Topic: Email security notifications (Read 3433 times)

Presumably, the bots are advanced enough so that they can create their own email server and acknowledge these sign up confirmations.

Requiring email verification would likely result in normal users to have decreased privacy.

This looks like a great improvement to the security here.

Now, please could we have email confirmation of new registration applications, and a restriction that only one account can be associated with an email address. I am aware that it is easy to circumvent these restrictions, but it adds some more difficulties to the bot signups.

I'll never forget how I lost my account because the admins were not intelligent enough to actually add email security notifications at the time.

RIP awesome31312

From Politics shitposting to shitposting in a language we don't know

I think this a good development and it will help a long way to reduce hacking of accounts and secure the account as long as possible but, I as a person don't have the idea to carry out this operation and makes my account to be firmly secured please can you help me with some details explanations? I will really appreciate that Thanks .

It nice to receive a link from the forum to the link email to your bitcointalk.org account before you can change your password.
Second, if you will receive email also saying that your account has been opened for the first time in a diiference device--- it will also give account owner to block this transaction if ever your account was opened in unknown location---

What if I lose acces to my old email address, which I used to register my account at the start?
I guess this situation might lead to lose all control to my account, am I right?
Are there any chance to get my account back if I unfortunately fall into such very bad situation?

---

Just a bit curious because I have never experienced such terrible cases.

If you've not locked your account, yopmail allows you to open any email registered with that domain, just use the forget password option and open the email on yopmail and then reset the email.

On another note, the same IP Address hacked me and a few other people.

my account was hacked but I was able to click on the link to lock my account,
which is a problem for me how to get back my account ,
and how my status account now
will admin restore that account to the final data before the mail and password change and send me a new password ?

I am not sure if it has been discussed here or not but excuse my rush here...

Looking at all these hacked/locked account issues and the time needed to recover them manually, I feel very insecure for my account too. Although I always use strong password, 2FA where applicable - all sorts of things to ensure the highest security but still anything can happen anytime. It could be my mistake or it could be system leak, which actually does not matter. What matters is once an accident happen then the account holder is facing all sorts of hassles which is frustrating.

Coming to my point...

I actually do not understand why the email to lock? Instead of the link to lock the account why can not the system send an email asking to revoke the request if the change has not made by this email account holder?

I think this could be a decent procedure....
If an account (bitcoinTalk) requests for password and/or email change then send an email to the last registered email address asking for approval. Send a link which will confirm manual approval for the change requested. If the original user requested the change then they are liable for their action. Now, if the user do not have access of the email address only then ask the mods/admins to help them out. I believe this small tweak in sending email, will be saving a lot of time for both the users who are victim and mods/admins.

---

Update:
A little correction...
For password change send approval email to the current registered email account and for email change send approval email to the last registered email.

Do you hear that sound, whizzing over your head?

It's a bird, it's a plane, no wait...
w H _O O ^O O O _{S H} H ^{H H}

I know it's hard but you should stop trying to be such a cunt. Maybe you heard the phrase wrong: it's not "you eat what you are"

1) I know that. What difference does it make to how should I address him ?

2) I know the process to recover as well. I am asking about specific thing not mentioned in that thread.



So, what stops the hacker to gain access back to the account ? Still waiting for an official reply on this.

Here we have yet another admin wannabe. great.

It will be the one the hacker used. This allows it so even if an admin recovers an account the hacker still has access to the account. /s

OP is admin

Based on this sticky post on this section, you will ask signed message with your new email address.
https://bitcointalksearch.org/topic/recovering-hacked-accounts-or-accounts-with-lost-passwords-497545

Thanks theymos this is a good security features.
this is an effort to improve the security of our work system

OP, what happens after the account is unlocked by the admin ? What will be the email id in that account - earlier one or the one that hacker used?

indeed.
i also lost my account prior to hack.
the email changed and last time i asked to mod, it's banned already.
i think they also should record 'first email registered' to verify account ownership manually

theymos

Sorry Guest, you are banned from using this forum!
For security, your account has been locked. Email [email protected]

-----BEGIN BITCOIN SIGNED MESSAGE-----
My account has been hacked/lost. Please reset the email to <[email protected]>. The current date is <01.11.2017 /23.11.2017>.

Account locked . Nick Afandoras  . Helpp

This is good security measure but is it working?

My account https://bitcointalksearch.org/user/mrsalve-400666 got hacked 14'th of Nov. Email changed and then password.

I got in to it quickly in minutes after it was done. Clicked a link and thought thief can't use account any more.
Checking now my account activity I notice someone has been it on it today cus it showing last activity Last Active:
November 22, 2017, 03:12:06 AM???


Btw Cyrus or theymos if you find time I would like to get my account back. I sent PM's to you with proof that I'm a original email holder and then other one with signed message.