It's ridiculous, really. Senior accounts are valuable, with many senior members having built up activity, trust and now merit over years. And it's all protected by a single password. The login page for my work's rota viewer, where I can literally only look at this week's rota (and not edit anything) has more security than that. For the world's biggest crypto forum, which should be advocating security, to not have 2FA or any form of account recovery is ridiculous.
Not only Senior account, every account is valuable. Even I am a member but I will not like to part away with my account.
Theymos already mentioned somewhere that he is not going to trust anyone while it comes to restoring an account and also the investigation of restoring an account takes lot of time than how it looks like to be,that is why he wanted to implement some automation for restoring an account.
I am just wondering what exact steps Theymos do to restore the accounts? We already have guidelines for restoring the accounts and any Mod can verify that particular account can be restored and Theymos can click the button to unlock that account .(somebody can create the script that can be executed by admin privilege if it is much of manual work.) Theymos can delegate the investigation. Mod that will investigate will openly write his/her decision and community can verify the working of that Mod. So where the "Trust issues" comes in investigations?
Many here ignore the fact that the accounts of this forum have its value "because of the possibility of getting money from the signatures campaigns" so selling it and then claiming to be hacked is a beneficial policy.
The process of restoring these accounts requires careful investigation of their own and then access to the sensitive data to be restored.
That's fine, buy and sell account on your own risk, If the buyer able to prove that hacked account was involved in trade then DT will give red trust making it useless for signature campaign but since forum rules did not against the selling so they need to restore account as per guideline and let DT handle the trade issues. By the way , what sensitive data you are referring here ?
For a few, its not money more of an identity/community.
Account recovery should be a priority, it literally is turning into a joke.
Very correctly said.
Even if the forum was hacked earlier but why the end users suffer for this?Why they need to wait for endless months?