I have noticed over the past few weeks that my admin account both here, and at Simulated RTK
, has been requiring a manual re-login due to 'failed login attempts'. This has happened to another administrator here as well. A review at the support forum discussion board for our forum's software suggests that this has become a problem in numerous areas and currently developers behind this software insist that it is probably the result of gutter-borns attempting to hack accounts for some nefarious purpose or another. I'm not entirely convinced of this and suspect it could be due to some software bug or another and a security exploit, but as it stands, I have yet to realize a confirmed case of an account actually being compromised.
You may be affected but may not notice due to the 'automatically log me in next time I visit' preference option. Some boards have had issues with this resulting in bigger problems, but I suspect we have avoided real problems thus far because we use a custom CAPTCHA authentication system specifically to defeat bots.
But, better safe than sorry, right?
All I ask from everyone (especially folks who have special privileges on the forum) is that they take a moment to reflect on their password. A good password should contain uppercase and lowercase characters at least a number, potentially even including something fun like a space, tilde, underscore, or whatever. If you are using a truly lazy password
please change it. That also includes using your username as your password. A common means of compromising forum accounts is to try and log in as as that user with a common password, and some basic steps taken to avoid this will do the trick.
If you've encountered any sort of problems please do share your thoughts.