PSA: ACCOUNTS WILL BE LOCKED IF THE SECRET QUESTION IS USED TO RECOVER IT

[dothebeats]

Well I think that is also for security purposes. If one gained access to your secret answer, then you know the rest: they can get access to your account. This feature should be removed imo so that things like hacking wouldn't be a that much of a problem when it comes to secret answers.

One day there will be a "new forum" not sure on timeline of when we see updated forum.  I suspect then it they might possibly address it or remove it.

I think that chances of spending time programming on this forum to do it is slim.  Just have it in meta and people will know not to use it.

Why not try to address this matter on the new forum software? I think it will gain much attention there seeing that it is the place where discussions for what the new software could come up with, and afaik we can kind of request some features we like to see in the new forum.

[1714857145]

1714857145

[1714857145]

1714857145

[jacee]

Well I think that is also for security purposes. If one gained access to your secret answer, then you know the rest: they can get access to your account. This feature should be removed imo so that things like hacking wouldn't be a that much of a problem when it comes to secret answers.

One day there will be a "new forum" not sure on timeline of when we see updated forum.  I suspect then it they might possibly address it or remove it.

I think that chances of spending time programming on this forum to do it is slim.  Just have it in meta and people will know not to use it.

Why not try to address this matter on the new forum software? I think it will gain much attention there seeing that it is the place where discussions for what the new software could come up with, and afaik we can kind of request some features we like to see in the new forum.

I don't think the secret question should be implemented on the new forum. I mean if it's been exposed to the hackers before then that might happen again. Well not with a much secure forum but then, anyway I just want the secret word reset to be fix because I sometimes find it handy specially in my case where I am very precautious in online security.

[ptypichai]

My account just got locked today due to this stupid implantation of password reset by secret question. Had I know about this I would have just done reset by email. It is really annoying because it is a FULL MEMBER account with activity over 900. Today I had to make this new account so I could post. I sent an email to Theymos to the email address given when I was told my account was locked after trying to sign in after the successful password reset by secret question. I am on vacation so when I get home I can figure out which BTC address I have in the sig of my old account and sign a message with it. If they do not answer the email I guess I will use this account to send a PM with a signed message every week as the OP suggested until I finally get a favorable response. I wish I had known about this before resetting the password. Using the secret question seemed faster than doing an email reset. A warning on the reset page that my account was going to be locked would have been nice and I would have done an email reset to avoid having my account locked. Very annoying.

[shorena]

My account just got locked today due to this stupid implantation of password reset by secret question. Had I know about this I would have just done reset by email. It is really annoying because it is a FULL MEMBER account with activity over 900.

No, an activity over 900 would make you at least Hero if not legendary. You are refering to the number of posts I guess.

Today I had to make this new account so I could post. I sent an email to Theymos to the email address given when I was told my account was locked after trying to sign in after the successful password reset by secret question. I am on vacation so when I get home I can figure out which BTC address I have in the sig of my old account and sign a message with it. If they do not answer the email I guess I will use this account to send a PM with a signed message every week as the OP suggested until I finally get a favorable response.

Yes.

I wish I had known about this before resetting the password. Using the secret question seemed faster than doing an email reset. A warning on the reset page that my account was going to be locked would have been nice and I would have done an email reset to avoid having my account locked. Very annoying.

It was meant to be hidden as long as possible, thus there is no warning. Sorry you have to go through this now.

[ptypichai]

My account just got locked today due to this stupid implantation of password reset by secret question. Had I know about this I would have just done reset by email. It is really annoying because it is a FULL MEMBER account with activity over 900.

No, an activity over 900 would make you at least Hero if not legendary. You are refering to the number of posts I guess.

Today I had to make this new account so I could post. I sent an email to Theymos to the email address given when I was told my account was locked after trying to sign in after the successful password reset by secret question. I am on vacation so when I get home I can figure out which BTC address I have in the sig of my old account and sign a message with it. If they do not answer the email I guess I will use this account to send a PM with a signed message every week as the OP suggested until I finally get a favorable response.

Yes.

I wish I had known about this before resetting the password. Using the secret question seemed faster than doing an email reset. A warning on the reset page that my account was going to be locked would have been nice and I would have done an email reset to avoid having my account locked. Very annoying.

It was meant to be hidden as long as possible, thus there is no warning. Sorry you have to go through this now.

Yes, I meant posts, sorry. Posts over 1040 and Activity over 330. My locked account is a "Sr. Member." Thanks for pointing out my brain fart. Also a BTC address has been in my sig for about eight months or longer and it is from my Trezor. So when I get home from vacation I can definitely send signed messages with that BTC addresses' private key.

[ptypichai]

Got home and sent PMs a couple of days ago. I hope I can get my Sr. Member account unlocked. Would suck having to start all over building a rep here.

[jackbox]

Thank you to the OP of this post. Using the instructions in the top post I finally got my Sr. Member account back after a month of sending signed messages every week as directed. Nice to get my account back.     

[TheGr33k]

I could be incorrect, but that might just be a glitch.

[muleroaa]

Shit.....just got locked out of my account by answering the secret question. I can't believe they haven't taken this out or disabled it yet. I'm afraid I won't get control back of my "main" account for a long time....

[jackbox]

Shit.....just got locked out of my account by answering the secret question. I can't believe they haven't taken this out or disabled it yet. I'm afraid I won't get control back of my "main" account for a long time....

Be patient and persistent sending messages to Theymos. It took me about two to three months of a signed message a week before he finally responded and apologized for the late response.

[notlist3d]

Shit.....just got locked out of my account by answering the secret question. I can't believe they haven't taken this out or disabled it yet. I'm afraid I won't get control back of my "main" account for a long time....

Be patient and persistent sending messages to Theymos. It took me about two to three months of a signed message a week before he finally responded and apologized for the late response.

It does take patience in some of the cases it is kinda seen as a lessor issue with it being known I think.  It is hard to get info about it to every user I bump a thread I made in beginner about once a month - https://bitcointalk.org/index.php?topic=1214627.0 .   The good news is overall it has slowed down a ton, it was multiple a day at first.   Now it's much much slower.

I would suggest starting your own thread in meta about issue though.   List user and problem about lock.    And then the patience part comes in, I would bump your thread and send email once a week.  I would not do it any more then that as you don't want to be a pain to admins. 

[muleroaa]

Shit.....just got locked out of my account by answering the secret question. I can't believe they haven't taken this out or disabled it yet. I'm afraid I won't get control back of my "main" account for a long time....

Be patient and persistent sending messages to Theymos. It took me about two to three months of a signed message a week before he finally responded and apologized for the late response.

It does take patience in some of the cases it is kinda seen as a lessor issue with it being known I think.  It is hard to get info about it to every user I bump a thread I made in beginner about once a month - https://bitcointalk.org/index.php?topic=1214627.0 .   The good news is overall it has slowed down a ton, it was multiple a day at first.   Now it's much much slower.

I would suggest starting your own thread in meta about issue though.   List user and problem about lock.    And then the patience part comes in, I would bump your thread and send email once a week.  I would not do it any more then that as you don't want to be a pain to admins. 

Thank you, I will do that. It just seems strange that there is no option to turn of the "feature" completely. There are a lot of people who don't browse the different forum sections and simply don't know about the issue. I won't forget it anymore though 

[BitcoinEXpress]

Thank you, I will do that. It just seems strange that there is no option to turn of the "feature" completely. There are a lot of people who don't browse the different forum sections and simply don't know about the issue. I won't forget it anymore though  

There is.

Leave both fields blank in the secret question section.

It will disable it.


~BCX~

[nitesh1995p]

thank you for creating the thread to give information about it to every one..

[jackbox]

Thank you, I will do that. It just seems strange that there is no option to turn of the "feature" completely. There are a lot of people who don't browse the different forum sections and simply don't know about the issue. I won't forget it anymore though  

There is.

Leave both fields blank in the secret question section.

It will disable it.


~BCX~

Can this be done after the question is set by blanking them out and saving? I was already burned by this and had my account locked. It was frustrating, to say the least, to get my account restored many months later.

[achow101]

Can this be done after the question is set by blanking them out and saving? I was already burned by this and had my account locked. It was frustrating, to say the least, to get my account restored many months later.

Yes, that is how you disable the security question for your account.

[BitcoinEXpress]

Thank you, I will do that. It just seems strange that there is no option to turn of the "feature" completely. There are a lot of people who don't browse the different forum sections and simply don't know about the issue. I won't forget it anymore though  

There is.

Leave both fields blank in the secret question section.

It will disable it.


~BCX~

Can this be done after the question is set by blanking them out and saving? I was already burned by this and had my account locked. It was frustrating, to say the least, to get my account restored many months later.

Yes

Blanking the fields and saving them will not lock your account.



~BCX~

[jackbox]

Yes

Blanking the fields and saving them will not lock your account.



~BCX~

Thank you.

[Quickseller]

Thank you, I will do that. It just seems strange that there is no option to turn of the "feature" completely. There are a lot of people who don't browse the different forum sections and simply don't know about the issue. I won't forget it anymore though 

There is.

Leave both fields blank in the secret question section.

It will disable it.


~BCX~

I am not sure how robust of a solution this is. Not everyone is going to see this warning (or even visit Meta on any kind of regular basis), so they will not know to remove their security question and to not attempt to use it to reset their password to their account.

[muleroaa]

Thank you, I will do that. It just seems strange that there is no option to turn of the "feature" completely. There are a lot of people who don't browse the different forum sections and simply don't know about the issue. I won't forget it anymore though  

There is.

Leave both fields blank in the secret question section.

It will disable it.


~BCX~

I understand that you can have it turned off, I actually had it turned off before, but thought I'd improve the security. I ment it's strange that the possibility of adding a secret question is still in there, if the feature is bugged and gets people locked out (for months).