Bitcoin Forum

Other => Meta => Topic started by: cryptoaddictchie on July 02, 2020, 07:04:25 AM



Title: [DISCUSSION]Forum Announcement and Important notifications by email
Post by: cryptoaddictchie on July 02, 2020, 07:04:25 AM

Hello just my curiosity. What is the scope of Forum Announcements in this statement which we can received on email? Is it like only message sent to all by theymos or any administrator(s)? Can anybody give an example of this in the past. I know the important notification includes your messages that has been deleted by moderators and replied of users which totally giving off notificationIf only you are subscribed on notification setting via email.

Do anyone think that a feature that be able to response via email on notified replied on our topic is good or irelevant idea?


If this post has been discussed or off topic here will lock the thread


Title: Re: [DISCUSSION]Forum Announcement and Important notifications by email
Post by: Little Mouse on July 02, 2020, 08:09:07 AM
From smf forum- https://wiki.simplemachines.org/smf/Notifications

Quote
Receive forum newsletters, announcements and important notifications by email - If this is enabled, any newsletters or announcements from the forum will be sent to your email inbox. Administrators can remove this option by unchecking Allow users to disable announcements in the section Features and Options.
I think theymos never send any newsletter or email to user, I have not seen any. As far as I know after a hack in bitcointalk, theymos sent email to everyone to change their password. This belongs to this feature.


Title: Re: [DISCUSSION]Forum Announcement and Important notifications by email
Post by: YOSHIE on July 02, 2020, 08:11:58 AM
I think @theymos, have something to say and add about email here.

Topic: Email security notifications (https://bitcointalk.org/index.php?topic=2282758.0)

I added email notifications for some security events:

Whenever your password is changed (except by an administrator), you will get an email about it.

Whenever your email is changed (except by an administrator), your old email will get an email about it with a link to lock your account. The link is valid for 14 days.

Let me know if you find any bugs.


Maybe, your curiosity is answered in the post above.

Or:
Someone has experienced something similar, by activating ✓ Email.
Answer:

1. Go to this page: https://bitcointalk.org/index.php?action=profile;sa=notification
2. Unsubscribe from all the boards and threads you don't want to get notified when there is a new post.


Title: Re: [DISCUSSION]Forum Announcement and Important notifications by email
Post by: BIT-BENDER on July 02, 2020, 08:27:26 AM
Do anyone think that a feature that be able to response via email on notified replied on our topic is good or irelevant idea?
It's irrelevant, why because like the name -NOTIFICATION- it to notify you on a reply on your topic, if you can be able to reply a post on your topic by making the reply on your email can leave you open when your email is bridged -email security curved-


About the announcement it can be something like an important information the forum will pass to you -its on very rear occasion


Title: Re: [DISCUSSION]Forum Announcement and Important notifications by email
Post by: ChuckBuck on July 03, 2020, 04:51:55 AM
Whenever your email is changed (except by an administrator), your old email will get an email about it with a link to lock your account. The link is valid for 14 days.
Well, this feature is really good for security. I didn't know about it before, if a regular user is active, it's pretty easy to get back their account as long as they own the old email. I see that a lot of accounts have been hacked, this is good to prevent it  :D Only accounts that have been inactive for a long time can be hacked without regaining them. I think stake bitcoin address seems unnecessary if email works  :D


Title: Re: [DISCUSSION]Forum Announcement and Important notifications by email
Post by: cryptoaddictchie on July 03, 2020, 05:15:04 AM
As far as I know after a hack in bitcointalk, theymos sent email to everyone to change their password. This belongs to this feature.
Bitcointalk was hacked before? I didnt know that incident, maybe its the first email sent to all users by email. This is what Ive been looking for.

Someone has experienced something similar, by activating ✓ Email.
Yes it is, yoshie however that only if you subscribed. Im thinking what forum announcement has been made specially for all like users like what LM has been mentioned.

~snip~
Yes I know notification is only for this, Im thinking somehow if features like that could possibly be implemented. Anyway thanks.


Title: Re: [DISCUSSION]Forum Announcement and Important notifications by email
Post by: hacker1001101001 on July 03, 2020, 05:57:38 AM
As far as I know after a hack in bitcointalk, theymos sent email to everyone to change their password. This belongs to this feature.
Bitcointalk was hacked before? I didnt know that incident, maybe its the first email sent to all users by email. This is what Ive been looking for.

Yes, it was indeed hacked in 2015 with theymos sending similar email notification to forum users. And I guess that's one of the major use of such notification system.

Quote from: theymos
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

You are receiving this message because your email address is associated
with an account on bitcointalk.org. I regret to have to inform you that
some information about your account was obtained by an attacker who
successfully compromised the bitcointalk.org server. The following
information about your account was likely leaked:
 - Email address
 - Password hash
 - Last-used IP address and registration IP address
 - Secret question and a basic (not brute-force-resistant) hash of your
 secret answer
 - Various settings

You should immediately change your forum password and delete or change
your secret question. To do this, log into the forum, click "profile",
and then go to "account related settings".

If you used the same password on bitcointalk.org as on other sites, then
you should also immediately change your password on those other sites.
Also, if you had a secret question set, then you should assume that the
attacker now knows the answer to your secret question.

Your password was salted and hashed using sha256crypt with 7500 rounds.
This will slow down anyone trying to recover your password, but it will
not completely prevent it unless your password was extremely strong.

While nothing can ever be ruled out in these sorts of situations, I do
not believe that the attacker was able to collect any forum personal
messages.

I apologize for the inconvenience and for any trouble that this may cause.
-----BEGIN PGP SIGNATURE-----

iF4EAREIAAYFAlVhiGIACgkQxlVWk9q1keeUmgEAhGi8pTghxISo1feeXkUMhW3a
uKxLeOOkTQR5Zh7aGKoBAMEvYsGEBGt3hzInIh+k43XJjGYywSiPAal1KI7Arfs0
=bvuI
-----END PGP SIGNATURE-----


Title: Re: [DISCUSSION]Forum Announcement and Important notifications by email
Post by: Coin_trader on July 03, 2020, 06:14:02 AM
[img

Hello just my curiosity. What is the scope of Forum Announcements in this statement which we can received on email? Is it like only message sent to all by theymos or any administrator(s)? Can anybody give an example of this in the past. I know the important notification includes your messages that has been deleted by moderators and replied of users which totally giving off notificationIf only you are subscribed on notification setting via email.

Do anyone think that a feature that be able to response via email on notified replied on our topic is good or irelevant idea?


It's an automated associated in the forum. They are using noreply@bitcointalk.org email address to send the notification email. I believe this kind of bots are same with the common newsletter email that all website are using.

Adding reply feature via email is kinda risky because what if someone hacked your email address which is kinda realistic since our email are more prone to leak than our forum account. I believe leaving it as just a notifier is already sufficient. Clicking the link that attached on the email to go on that specific thread is way too easy.  :)