Thread: February 2010
View Single Post
Old 02-16-10, 02:31 PM   #1 (permalink)
Admin
Cal Poly Forum
 
Admin's Avatar
 
Joined: Sep 2003
Location: Pomona
Posts: 5,265
Admin will become famous soon enough
Arrow February 2010

"Check Vulnerable Passwords" e-mail has been dispatched to those accounts that may have been affected. This e-mail is legitimate and has been sent out by SLOPomona.com administration.

Quote:
Some users may have created accounts with vulnerable passwords. Vulnerable passwords can be passwords that are:

* The same as the account username

Such passwords make accounts vulnerable to exploitation from automated scripts and programs that can guess the password to access your board under the guise of the affected users. This may be done for the purposes of spam or online identity theft.

Users can no longer create accounts with the above vulnerabilities, but older accounts may still be affected. Affected users will be prompted to change their current password the next time they login. However, older accounts may still be vulnerable where the user no longer uses the account to access your board. Note that if you force a reset of an account and the email address associated with the account is no longer valid, the user may effectively be locked out of that account.

For this reason you may choose which accounts to reset based on the users' last activity. Users who have recently logged in are more likely to change their password and email settings themselves. It is advised that accounts that have not been accessed recently are reset first. You can check at a later time or date how many affected accounts remain before deciding to force a password reset.

When you perform a reset, an email will be sent to the affected users. You will have an option to change the email message.
__________________
SLOPomona Cal Poly Forums
Admin is offline   Reply With Quote