Questions about passwords and security questions
Thread Content
We are here for technical exchanges; if there are any problems, let’s work together to solve them. The current requirement to change passwords and answer security questions seems unnecessary to me – right? I hope the management will negotiate a solution to this issue; it’s not necessary to prevent anyone from entering or exiting just because of safety concerns. There’s no need for such complications
This is mainly to put an end to those who post advertisements indiscriminately. If the forum is constantly filled with malicious posts and spam advertisements everywhere, one can only imagine how people feel.
Over the past half month, a considerable number of users on the forum had their passwords stolen, which led to the unauthorized posting of illegal and pornographic content; this disrupted the normal management order in various sections of the forum and severely damaged its reputation. At this point, the forum needs to take necessary measures to put a stop to it, and we also hope that our moderator team will cooperate actively. http://bbs.hcbbs.com/plugin.php?id=dragon_frontlog:frontlog&opaction=banlog The first ten pages of the banned records all pertain to the past half month; it can be seen that over 100 users have had their accounts banned for posting pornographic content as a result of their accounts being stolen, including 4 moderators (real*), all of whom used overly simple passwords and failed to set up security questions.
On a computer, automatic login can be set by adding it to the favorites; phones don’t allow this feature. However, as long as one doesn’t click \"Log out\" in the upper right corner of the home screen, other ways of logging out will still result in automatic login.
It actually involves 4 moderators (real*)? :funk: I only know one. This morning, when I went to work at around 8 o’clock, I saw similar violations again, and I asked Xi Li to deal with them. I’ve seen so many posts like this that I’ve become a bit numb to them. Is it okay to do this? For forum accounts, if you don’t log in for a certain number of days, your ability to post messages is restricted; in the first half hour, you can only send a few posts. If violations occur, the corresponding IP address is automatically blocked by the system’s measures
Hehe, ordinary members get hacked; it’s simply a matter of unauthorized distribution of prohibited content, and banning them once it’s detected is enough. But if the moderator is stolen, he will panic and lift the bans on all the previously prohibited accounts, leading them to cause chaos. I really got to experience it this time
Yeah, I saw it; it’s because one of the real moderators was someone I recommended. It’s fine to chat on WeChat. So, I think, should we adjust the permissions for managers at various levels? I used to know only that I could manage the users who posted in my own forum, but then, a few days later, I suddenly discovered that it was also possible to apply restrictions such as “prohibit posting” and “prohibit access” across different forums – which was really problematic.
If the original poster has experienced those chaotic days or has taken a look at the record of deleted posts, they will understand why this is necessary. It’s all because simple password settings led to account theft, which resulted in the posting of a large amount of illegal content. The first few pages of popular forums are filled with such information, causing serious harm. Moreover, since the real moderator accounts were stolen, the accounts that had been muted or blocked were unlocked, allowing them to continue posting illegal content and thus creating a lot of redundant work. Therefore, it is very necessary to ensure the security of personal accounts, especially those managed by teams, which should take additional measures to protect them.