Problems accessing forums?

[Steve]

Obviously the right choice, hopefully the hashing function is a good one!

One little thing, the reset email gives you a new password, not a one time token. So it's really important that users should change it, but it doesn't force that.

These particular qualities are baked into the forum software and it can be difficult to override them without increasing the complexity of software patching/maintenance, which of course then creates a bit of a tricky trade-off.

But, we do try to explore options periodically.

[LSG501]

Don't feel too bad hexus team.... I got one from EA too lol

[Rob_B]

I must say though that I don't often click links in emails so came to the site to change my password but couldn't find the option as I was of course logged out, is that just me missing a glaringly obvious button somewhere?

[Spreadie]

I saw the email and came to Hexus just to check the forums for proof.

It did take a few attempts to change my password - the captcha thingy kept telling me I had entered the wrong string, despite carefully checking it before sending.

[Steve]

I must say though that I don't often click links in emails so came to the site to change my password but couldn't find the option as I was of course logged out, is that just me missing a glaringly obvious button somewhere?

Settings up at the top right, then edit profile on the left and edit password. That's how you can change it in the future.

[Phage]

Thanks for the transparency - Very good show.
Have updated password here and OCUK for good measure.

[Aventus_Warrior]

i had the same... i cant log into the normal website anymore tho after resetting my password, it always boots me back to the log in screen not being logged in

[Rob_B]

Settings up at the top right, then edit profile on the left and edit password. That's how you can change it in the future.

But you only see settings if you're logged in?....

[DR]

We are working on the login to the main site, the team are on that, we will update when we have more.

[DR]

But you only see settings if you're logged in?....

Try and login - it fails takes you to this page:

http://forums.hexus.net/login.php?do=login

You can click

You have entered an invalid username or password. Please enter the correct details and try again. Don't forget that the password is case sensitive. Forgotten your password? Click here!

[watercooled]

I have reset your account to its correct status; it was showing as moderated.

If you haven't already done so, reset your password.

All your posts should now be visible.

Thanks, I had reset my password but I then updated my email address so maybe that triggered it?

[DR]

Right a little more tinkering done ourside, hopefully everyone has no issues now

[Lucio]

Appreciate the transparency and the action taken was to protect us, but the communication wasn't clear that you had *actually* reset the password, as in cleared down the existing password.

A little bit worrying to think "bugger, my account's already been compromised" because I can't log into it, before realising that you've probably just cleared all the passwords at the database level, rather than triggering the "forgot my password" link for everyone.

[TaintedShirt]

Thanks guys for acting and forcing the reset. Unfortunately hacks like these are becoming more the norm.

Sent from my ONEPLUS A3003 using Tapatalk

[Peter Parker]

Thanks for the warning - password changed.

Funnily enough I was reading this post last night :
https://blog.codinghorror.com/your-p...oo-damn-short/

I generate random passwords for all sites using Lastpass (not perfect but at least I'm better off than 95% of people) and where by default length was 12 I'm already considering extending it.

[Apex]

Thanks for the transparency DR, password duely reset

and to thoese who say use a random password with letters / numbers and other special characters, i give you

https://www.xkcd.com/936/