Password Reset

DeepWoods · April 05, 2012, 04:59:15 PM

Jeff, received this email and was wondering if it is legit? It looks like it came from you but wasnt sure. Didn't want to click on the link if it wasn't. I am not having any problems with logging in, so didn't know why I received it. Hope it isn't some type of phishing email

Dear DeepWoods,
This mail was sent because the 'forgot password' function has been applied to your account. To set a new password, click the following link:
https://forestryforum.com/board/index.php?action=reminder;sa=setpassword;u=927;code=7ef0d8c788

IP: 69.80.101.149
Username: DeepWoods

Regards,
The The Forestry Forum Team.

celliott · April 05, 2012, 05:34:40 PM

I also received the same email, I am having no trouble logging in, and don't remember hitting the forgot password button.

Warbird · April 05, 2012, 06:19:19 PM

I contacted Jeff about this, this morning. It happened to me too. He'll be investigating and will let us know.

SwampDonkey · April 05, 2012, 06:23:06 PM

I got one this afternoon to.

Ianab · April 05, 2012, 07:28:13 PM

Someone has been trying to guess passwords / get resets sent etc.

I've banned a couple of IP addresses to slow them down while Jeff is on the road.

I don't think it was a serious attack as they tried to reset my "admin" account, which of course gives the game away by sending me an email. Could be someone experimenting with a hacking script, but it pretty amateur.

Let us know if you are still getting the messages and I can check and block them again.

Ian

Magicman · April 05, 2012, 08:11:38 PM

Mine came at 3:14 PM. When I moved the arrow over the link, it read what the link said. Whether I messed up or not ??? I reentered my password. :-\

Okrafarmer · April 05, 2012, 08:16:18 PM

Yeah, I feel better MM, knowing I'm not the only one who actually did it. :-[ I should have known better. For the record, when you click on the link, it takes you to a page that 100% looks like it is part of the FF. Only thing is, I think it did not have the sponsors on the side. Can't remember for sure now, but it did have all the regular stuff up at the top including "In Memorium" and "Saw anywhere".

After I reset the password, i was actually in the FF, in fact I am still in that window now.

DeepWoods · April 05, 2012, 08:42:07 PM

For whatever reason, I was logged off, not my doing, I reset my password using the link that indicated I was offline. Realizing that I may have been redirected to somewhere other than The Forestry Forum, I logged off again and went in through the front door to the forum and again changed my password just to make sure I am secured. I don't know how much damage one could do with my password, but no need taking any chances.

beenthere · April 05, 2012, 08:43:48 PM

I didn't re-enter my password.
And for sure, if the same password was used, then someone else may have it now.

But mine came at 1:09 pm
I opened it, but didn't do anything other than close it. I was still logged in on the Forum at the time.

SwampDonkey · April 05, 2012, 09:31:42 PM

I never did anything except delete the email, as I know I didn't send any request and figured it was a hack.

About a month ago I got something a little more sophisticated, only it was followed up by a phone call directing me to go to the email link to fix spam issues or something. Said I would loose internet by March 9th. I never followed the bait and I'm still here. :D

Ianab · April 05, 2012, 10:18:49 PM

I think the message is actually coming from the FF forum server, so it's "legit", and the link is correct in this case.

It's easy enough to generate it by simply entering some ones name, if it's another member, they get sent the link to THAT members email. So nothing is actually compromised, unless they already have access to your email.

This is what make me think it's a random sort of "probe", just to check if they can get some access to something.

Binning the email is the safest option. If you suspect you password is compromised, then go and change it while you still can, but it can always be reset by YOU, using the email function.

Ian

WDH · April 05, 2012, 10:59:05 PM

It happened to me also. I ignored it, and signed on as normal. Like SD, I knew that I did not request it, so I assumed that someone was trying to access the Forum using my Username. I thought about some of the real losers that have been banned and figured that someone was wanting to stir up trouble using my name.

Magicman · April 05, 2012, 11:03:53 PM

Bizzy or no one else has enough Magic to be me, cause I changed my password again. ;)

chevytaHOE5674 · April 05, 2012, 11:45:49 PM

Got two of the reset emails this afternoon. I deleted them as I was still logged on to the forum at the time. I assumed it was a glitch or something.

beenthere · April 06, 2012, 12:29:29 AM

What is interesting is that somehow someone managed to latch onto our emails to send these out, or get the Forum to send them out.

It must have been a standard reply they accessed. But I'm not worried that any damage was done.

WDH · April 06, 2012, 07:50:37 AM

I got a second message late last night.

thecfarm · April 06, 2012, 08:44:56 AM

Nothing way up here in Maine.

doctorb · April 06, 2012, 08:53:47 AM

I got it too. Tried to reset and could not. Signed in like normal afterwards. Maybe I should just rest my password for safety's sake.

DR Buck · April 06, 2012, 12:44:00 PM

Must have been sent only to you guys that have way too much to say. ;D ;D I didn't get one. ;)

doctorb · April 06, 2012, 01:00:34 PM

OK Where do I go to reset my password?

RynSmith · April 06, 2012, 01:27:02 PM

Profile --> Account Settings.

doctorb · April 06, 2012, 01:33:21 PM

Thanks. Got it.

WDH · April 06, 2012, 09:10:51 PM

Quote from: DR_Buck on April 06, 2012, 12:44:00 PM
Must have been sent only to you guys that have way too much to say. ;D ;D I didn't get one. ;)

Sometimes the more loquacious garner the attention. You have to keep your eye on those strong-silent types, DR_Buck :P.

Jeff · April 07, 2012, 09:10:04 AM

Quote from: beenthere on April 06, 2012, 12:29:29 AM
What is interesting is that somehow someone managed to latch onto our emails to send these out, or get the Forum to send them out.

It must have been a standard reply they accessed. But I'm not worried that any damage was done.

No one's email address was compromised or obtained. Who ever this was, they were simply putting forum user names in the forgot password form and submitting it. The forum would then send a password retrieval link to the email address of record of the member name submitted. This all was happening while I was in route to my Sister's place in Florida. I rodr down with my niece at the request of my sister so I can drive one of their vehicles back to Michigan. The forum was in good hands with Ianab and the other admins.

beenthere · April 07, 2012, 10:59:12 AM

Jeff
That makes sense. They got the Forum to send them out.
Good to know no harm done to members.

Now hope your trip goes well, and you have a good tour of the south land.