exceeded login attempts?

Let us know when something isn't working correctly, or if you find a typo. Do not post complaints or suggestions here.
Post Reply
User avatar
AJOwens
Galago
Posts: 814
Joined: Mon Jul 20, 2009 6:50 am
Instruments: bass, guitar, keyboards, drums, flute
Recording Method: Reaper, Reason Adapted, M-Audio 1010LT + 2496 (Windows XP)
Submitting as: James Owens
Location: Ottawa, Canada

exceeded login attempts?

Post by AJOwens » Mon Feb 14, 2011 6:20 pm

I haven't logged in for weeks. Just now, I typed my username and password once, and was told I'd exceeded my login requests and had to decipher the code in a graphic.

Is there a bug, or is somebody trying to hack in as me? (If so, they're lousy hackers - my password is not a masterpiece of security.)

Also, that graphic is murder to figure out!
User avatar
fluffy
Baboon
Posts: 9838
Joined: Sat Sep 25, 2004 10:56 am
Instruments: sometimes
Recording Method: Logic Pro X
Submitting as: Sockpuppet
Pronouns: she/they
Location: The Plaidlands (also, Seattle)
Contact:

Re: exceeded login attempts?

Post by fluffy » Mon Feb 14, 2011 6:24 pm

I've been having that lately as well.
User avatar
Generic
Gorilla
Posts: 5423
Joined: Sat Sep 25, 2004 11:45 am
Instruments: Piano, Guitar, Harmonica, Mandolin, Accordion, Bass
Recording Method: Cubase 5AI, Cubase 6
Submitting as: Jon Eric, Hunky
Location: Pittsburgh, PA
Contact:

Re: exceeded login attempts?

Post by Generic » Mon Feb 14, 2011 6:32 pm

I haven't had it, but Signboy was complaining about it in the chatroom.
"Warren Zevon would be proud." -Reve Mosquito

Jon Eric - Get your feel on.
Website powered by Spud's Amazing Website Machine.

Circle of Titles!!!!!!
User avatar
Billy's Little Trip
Odie
Posts: 12000
Joined: Mon Nov 13, 2006 2:56 pm
Instruments: Guitar, Bass, Vocals, Drums, Skin Flute
Recording Method: analog to digital via Presonus FireBox, Cubase and a porn machine
Submitting as: Billy's Little Trip, Billy and the Psychotics
Location: Cali fucking ornia

Re: exceeded login attempts?

Post by Billy's Little Trip » Mon Feb 14, 2011 8:06 pm

I haven't had that issue yet.
User avatar
Caravan Ray
bono
bono
Posts: 8153
Joined: Sat Sep 25, 2004 1:51 pm
Instruments: Penis
Recording Method: Garageband
Submitting as: Caravan Ray,G.O.R.T.E.C,Lyricburglar,The Thugs from the Scallop Industry
Location: Toowoomba, Queensland
Contact:

Re: exceeded login attempts?

Post by Caravan Ray » Mon Feb 14, 2011 9:03 pm

Billy's Little Trip wrote:I haven't had that issue yet.
That is because you have not actually logged out for the past 4 years.
User avatar
Generic
Gorilla
Posts: 5423
Joined: Sat Sep 25, 2004 11:45 am
Instruments: Piano, Guitar, Harmonica, Mandolin, Accordion, Bass
Recording Method: Cubase 5AI, Cubase 6
Submitting as: Jon Eric, Hunky
Location: Pittsburgh, PA
Contact:

Re: exceeded login attempts?

Post by Generic » Mon Feb 14, 2011 9:43 pm

Billy's Little Trip wrote:I haven't had that issue yet.
PHEW! That's a load off of everyone's minds. Thanks for not leaving us in suspense, dude.
"Warren Zevon would be proud." -Reve Mosquito

Jon Eric - Get your feel on.
Website powered by Spud's Amazing Website Machine.

Circle of Titles!!!!!!
User avatar
BBABM
Capuchin
Posts: 664
Joined: Sun Aug 15, 2010 11:34 pm
Instruments: Guitar, Voice, drums
Recording Method: Session, fruity loops
Submitting as: Bad Boys at Bat Mitzvahs, Fitzroy
Location: Charlottesville, Va

Re: exceeded login attempts?

Post by BBABM » Mon Feb 14, 2011 9:45 pm

I had that problem too, but I was trying to sign in on a different ISP... And kinda assumed tha t it was because of that... But I agree that the graphic is super hard to figure out
User avatar
Billy's Little Trip
Odie
Posts: 12000
Joined: Mon Nov 13, 2006 2:56 pm
Instruments: Guitar, Bass, Vocals, Drums, Skin Flute
Recording Method: analog to digital via Presonus FireBox, Cubase and a porn machine
Submitting as: Billy's Little Trip, Billy and the Psychotics
Location: Cali fucking ornia

Re: exceeded login attempts?

Post by Billy's Little Trip » Tue Feb 15, 2011 12:00 am

Generic wrote:
Billy's Little Trip wrote:I haven't had that issue yet.
PHEW! That's a load off of everyone's minds. Thanks for not leaving us in suspense, dude.
No problem. Sometimes people ask me, hey BLT, how is it that you give and you give and you give, then after that, you give some more? It's simple really, it's because I'm a giver.
User avatar
fluffy
Baboon
Posts: 9838
Joined: Sat Sep 25, 2004 10:56 am
Instruments: sometimes
Recording Method: Logic Pro X
Submitting as: Sockpuppet
Pronouns: she/they
Location: The Plaidlands (also, Seattle)
Contact:

Re: exceeded login attempts?

Post by fluffy » Tue Feb 15, 2011 12:06 am

ugh, don't make me think about goatse
User avatar
Billy's Little Trip
Odie
Posts: 12000
Joined: Mon Nov 13, 2006 2:56 pm
Instruments: Guitar, Bass, Vocals, Drums, Skin Flute
Recording Method: analog to digital via Presonus FireBox, Cubase and a porn machine
Submitting as: Billy's Little Trip, Billy and the Psychotics
Location: Cali fucking ornia

Re: exceeded login attempts?

Post by Billy's Little Trip » Tue Feb 15, 2011 9:16 am

no :shock:
User avatar
Generic
Gorilla
Posts: 5423
Joined: Sat Sep 25, 2004 11:45 am
Instruments: Piano, Guitar, Harmonica, Mandolin, Accordion, Bass
Recording Method: Cubase 5AI, Cubase 6
Submitting as: Jon Eric, Hunky
Location: Pittsburgh, PA
Contact:

Re: exceeded login attempts?

Post by Generic » Wed Feb 16, 2011 9:17 am

Hey, this issue just happened to me. The captcha image was kind of unusual, and had some floating bits that were the same color as the letters, which made it difficult to read, but I still figured it out relatively quickly.

Is PhpBB mishandling cookies, or something?
"Warren Zevon would be proud." -Reve Mosquito

Jon Eric - Get your feel on.
Website powered by Spud's Amazing Website Machine.

Circle of Titles!!!!!!
User avatar
fluffy
Baboon
Posts: 9838
Joined: Sat Sep 25, 2004 10:56 am
Instruments: sometimes
Recording Method: Logic Pro X
Submitting as: Sockpuppet
Pronouns: she/they
Location: The Plaidlands (also, Seattle)
Contact:

Re: exceeded login attempts?

Post by fluffy » Wed Feb 16, 2011 10:08 am

From the logs it looks like there might actually be someone trying to brute-force their way in using existing usernames. There are a few IP addresses which have had hundreds of login attempts over the last couple days. However, it's hard to tell if the worst ones are legitimate users who just have a badly-set-up auto-login thing or if they're actively reading the forum looking for potential victims or the like, so I'm not ready to IPban them just yet.

As far as the captcha, phpBB's captcha system is pretty notoriously awful. Either it's too hard for humans or it's too easy for bots. Personally I think it should just be disabled entirely, or replaced with reCaptcha or something.
User avatar
Billy's Little Trip
Odie
Posts: 12000
Joined: Mon Nov 13, 2006 2:56 pm
Instruments: Guitar, Bass, Vocals, Drums, Skin Flute
Recording Method: analog to digital via Presonus FireBox, Cubase and a porn machine
Submitting as: Billy's Little Trip, Billy and the Psychotics
Location: Cali fucking ornia

Re: exceeded login attempts?

Post by Billy's Little Trip » Thu Feb 17, 2011 12:21 am

They're after our music! It's 2012! It wants our music! I say we give it to it so it leaves peacefully.

....then when it's leaving, we kill it...with our music. irony, Foster's

Image
User avatar
jack
Lemur
Posts: 3741
Joined: Sat Sep 25, 2004 10:41 am
Location: santa cruz, ca.

Re: exceeded login attempts?

Post by jack » Sat Apr 02, 2011 12:19 pm

This just happened to me too. I thought maybe my account got hacked. EDIT: Just read fluffy's synopsis. That sucks. Stupid hax0rz.
"I've never wished a man dead, but I have read some obituaries with great pleasure." - Mark Twain
Lunkhead
Gorilla
Posts: 6201
Joined: Sat Sep 25, 2004 12:14 pm
Instruments: many
Recording Method: cubase/reason/mac/tascam4x4
Submitting as: Berkeley Social Scene, Merisan, Tiny Robots
Pronouns: he/him
Location: Berkeley, CA
Contact:

Re: exceeded login attempts?

Post by Lunkhead » Sat Apr 02, 2011 2:36 pm

It's happened to me every time I've logged in for the last few weeks. My guess is the admins have it set to force people to enter the CAPTCHA on login in order to combat all the spam that the boards had been getting in the last few months. EDIT: just read fluffy's synopsis. Dang spammers...
User avatar
Manhattan Glutton
Loris
Posts: 1530
Joined: Tue Feb 15, 2005 12:10 pm
Instruments: Angst
Recording Method: REAPER
Location: Madison, WI
Contact:

Re: exceeded login attempts?

Post by Manhattan Glutton » Sat Apr 02, 2011 2:39 pm

I just assumed someone was trying to log in as me because, hey, who doesn't want to be me? But now that you guys have reported the problem too, I don't feel as special. Specialer than BLT, of course, though.
If I had a dollar for every one of my songs j$ has called a 90s pastiche, I'd have $1 for every song I've written.

Nur Ein Archives | The New Ugly Podcast
User avatar
Spud
Lemur
Posts: 4744
Joined: Fri Sep 24, 2004 10:25 am
Instruments: Bass, Keyboards, eHorn
Submitting as: Octothorpe
Location: Seattle
Contact:

Re: exceeded login attempts?

Post by Spud » Mon Apr 04, 2011 8:37 pm

Hey, it fucking happens to me, too. I don't think we've changed anything. It's phpbb responding automatically to the attacks that fluffy mentioned. Actually, I think that's pretty cool.
"I only listen to good music. And Octothorpe." - Marcus Kellis
Song Fight! The Rockening
User avatar
roymond
Gorilla
Posts: 5099
Joined: Sat Sep 25, 2004 3:42 pm
Instruments: Guitars, Bass, Vocals, Logic
Recording Method: Logic X, MacBookPro, Guitar Rig 5, Rig Kontrol 3, Focusrite Scarlett 2i2, iPad3, Apogee Jam
Submitting as: roymond, Dangerous Croutons, Intentionally Left Bank
Location: brooklyn
Contact:

Re: exceeded login attempts?

Post by roymond » Fri Apr 08, 2011 12:27 pm

What man do we have to make beaten to hear Caravan Ray?
roymond.com | songfights | covers
"Congratulatons, roymond; you finally managed to write a song I don't really care for." - Märk
User avatar
Spud
Lemur
Posts: 4744
Joined: Fri Sep 24, 2004 10:25 am
Instruments: Bass, Keyboards, eHorn
Submitting as: Octothorpe
Location: Seattle
Contact:

Re: exceeded login attempts?

Post by Spud » Sat Apr 09, 2011 10:20 am

Not understanding your question, Roymond, nor what it is doing in this thread...
"I only listen to good music. And Octothorpe." - Marcus Kellis
Song Fight! The Rockening
Post Reply