3 - MSI GeForce GTX 960 Gaming 4G, 4GB Video Ram, 1024 Cuda Cores.
User avatar
Chuck Engels
Super Moderator
Super Moderator
 
Posts: 18152
Joined: Sun Feb 11, 2007 10:58 pm
Location: Atlanta, GA

Re: Possible Login Issues

Postby Ron » Thu Jan 20, 2011 12:03 pm

It's confirmed then. Here's a portion of the announcement from the forum software board:

Within the last week, it has come to our attention that phpBB.com was unsuccessfully attacked by a malicious party attempting to brute-force account login credentials. This attack was facilitated by a query for "powered by phpbb" on a search engine. Though this attack was not successful as phpBB includes several features to ensure it is not vulnerable to such attacks, users should take measures to ensure that their forums are properly protected.

Attack anatomy
To perform the attack, the attacker registers an account on the forum and tests that the memberlist is available for them to obtain lists of users. The attacker then uses an automated process to login and download thousands of user names from the memberlist, the attacker here grabbed a little over 5000 user names. After collecting this data the attacker attempts to brute-force account credentials by repeatedly sending login requests to the forum. As the attack does not attempt to solve the invalid login attempts CAPTCHA, it is limited to the amount of attempts specified in the "Maximum number of login attempts" configuration option.


The first step I'll take is to block the memberlist from newly registered users. This should significantly reduce future attempts. I'm also going to limit the amount of unsuccessful login attempts to 2 vice 5.

Please also make sure that your passwords are "strong" in nature.

I truly can't fathom what the attacker(s) think(s) they're gaining by logging in as an existing user - could be looking for admin privileges is all I can think of - kind of strange, though. If you think about it, it's obviously pure maliciousness I guess.

Sorry for the inconvenience everyone! We'll try to stay on top of it.
Regards,
-Ron

Dell, Win10 Pro, Intel Core i7-6700 CPU @3.4GhHz, 8GB ram. 64-bit
User avatar
Ron
Site Admin
Site Admin
 
Posts: 3219
Joined: Sat Oct 21, 2006 8:57 am
Location: Maine, USA

Re: Possible Login Issues

Postby Chuck Engels » Thu Jan 20, 2011 12:15 pm

Makes no sense to me what they could accomplish, not like there is any personal information they could obtain.

By "Strong" password Ron means that the password should have upper and lower case letters, numbers and an odd character or two like a # or @ in it somewhere. Something like
Ad78TRc@3#
Would be a good strong password.
1. Thinkpad W530 Laptop, Core i7-3820QM Processor 8M Cache 3.70 GHz, 16 GB DDR3, NVIDIA Quadro K1000M 2GB Memory.

2. Cybertron PC - Liquid Cooled AMD FX6300, 6 cores, 3.50ghz - 32GB DDR3 - MSI GeForce GTX 960 Gaming 4G, 4GB Video Ram, 1024 Cuda Cores.
User avatar
Chuck Engels
Super Moderator
Super Moderator
 
Posts: 18152
Joined: Sun Feb 11, 2007 10:58 pm
Location: Atlanta, GA

Re: Possible Login Issues

Postby Dave McElderry » Thu Jan 20, 2011 1:27 pm

Chuck Engels wrote:By "Strong" password Ron means that the password should have upper and lower case letters, numbers and an odd character or two like a # or @ in it somewhere. Something like
Ad78TRc@3#
Would be a good strong password.


That's the password I've been using Chuck, and I'd appreciate it if you wouldn't post it. ::lol::

BTW, I also experienced this a few days ago. I normally stay logged in, but found that I had been logged out. When I attempted to log back in I got this on the first attempt.
Be yourself; everyone else is taken.

Asus X570-E motherboard; AMD Ryzen 9 3900X 3.8 GHz; 64GB DDR4; GeForce RTX 2060 6GB; 1TB Samsung 970 Pro M.2 SSD
User avatar
Dave McElderry
Moderator
Moderator
 
Posts: 4757
Joined: Fri Feb 23, 2007 10:18 am
Location: Lost In Middle America

Re: Possible Login Issues

Postby Bobby » Thu Jan 20, 2011 1:45 pm

Ron, I just changed my password and logged out. When I logged in, I got the CAPTCHA - working correctly? But it worked OK...
Bobby (Bob Seidel)
User avatar
Bobby
Super Contributor
Super Contributor
 
Posts: 3183
Joined: Tue Feb 20, 2007 10:41 pm
Location: At the beach in NC

Re: Possible Login Issues

Postby Ron » Thu Jan 20, 2011 1:51 pm

If you got the captcha, it means that your username was recently targeted sometime between your last official login and this one (changing the password doesn't matter, but it DOES help prevent the intruder from a successful attack).

BTW, I think this was the problem when you were having login issues several days ago with your iPad - I think it was you...
Regards,
-Ron

Dell, Win10 Pro, Intel Core i7-6700 CPU @3.4GhHz, 8GB ram. 64-bit
User avatar
Ron
Site Admin
Site Admin
 
Posts: 3219
Joined: Sat Oct 21, 2006 8:57 am
Location: Maine, USA

Re: Possible Login Issues

Postby Bobby » Thu Jan 20, 2011 2:22 pm

Yes Ron, it was me with the iPad. You are right - I only ASSUMED that the login problem was caused by my inept brain and aging fingers on the iPad virtual keyboard. Now I feel better!
Bobby (Bob Seidel)
User avatar
Bobby
Super Contributor
Super Contributor
 
Posts: 3183
Joined: Tue Feb 20, 2007 10:41 pm
Location: At the beach in NC

Re: Possible Login Issues

Postby Bob » Thu Jan 20, 2011 4:34 pm

Last week, I had the exact same experience as Dave. I changed my password today just to be cautious. Signed on with the new passward and used the automatic sign on option. But, when I just now came back, I was signed off and got the captcha prompt when I signed back on.
User avatar
Bob
Moderator
Moderator
 
Posts: 5925
Joined: Wed Feb 21, 2007 4:49 am
Location: Southern California, USA

Re: Possible Login Issues

Postby Barb O » Thu Jan 20, 2011 5:31 pm

Ron wrote:If you got the captcha, it means that your username was recently targeted sometime between your last official login and this one (changing the password doesn't matter, but it DOES help prevent the intruder from a successful attack).

BTW, I think this was the problem when you were having login issues several days ago with your iPad - I think it was you...


And I previously had similar problems from my Android phone (Droid X).

I am on my laptop now where I usually do the automatic login. So I changed my password, logged off. Then I started a new Firefox session and started to login to the muvipix forum. Received the captcha and responded to it, then was able to complete login. I have now rechecked the log me in automatically.
Barb O
Super Contributor
Super Contributor
 
Posts: 972
Joined: Fri Feb 16, 2007 12:42 am

Re: Possible Login Issues

Postby hpharley90 » Thu Jan 20, 2011 5:50 pm

I also got the CAPTCHA and couldn't get in. I tried a few times but i think I might have forgot my password.
So I closed my browser then reopened and clicked my book mark and I was in.
I just changed my password.
Who ever does this it does not make sense to me.
It has to be malicious intent. I see no value here.
Thanks
Richard


Dell XPS 8940-10th Gen i7-10700 processor (8-core,16M Cache. 2.9GHz)
48GB 3200MHz RAM Windows 10
User avatar
hpharley90
Premiere Member
Premiere Member
 
Posts: 1005
Joined: Tue Feb 20, 2007 11:11 am
Location: Connecticut

Re: Possible Login Issues

Postby Barb O » Thu Jan 20, 2011 6:26 pm

Posting from droid x - no login problems now

[ Post made via Mobile Device ] Image
Barb O
Super Contributor
Super Contributor
 
Posts: 972
Joined: Fri Feb 16, 2007 12:42 am

Next

Return to Announcements 


Similar topics


Who is online

Users browsing this forum: No registered users and 7 guests

cron