Page 1 of 3

Am I the only one who have to do a double login now?

Posted: Wed Feb 09, 2011 6:12 pm
by Annabelle
Hello all,

since 2 or 3 days, I don't know, each time I'm trying to log in on the Guild of Writers, I enter my name and password. Then I receive a nice sentence telling that since I tried too often login in, I must now enter my name, my password and 2 words hardly readable. I execute myself each time but I want to know why?

Is there a bad-intentionned guy out there trying to enter on my account or is it just because you put a new system in place to prevent attack from evil Bots? Bottom line, is it something just happening to me or is it the general situation of all of us?

It does it at my first attempt to log in the forum so it is not because I failed entering an info like my username or my password.

Thank you for feedback,

Re: Am I the only one who have to do a double login now?

Posted: Thu Feb 10, 2011 1:18 am
by Luna
I have not yet encountered it, but I heard other people about it too.

Re: Am I the only one who have to do a double login now?

Posted: Thu Feb 10, 2011 1:57 am
by diafero
I got the same issue. Hoikas said in IRC he decreased the limit for invalid logins, but either something is broken or we got a permanent brute-force attack on this server. because often enough even the first attempt does not work.
To make things worse, the CAPTCHA fetches some scripts from google.com, which I will for sure not put onto my NoScript whitelist, so that whole page doesn't even work properly without manually temporarily allowing that domain.

Could you maybe increase that limit by one, Hoikas, or check if there's really a constant stream of false login attempts?

Re: Am I the only one who have to do a double login now?

Posted: Thu Feb 10, 2011 5:51 am
by Tsar Hoikas
I upped the maximum number of failed attempts to 3. If you continue to have problems, I'll look into the possibility of massive brute-forcing. I don't really think that's an issue though because I've not seen this problem myself.

Re: Am I the only one who have to do a double login now?

Posted: Thu Feb 10, 2011 12:44 pm
by andylegate
I have, every single time I tried to log on yesterday, and then again this morning. First attempt: fail. Then I was notified I had exceeded my amount of log on attempts and had to go through the CAPTCHA myself.

But, just now since you increased the attempts to 3, I logged on first time, no problems.

Re: Am I the only one who have to do a double login now?

Posted: Thu Feb 10, 2011 1:01 pm
by diafero
Indeed, the issue seems to be fixed now. Thanks!

Re: Am I the only one who have to do a double login now?

Posted: Thu Feb 10, 2011 4:52 pm
by Annabelle
Yes the CAPTCHA, I didn't know how to spell it so I tried to describe what I had to do.

I logged at the first attempt so everything is back to normal now

Thank you Hoikas :)

Re: Am I the only one who have to do a double login now?

Posted: Fri Feb 11, 2011 4:33 am
by andylegate
It's back. Had to go through a double log on again this morning.

Re: Am I the only one who have to do a double login now?

Posted: Fri Feb 11, 2011 7:51 am
by diafero
andylegate wrote:It's back. Had to go through a double log on again this morning.

Same here.

Re: Am I the only one who have to do a double login now?

Posted: Fri Feb 11, 2011 10:38 am
by Chacal
I'm fine, but then I checked the "keep me logged in" option.