+- Hack Forums (https://hackforums.net)
+-- Forum: Hack Forums Official Information (https://hackforums.net/forumdisplay.php?fid=1)
+--- Forum: Site News (https://hackforums.net/forumdisplay.php?fid=2)
+--- Thread: [Policy Q] New IP security / logout policy (/showthread.php?tid=5145756)
Pages: Pages
1
2
New IP security / logout policy - Armada - Jan 24, 2016
Quote:As inconvenient as this may sound from now on an IP change will destroy your session and log you out.
Accounts being sold were sharing cookies so that the session wouldn't need a login. I already know this would be an issue and I already knew this was how some of the recent sold accounts were utilized.
Those on dynamic IPs will need to login again every single time their IP changes. It will just have to be that way.
This will greatly assist with stolen or sold accounts used to scam. Forcing a login will give better results to the Trust Scan and the admin logs where I can spot these accounts much easier.
Sorry but this is just necessary if we're going to continue having a thriving Marketplace.
More measures will be into place asap. This is hardly the only thing I plan to implement. This site will have ultra high end security for accounts.
NOTE: If you'd like to test try to use a VPN, sock or proxy to access HF, that is if you can find one that works.
I wanted to reply to the actual thread, but the Boss closed it.
I have a general question about the IP change policy, which I am sure Omni will understand why I of all people am asking.
I login from literally numerous networks on a regular daily basis.
(Home, Cellular, Work, and others)
Sometimes off my phone and sometimes with my primarily laptop.
I not only have numerous IP#'s but numerous networks as well.
Now although these IP#'s I utilize do not frequently change, if at all, being I utilize so many networks, will I be constantly forced to login again, or will the system take in to account my "Usual IP#'s" and only force login on a new network/IP# ?
* - Mr Kewl - Jan 24, 2016
You'll have to login every time when there is an IP change when the system is working.
* - Armada - Jan 24, 2016
(Jan 24, 2016 01:08 PM)Mr Kewl Wrote: You'll have to login every time when there is an IP change when the system is working.
So even between my phone and my home connection for example, I will be forced to login again?
This really is not a complaint, its more secure so I am all for it, but I admit, this will be a true pain for some users like myself, especially being my PW is totally randomized and I don't remember it off the top of my head....
* - Mr Kewl - Jan 24, 2016
(Jan 24, 2016 01:10 PM)Armada Wrote: So even between my phone and my home connection for example, I will be forced to login again?
This really is not a complaint, its more secure so I am all for it, but I admit, this will be a true pain for some users like myself, especially being my PW is totally randomized and I don't remember it off the top of my head....
Yes, if both the IPs are different.
(Jan 23, 2016 11:24 PM)Omniscient Wrote: High end sites with a lot of commerce force you to login daily. Places like banks, online crypto wallets or just about any place with a valuable account. It's less convenient but more secure. At this point we need the more secure option.
^ Good point.
* - Tʀᴀᴜᴍᴀ - Jan 24, 2016
(Jan 24, 2016 01:10 PM)Armada Wrote: So even between my phone and my home connection for example, I will be forced to login again?
This really is not a complaint, its more secure so I am all for it, but I admit, this will be a true pain for some users like myself, especially being my PW is totally randomized and I don't remember it off the top of my head....
I see your point and frustration.
However, balance this out.
A couple logins everyday>or<15 BTC being stolen
* - woahxx - Jan 24, 2016
I was thinking that it was weird, thar I was logged out this morning. Now I understand :)
* - SIM-1589588 - Jan 24, 2016
Is it already implemented? If yes, It's not working as I just moved from Wifi to 3g and IP got changed however I didnt had to relogin.
* - Armada - Jan 24, 2016
(Jan 24, 2016 01:15 PM)Cʜᴀsᴇ Wrote: I see your point and frustration.
However, balance this out.
A couple logins everyday>or<15 BTC being stolen
Yea, again, not a complaint in any way, but yea, this will also be annoying at times, will just have to avoid swapping between networks so often I guess.
Thanks, closing now. 🤝
Opening as I have one further thought.
Would it not be a viable option for members to add "Trusted IP#" to their account to prevent the constant login?
- Just a thought.
Maybe create a maximum of 5 entries or something.
OR for dynamic users, allow a specific IP range?
Or would this essentially circumvent the security protocols implementation?
* - opp - Jan 24, 2016
Interesting. I was on my phone using hackforums yesterday and I was on LTE and when I came home onto my computer using my home network it did not ask me to sign in again.
* - SIM-1589588 - Jan 24, 2016
(Jan 24, 2016 01:55 PM).op. Wrote: Interesting. I was on my phone using hackforums yesterday and I was on LTE and when I came home onto my computer using my home network it did not ask me to sign in again.
Same thing. I just tried it again.
PS: .op which isp/carrier you are using?
* - Egregious - Jan 24, 2016
Hmm. I'm browsing on my phone (LTE) and home network and it doesn't log me out. I wonder why.
* - Armada - Jan 24, 2016
(Jan 24, 2016 01:59 PM)J.P Morgan Wrote: Same thing. I just tried it again.
PS: .op which isp/carrier you are using?
My point.
Primus
Rogers
Wind
and 2x Data center IP#'s
I have not been hit with the login issue, yet, but I am anticipating this due to my activity and networks.
* - Doctor Blue - Jan 24, 2016
So is it if your current IP is different from your latest IP or is it just if it isn't known?
* - Kuso - Jan 24, 2016
I probably wouldn't be annoyed by this if we didn't have the 2fa securit. But I want security.
* - FamousHater - Jan 24, 2016
(Jan 24, 2016 01:59 PM)Egregious Wrote: Hmm. I'm browsing on my phone (LTE) and home network and it doesn't log me out. I wonder why.
there was an issue omni was fixing with it so pretty sure he disabled it until he gets it fixed