Email security notifications

[Quickseller]

OP, what happens after the account is unlocked by the admin ? What will be the email id in that account - earlier one or the one that hacker used?

It will be the one the hacker used. This allows it so even if an admin recovers an account the hacker still has access to the account. /s

[digaran]

OP, what happens after the account is unlocked by the admin ? What will be the email id in that account - earlier one or the one that hacker used?

It will be the one the hacker used. This allows it so even if an admin recovers an account the hacker still has access to the account. /s

Here we have yet another admin wannabe. great.

[krishnaverma]

OP is admin

Based on this sticky post on this section, you will ask signed message with your new email address.
https://bitcointalk.org/index.php?topic=497545.0

1) I know that. What difference does it make to how should I address him ?

2) I know the process to recover as well. I am asking about specific thing not mentioned in that thread.

OP, what happens after the account is unlocked by the admin ? What will be the email id in that account - earlier one or the one that hacker used?

It will be the one the hacker used. This allows it so even if an admin recovers an account the hacker still has access to the account. /s

So, what stops the hacker to gain access back to the account ? Still waiting for an official reply on this.

[actmyname]

Here we have yet another admin wannabe. great.

Do you hear that sound, whizzing over your head?

It's a bird, it's a plane, no wait...
w H _O O ^O O O _{S H} H ^{H H}

I know it's hard but you should stop trying to be such a cunt. Maybe you heard the phrase wrong: it's not "you eat what you are"

[mdayonliner]

I am not sure if it has been discussed here or not but excuse my rush here...

Looking at all these hacked/locked account issues and the time needed to recover them manually, I feel very insecure for my account too. Although I always use strong password, 2FA where applicable - all sorts of things to ensure the highest security but still anything can happen anytime. It could be my mistake or it could be system leak, which actually does not matter. What matters is once an accident happen then the account holder is facing all sorts of hassles which is frustrating.

Coming to my point...

Whenever your password is changed (except by an administrator), you will get an email about it.

Whenever your email is changed (except by an administrator), your old email will get an email about it with a link to lock your account. The link is valid for 14 days.

I actually do not understand why the email to lock? Instead of the link to lock the account why can not the system send an email asking to revoke the request if the change has not made by this email account holder?

I think this could be a decent procedure....
If an account (bitcoinTalk) requests for password and/or email change then send an email to the last registered email address asking for approval. Send a link which will confirm manual approval for the change requested. If the original user requested the change then they are liable for their action. Now, if the user do not have access of the email address only then ask the mods/admins to help them out. I believe this small tweak in sending email, will be saving a lot of time for both the users who are victim and mods/admins.

Update:
A little correction...
For password change send approval email to the current registered email account and for email change send approval email to the last registered email.

[Lordofervi]

my account was hacked but I was able to click on the link to lock my account,
which is a problem for me how to get back my account ,
and how my status account now
will admin restore that account to the final data before the mail and password change and send me a new password ?

[Lordofervi]

my account was hacked but I was able to click on the link to lock my account,
which is a problem for me how to get back my account ,
and how my status account now
will admin restore that account to the final data before the mail and password change and send me a new password ?

[trapatalce]

my account was hacked but I was able to click on the link to lock my account,
which is a problem for me how to get back my account ,
and how my status account now
will admin restore that account to the final data before the mail and password change and send me a new password ?

http://i66.tinypic.com/2lkvi4g.jpg


http://i66.tinypic.com/jz907b.jpg

If you've not locked your account, yopmail allows you to open any email registered with that domain, just use the forget password option and open the email on yopmail and then reset the email.

On another note, the same IP Address hacked me and a few other people.

[tbct_mt2]

What if I lose acces to my old email address, which I used to register my account at the start?
I guess this situation might lead to lose all control to my account, am I right?
Are there any chance to get my account back if I unfortunately fall into such very bad situation?

Just a bit curious because I have never experienced such terrible cases.

[Chaki_]

It nice to receive a link from the forum to the link email to your bitcointalk.org account before you can change your password.
Second, if you will receive email also saying that your account has been opened for the first time in a diiference device--- it will also give account owner to block this transaction if ever your account was opened in unknown location---

[coinnumber]

I added email notifications for some security events:

Whenever your password is changed (except by an administrator), you will get an email about it.

Whenever your email is changed (except by an administrator), your old email will get an email about it with a link to lock your account. The link is valid for 14 days.

Let me know if you find any bugs.

I think this a good development and it will help a long way to reduce hacking of accounts and secure the account as long as possible but, I as a person don't have the idea to carry out this operation and makes my account to be firmly secured please can you help me with some details explanations? I will really appreciate that Thanks .

[TheRealAwesome31312]

I'll never forget how I lost my account because the admins were not intelligent enough to actually add email security notifications at the time.

RIP awesome31312

From Politics shitposting to shitposting in a language we don't know

[Jet Cash]

This looks like a great improvement to the security here.

Now, please could we have email confirmation of new registration applications, and a restriction that only one account can be associated with an email address. I am aware that it is easy to circumvent these restrictions, but it adds some more difficulties to the bot signups.

[Quickseller]

This looks like a great improvement to the security here.

Now, please could we have email confirmation of new registration applications, and a restriction that only one account can be associated with an email address. I am aware that it is easy to circumvent these restrictions, but it adds some more difficulties to the bot signups.

Presumably, the bots are advanced enough so that they can create their own email server and acknowledge these sign up confirmations.

Requiring email verification would likely result in normal users to have decreased privacy.