The Arcive of Official vBulletin Modifications Site.It is not a VB3 engine, just a parsed copy! |
|
#1
|
||||
|
||||
Here is my problem..
Hi,
Well, I haven't posted here in a while but now that I am I could really use your help. Someone is using a brute force program to get peoples AIM passwords targeted on my site. The person goes to my site looks at someones AIM name and then will use the brute force program to try and find his/her AIM password. Then, they use that password and match it to my site account to login. So, people that have easy passwords for both AIM/my site - their accounts get hijacked. Fairly complicated circumstance eh? Well, any suggestions how I could fix this problem without totally destroying my site. I do not have any clues as to who it is really. |
#2
|
|||
|
|||
You can easily hide user contact information from guests.
|
#3
|
||||
|
||||
Or suggest that your users change their passwords...
|
#4
|
||||
|
||||
Just don't display their AIMS details.
|
#5
|
|||
|
|||
actually, this is not related to vBulletin but to AIM itself... i would suggest you report that brute guy to the http://www.aol.com/ official website... and yes, their navigation is a crap, complicated to have support...
it is related to AIM security protocol, i don't think it is just a problem of displaying AIM usernames on a site that would make the password retreivable... anyway, they are the ones who can handle that security breach... |
#6
|
||||
|
||||
Thanks everyone. I know I can easily hide contacts. However, my site is a user trade facility so people make their "lists" full of things and then they put their contact information at the bottom. A lot of my users don't even fill out their profile; they just post their lists with their contact information.
|
#7
|
||||
|
||||
Any suggestions?
|
|
|
X vBulletin 3.8.12 by vBS Debug Information | |
---|---|
|
|
More Information | |
Template Usage:
Phrase Groups Available:
|
Included Files:
Hooks Called:
|