Author Topic: Security Issue – Please Read!  (Read 6063 times)

0 Members and 1 Guest are viewing this topic.

Offline Colin

  • Crotch Rocket
  • ****
  • Posts: 1883
  • I'd rather be riding!
    • Facebook
  • AREA: Northwest Area
  • COG#: Forum
  • Membership Level: Forum Subscriber
Security Issue – Please Read!
« on: January 07, 2011, 01:33:52 pm »
A security issue has just come to light on Simple Machines based forums like ours.
 
There is a nasty piece of work out there that’s written a program that tries to login to forum accounts by using the screen name on the forum as the login name and then trying multiple passwords. 

At this time there is NO evidence that this slime-ball has attacked our forum. However they may so just in case please can you make sure your screen name is different from your login name, and ensure you have a strong password. 

My Screen name used to be Colinp386 now it’s simply Colin, I could have made it Colin_p386 or Colin p 386 etc. So folks know it’s still me, however I’m not wedded to colinp386 so was happy to change it.   

To check and change your display name, select Profile > Account Settings  in the menu above and see if your name is the same as your User Name (grayed out). The forum does not allow duplicate display names so you can’t have two colin’s for example. 
If you want to upgrade your password you need to do this on the Cogmos site NOT the Forum. 

Kudos to Rick H for bringing this to our attention on the ZG Forum Link 

More information about this issue can be found on the SMF Forum Here 

Many Thanks!

Colin
« Last Edit: January 07, 2011, 01:37:10 pm by Colin »
Colin Prior

Offline Volcantour

  • Sport Tourer
  • *****
  • Posts: 2028
  • Ride long and prosper
  • AREA: Southeast Area
  • COG#: 8892
  • Membership Level: Asst. Area Director
Re: Security Issue – Please Read!
« Reply #1 on: January 07, 2011, 01:55:43 pm »
Since my previous posts can be tracked, and several of them refer to my screen name, I thought it best to change my COGMOS username instead of my Forum screen name.  Easy enough to do, using the COGMOS site.  Will this work?
TCARS, y'all

COG #8892  CDA #0309  IBA #45302
1999 Concours, 2017 DL650 XT
SE AAD

Offline Colin

  • Crotch Rocket
  • ****
  • Posts: 1883
  • I'd rather be riding!
    • Facebook
  • AREA: Northwest Area
  • COG#: Forum
  • Membership Level: Forum Subscriber
Re: Security Issue – Please Read!
« Reply #2 on: January 07, 2011, 02:08:22 pm »
Since my previous posts can be tracked, and several of them refer to my screen name, I thought it best to change my COGMOS username instead of my Forum screen name.  Easy enough to do, using the COGMOS site.  Will this work?

Yes you can do it this way, its a little more complicated.
Logout of the Forum.
Login to Cogmos, go to My Info and scroll down to Username.
Change it to a new username and hit the save button.
 
Log back in to the Forum with your new username and all will be good.
 
Please can you confirm the above works for you :)
 
Thanks
 
Colin
Colin Prior

Offline Mitch

  • Scooter
  • ***
  • Posts: 270
  • AREA: Northwest Area
  • COG#: 8961
  • Membership Level: Expired - Expired Term
Re: Security Issue – Please Read!
« Reply #3 on: January 07, 2011, 02:09:21 pm »
Colin.

Thanks for bringing this up and thanks to Rick H for raising our awareness.







See man, you're Lebowski, I'm the Dude. So that's what you call me. Either that or Dude or Duder, or your Your Royal Dudeness.
COG #8961  CDA0315
ROK 100027119

"Dieter doesn't care about anything. He's a nihilist. "

Offline Volcantour

  • Sport Tourer
  • *****
  • Posts: 2028
  • Ride long and prosper
  • AREA: Southeast Area
  • COG#: 8892
  • Membership Level: Asst. Area Director
Re: Security Issue – Please Read!
« Reply #4 on: January 07, 2011, 02:14:12 pm »
Since my previous posts can be tracked, and several of them refer to my screen name, I thought it best to change my COGMOS username instead of my Forum screen name.  Easy enough to do, using the COGMOS site.  Will this work?

Yes you can do it this way, its a little more complicated.
Logout of the Forum.
Login to Cogmos, go to My Info and scroll down to Username.
Change it to a new username and hit the save button.
 
Log back in to the Forum with your new username and all will be good.
 
Please can you confirm the above works for you :)
 
Thanks
 
Colin


Yes, it does.
TCARS, y'all

COG #8892  CDA #0309  IBA #45302
1999 Concours, 2017 DL650 XT
SE AAD

Offline oldsawfiler

  • Crotch Rocket
  • ****
  • Posts: 1819
  • AREA: Northwest Area
  • COG#: 8062
  • Membership Level: Active
Re: Security Issue – Please Read!
« Reply #5 on: January 07, 2011, 03:37:03 pm »
Done, Thanks Colin and Rick
Well...even if you fall on your face you're still moving forward.

COG # 8062  AMA # 1084053  ROMA

Offline norm-9688

  • Crotch Rocket
  • ****
  • Posts: 1536
  • AREA: Northeast Area
  • COG#: 7011
  • Membership Level: Active
Re: Security Issue – Please Read!
« Reply #6 on: January 07, 2011, 03:55:10 pm »
Colin, thanks for the heads up will adding a dash to my forum name be enough of a change to foil this?

Offline Camper Dave

  • Crotch Rocket
  • ****
  • Posts: 1671
    • The WOG
  • AREA: Southeast Area
  • COG#: Forum
  • Membership Level: Forum Subscriber
Re: Security Issue – Please Read!
« Reply #7 on: January 07, 2011, 04:05:08 pm »
Colin, thanks for the heads up will adding a dash to my forum name be enough of a change to foil this?
Who are you  :-\

Ya, I think it will work  :))
<--- is there any mechanism in place to deal with a non- productive, antagonistic, former non- member such as this?

Offline S Smith

  • Northeast Area Director
  • Officer
  • I Need a Life
  • ****
  • Posts: 5274
    • COG Northeast Area Home Page
  • AREA: Northeast Area
  • COG#: 3184
  • Membership Level: Administrator
Re: Security Issue – Please Read!
« Reply #8 on: January 07, 2011, 05:01:19 pm »
Colin, thanks for the heads up will adding a dash to my forum name be enough of a change to foil this?

Yes, Norm. It will.

| Steve Smith | COG #3184 | MSF/CONREP RC |

There is more to be gained by members raising hands saying "I'll do that" instead of pointing fingers saying "nobody's doing that."

Offline smithr1

  • I Need a Life
  • ******
  • Posts: 5257
  • AREA: South Central Area
  • COG#: 6197
  • Membership Level: Asst. Area Director
Re: Security Issue – Please Read!
« Reply #9 on: January 07, 2011, 05:10:09 pm »
checking my new name.

I changed it but I just came back on and my display name is back the way it was. Hmmmm
« Last Edit: January 07, 2011, 08:43:35 pm by smithr »
---
Bob Smith (smithr)
Austin, Texas baby!
2010 Kawasaki Concours, Midnight Blue
COG 6197, CDA 107

Offline Eddie-FL

  • Sport Tourer
  • *****
  • Posts: 2014
  • AREA: Southeast Area
  • COG#: 7073
  • Membership Level: Active
Re: Security Issue – Please Read!
« Reply #10 on: January 07, 2011, 07:22:33 pm »
OK. Done and done. Lets hope this helps keep the bastiches away!

Eddie
Anderson, SC
2015 Suzuki DL650XT "Grey Ghost"
1969 Triumph Bonneville 
AMA# 686667 COG# 7073   CDA# 0136

Offline WillyP

  • I Need a Life
  • ******
  • Posts: 6133
  • Live Free Or Die
    • Suncook Carpentry
  • AREA: Northeast Area
  • COG#: 8799
  • Membership Level: Active
Re: Security Issue – Please Read!
« Reply #11 on: January 07, 2011, 11:28:47 pm »
It might help, can't hurt.
Smart people look like crazy people to stupid people.
pics

Offline WillyP

  • I Need a Life
  • ******
  • Posts: 6133
  • Live Free Or Die
    • Suncook Carpentry
  • AREA: Northeast Area
  • COG#: 8799
  • Membership Level: Active
Re: Security Issue – Please Read!
« Reply #12 on: January 08, 2011, 01:00:24 am »
Mine changed back.  I think it was because I logged in to the cogmos site.
Smart people look like crazy people to stupid people.
pics

Offline 2linby

  • Iron Butt
  • *****
  • Posts: 3711
  • I rode today, did you?
  • AREA: Northwest Area
  • COG#: 5539
  • Membership Level: Active
Re: Security Issue – Please Read!
« Reply #13 on: January 08, 2011, 01:25:58 am »
Thanks for the heads up. If you find the individual(s) responsible, please let me know as I still have relatives in New Jersey. North Jersey....

Ay Ay!!! Yous... Yeah yous!!  Watch you look'n at huh?  Huh punk!    :o   Yeah.............I didn't tink so. ;)
"2linby" Get it? "Tooling by" "Everything is simple, but nothing is easy".
Ex NWAD, AAD, COG #5539, IBA #15034 TEAM OREGON MC Instructor, Mentor 2001 Sonic Blue  166K and counting!
http://tinyurl.com/njas8 (IBA BBG)
http://tinyurl.com/lwelx (Alaska trip

Offline S Smith

  • Northeast Area Director
  • Officer
  • I Need a Life
  • ****
  • Posts: 5274
    • COG Northeast Area Home Page
  • AREA: Northeast Area
  • COG#: 3184
  • Membership Level: Administrator
Re: Security Issue – Please Read!
« Reply #14 on: January 08, 2011, 01:32:46 am »
Mine changed back.  I think it was because I logged in to the cogmos site.

Yes - correct.  It is brought over from COGMOS during the authentication process when you log on here.

edit: I provided an better displayed name update procedure a few posts later...



« Last Edit: January 08, 2011, 10:32:17 am by S Smith »
| Steve Smith | COG #3184 | MSF/CONREP RC |

There is more to be gained by members raising hands saying "I'll do that" instead of pointing fingers saying "nobody's doing that."

Offline Cap'n Bob

  • GOLD STAR
  • *******
  • Posts: 10955
  • AREA: Northeast Area
  • COG#: 7134
  • Membership Level: Active
Re: Security Issue – Please Read!
« Reply #15 on: January 08, 2011, 08:22:54 am »
checking my new name.

I changed it but I just came back on and my display name is back the way it was. Hmmmm

Did you change your user name, then use your password at the bottom of the page, then (important here) push the change profile button on the bottom right of the page?
 If you didn't use the your password to authorize the change and press the change profile button, if probably didn't take! It took me a couple of tries to get it change correctly.

Offline S Smith

  • Northeast Area Director
  • Officer
  • I Need a Life
  • ****
  • Posts: 5274
    • COG Northeast Area Home Page
  • AREA: Northeast Area
  • COG#: 3184
  • Membership Level: Administrator
Re: Security Issue – Please Read!
« Reply #16 on: January 08, 2011, 10:29:08 am »
checking my new name.

I changed it but I just came back on and my display name is back the way it was. Hmmmm


Did you change your user name, then use your password at the bottom of the page, then (important here) push the change profile button on the bottom right of the page?
 If you didn't use the your password to authorize the change and press the change profile button, if probably didn't take! It took me a couple of tries to get it change correctly.


No - Do not change the displayed name this way or it will not stick.
If you do it this way the displayed name will revert back when you log out & in here. There are several displayed user data fields that are imported from the COGMOS database at www.cog-online.org during authentication, each time you log on here.  Colin explained this a while back. Here is the post:
http://forum.cog-online.org/index.php?topic=25387.0

Here is a tested & confirmed sequence to change the displayed name... I have enhanced the instruction for the computer impaired.
  • Logout of this forum (top, right menu above)
  • Log into COGMOS (www.cog-online.org), go to Member Area menu and then select  My Info.
  • Change your Alias to what you want your displayed name to be & save by clicking Submit Change button on bottom of page.
  • Log back into this forum and the info will be carried over and displayed.




« Last Edit: January 08, 2011, 10:36:28 am by S Smith »
| Steve Smith | COG #3184 | MSF/CONREP RC |

There is more to be gained by members raising hands saying "I'll do that" instead of pointing fingers saying "nobody's doing that."

Offline Cap'n Bob

  • GOLD STAR
  • *******
  • Posts: 10955
  • AREA: Northeast Area
  • COG#: 7134
  • Membership Level: Active
Re: Security Issue – Please Read!
« Reply #17 on: January 12, 2011, 06:11:15 pm »
Your right Steve. I got bumped out today. So I decided to change my alias for the third time since this thread appeared!  :))

Offline norm-9688

  • Crotch Rocket
  • ****
  • Posts: 1536
  • AREA: Northeast Area
  • COG#: 7011
  • Membership Level: Active
Re: Security Issue – Please Read!
« Reply #18 on: January 12, 2011, 08:19:26 pm »
probably didn't take! It took me a couple of tries to get it change correctly.


No - Do not change the displayed name this way or it will not stick.
If you do it this way the displayed name will revert back when you log out & in here. There are several displayed user data fields that are imported from the COGMOS database at www.cog-online.org during authentication, each time you log on here.  Colin explained this a while back. Here is the post:
http://forum.cog-online.org/index.php?topic=25387.0

Here is a tested & confirmed sequence to change the displayed name... I have enhanced the instruction for the computer impaired.
  • Logout of this forum (top, right menu above)
  • Log into COGMOS (www.cog-online.org), go to Member Area menu and then select  My Info.
  • Change your Alias to what you want your displayed name to be & save by clicking Submit Change button on bottom of page.
  • Log back into this forum and the info will be carried over and displayed.


 Thanks Steve, It had not happened to me as I am logged in forever. I will fix it now.

Offline Froggz

  • Mini Bike
  • **
  • Posts: 199
  • AREA: Northwest Area
  • COG#: 8173
  • Membership Level: Expired - Expired Term
Re: Security Issue – Please Read!
« Reply #19 on: January 14, 2011, 05:23:23 pm »
Checking it out...........thanks Colin and Rick for the heads-up! You deserve a +karma for this ;) ;D
Claude/COG #8173 
08 C14  "Ribbit II"

Offline Froggz

  • Mini Bike
  • **
  • Posts: 199
  • AREA: Northwest Area
  • COG#: 8173
  • Membership Level: Expired - Expired Term
Re: Security Issue – Please Read!
« Reply #20 on: January 15, 2011, 05:18:46 pm »
Did the switch yesterday with apparent success, but today it's back to the "old" me, what gives???

My question then is this: because I noticed most members haven't changed theirs yet for whatever reasons, is it really necessary for me to modify my user name if I think my password is strong enough?   
Claude/COG #8173 
08 C14  "Ribbit II"

Offline Cap'n Bob

  • GOLD STAR
  • *******
  • Posts: 10955
  • AREA: Northeast Area
  • COG#: 7134
  • Membership Level: Active
Re: Security Issue – Please Read!
« Reply #21 on: January 15, 2011, 05:58:03 pm »
Claude, You need to go change your alias name in the main cogmos section. I made the same mistake and only changed it here in the forum section. Mine also reverted back when I logged out.

Follow Steve's directions, here:


There are several displayed user data fields that are imported from the COGMOS database at www.cog-online.org during authentication, each time you log on here.  Colin explained this a while back. Here is the post:
http://forum.cog-online.org/index.php?topic=25387.0

Here is a tested & confirmed sequence to change the displayed name... I have enhanced the instruction for the computer impaired.
  • Logout of this forum (top, right menu above)
  • Log into COGMOS (www.cog-online.org), go to Member Area menu and then select  My Info.
  • Change your Alias to what you want your displayed name to be & save by clicking Submit Change button on bottom of page.
  • Log back into this forum and the info will be carried over and displayed.

Offline Froggz

  • Mini Bike
  • **
  • Posts: 199
  • AREA: Northwest Area
  • COG#: 8173
  • Membership Level: Expired - Expired Term
Re: Security Issue – Please Read!
« Reply #22 on: January 16, 2011, 08:18:49 pm »
Thanks Bob, I like the "new" me, the new slimmed down version that is. Now if only it was that easy in real life. :))
Claude/COG #8173 
08 C14  "Ribbit II"

Offline Cap'n Bob

  • GOLD STAR
  • *******
  • Posts: 10955
  • AREA: Northeast Area
  • COG#: 7134
  • Membership Level: Active
Re: Security Issue – Please Read!
« Reply #23 on: January 16, 2011, 08:39:18 pm »
Thanks Bob, I like the "new" me, the new slimmed down version that is. Now if only it was that easy in real life. :))


Ain't that the truth!!!   :))