Discussion - Member to Member Sales - Research Center
Discussion - Member to Member Sales - Research Center
In response to the website being hacked recently, I have made a significant change to the password security. All the passwords are now held in encrypted format so that should the website be hacked again, the passwords will not be in a visible format to the hacker. This means that neither the system nor I can retrieve your password for you because I can't read it either. If you forget your password, use the "Forgot Password" link on the login screen. Enter your username as requested and you will be sent an email to the main email account in your profile which will include a link that enables you to reset your password.
Let me know if you have any problems using this or if you have any problems generally after the website being hacked.
Regards ... Tim.
Login to Like
this post
Following up on the change to the Password storage policy described above, I have reset the passwords for everyone who didn't change their password after 9:00am Oct 3, 2015 EST (yesterday). If you only just received the email that I sent out yesterday or haven't got to change your password yet, the password that you have been using will not work. You will have to reset your password using the process I described in the above posting.
If you did change your password yesterday as requested and because of time differences your new password has been wiped by the global reset that I have just done, I do apologize. Please use the "Forgotten Password" link on the Login screen and reset your password.
Regards ... Tim.
Login to Like
this post
thanks Tim.
it will be interesting to see who, and how many, show up
Login to Like
this post
Hi Tim,
Just reset my password, no problems here.
Thank-you to you and everyone at SOR for your openness about this. You must be very busy sorting this out and I, like many other members, appreciate what you are doing.
Best wishes to all,
James
Login to Like
this post
Just reset mine-- worked without problems; the reset email took about 10 minutes to reach me.
~Peter
Login to Like
this post
Thank you Arno and Tim for picking up on this problem and for encrypting the passwords. We are so fortunate to have all the volunteers & contributors who give up so much of their personal time so that we can enjoy all the features the 'Stamporama' website and its members offer to us.
Liz
5 Members
like this post.
Login to Like.
I'd like to echo Patches kudos to the volunteers who do so much (for so little compensation) to make this such a great site for stamp collectors. Contrast the rapid response to the hacking here to what happens when a major commercial database gets hacked!
LarryD
4 Members
like this post.
Login to Like.
Thanks Tim,
I too just reset my password. I agree with other comments that we should learn to change our passwords on a regular basis but like human nature, just too lazy until something like this happens. Only took 20 seconds away from "stampin". Thanks again,
Bill
1 Member
likes this post.
Login to Like.
Auctions - Approvals
Hi Everyone,
In response to the website being hacked recently, I have made a significant change to the password security. All the passwords are now held in encrypted format so that should the website be hacked again, the passwords will not be in a visible format to the hacker. This means that neither the system nor I can retrieve your password for you because I can't read it either. If you forget your password, use the "Forgot Password" link on the login screen. Enter your username as requested and you will be sent an email to the main email account in your profile which will include a link that enables you to reset your password.
Let me know if you have any problems using this or if you have any problems generally after the website being hacked.
Regards ... Tim.
Login to Like
this post
Auctions - Approvals
re: Change to Stamporama Password Security
Following up on the change to the Password storage policy described above, I have reset the passwords for everyone who didn't change their password after 9:00am Oct 3, 2015 EST (yesterday). If you only just received the email that I sent out yesterday or haven't got to change your password yet, the password that you have been using will not work. You will have to reset your password using the process I described in the above posting.
If you did change your password yesterday as requested and because of time differences your new password has been wiped by the global reset that I have just done, I do apologize. Please use the "Forgotten Password" link on the Login screen and reset your password.
Regards ... Tim.
Login to Like
this post
Auctions
re: Change to Stamporama Password Security
thanks Tim.
it will be interesting to see who, and how many, show up
Login to Like
this post
re: Change to Stamporama Password Security
Hi Tim,
Just reset my password, no problems here.
Thank-you to you and everyone at SOR for your openness about this. You must be very busy sorting this out and I, like many other members, appreciate what you are doing.
Best wishes to all,
James
Login to Like
this post
re: Change to Stamporama Password Security
Just reset mine-- worked without problems; the reset email took about 10 minutes to reach me.
~Peter
Login to Like
this post
12:19:12pm
Auctions - Approvals
re: Change to Stamporama Password Security
Thank you Arno and Tim for picking up on this problem and for encrypting the passwords. We are so fortunate to have all the volunteers & contributors who give up so much of their personal time so that we can enjoy all the features the 'Stamporama' website and its members offer to us.
Liz
5 Members
like this post.
Login to Like.
re: Change to Stamporama Password Security
I'd like to echo Patches kudos to the volunteers who do so much (for so little compensation) to make this such a great site for stamp collectors. Contrast the rapid response to the hacking here to what happens when a major commercial database gets hacked!
LarryD
4 Members
like this post.
Login to Like.
re: Change to Stamporama Password Security
Thanks Tim,
I too just reset my password. I agree with other comments that we should learn to change our passwords on a regular basis but like human nature, just too lazy until something like this happens. Only took 20 seconds away from "stampin". Thanks again,
Bill
1 Member
likes this post.
Login to Like.