[MoogLe]

Originally Posted by Riddler236

17,403 days seemed like a really odd threshold to set for password expiry... This makes more sense.

so you registered 47 years ago?

Seems legit lol

Meh, I got no confidential info on this site or any other forum for that matter, not too worried

[r45vt]

Originally Posted by MoogLe

so you registered 47 years ago?

Seems legit lol

Meh, I got no confidential info on this site or any other forum for that matter, not too worried

You are smarter then most though. You'd cry if you saw the percentage of people that used the same email and password for every site- you could hack the weakest and then login to their amazon and treat yo'self.

[John Dahalay]

I was at 2,000 days on the nose.

[Sound]

Originally Posted by VS Admin

We are expiring all passwords for this forum as a precaution, while we investigate a report of a security incident.  As you choose your new password, minimum password strength rules will apply.  We encourage you to use unique passwords for each of the Internet services you use.
-Philip

Originally Posted by da_mink

https://www.pbnation.com/showthread.php?t=5315394
https://www.pbnation.com/showthread.php?t=5313602

It only took you a year plus...

This change should have been done ages ago. You have already lost all our data multiple times and security concerns raised a year ago have still not been addressed.

Still no HTTPS
https://www.pbnation.com/showthread.php?t=5719713

Still MANY issues with ads and malware
https://www.pbnation.com/showthread.php?t=5562922

Originally Posted by da_mink

You have been giving the same answer for the three years your company has owned this site. Working REALLY hard.

Criteo is a known bad apple and yet you still continue to use them. How about switching ad platforms so they stop serving up malware? Since your entire business plan is to buy forums, do nothing with them, and collect ad revenue, I cant be too surprised you're selling us out for every fraction of a penny you can get.

Originally Posted by VS Admin

Thanks all,

More info to follow in the am.

**** Money Baby

Soon soon soon

[snakeshooterx10]

Originally Posted by da_mink

https://www.pbnation.com/showthread.php?t=5315394
https://www.pbnation.com/showthread.php?t=5313602

It only took you a year plus...

This change should have been done ages ago. You have already lost all our data multiple times and security concerns raised a year ago have still not been addressed.

Still no HTTPS
https://www.pbnation.com/showthread.php?t=5719713

Still MANY issues with ads and malware
https://www.pbnation.com/showthread.php?t=5562922

I am going to back Mink up on the HTTPS thing. How much more could it possibly cost in hosting fees to add HTTPS support? I'm pretty sure I actually looked up the numbers not long ago, and the price change is minuscule when compared to the risks associated without using SSL.

I know PBN isn't as active as it used to be, but HTTPS is pretty much commonplace on most sites that care about it's users (unless it's a small *** board or something). I WANT ANSWERS!

[VS Admin]

Our techs are working on the HTTPS, however their is a lot of testing that goes with it. Specifically this site is very customized and we want to make sure nothing breaks on the site once its been added. We just want to make all testing has been completed, thank you all for your support.

~ Glenda

[da_mink]

Originally Posted by VS Admin

Our techs are working on the HTTPS, however their is a lot of testing that goes with it. Specifically this site is very customized and we want to make sure nothing breaks on the site once its been added. We just want to make all testing has been completed, thank you all for your support.

~ Glenda

That's nonsense. Will you customer service idiots stop lying to the users of this website for just once?
If you were doing anything but placating us with bogus, we wouldn't get overly vague non committal answers.

I run numerous custom forums including a custom hacked VB 3.5 one (which is what this site runs on), implementing HTTPS is not hard, it can be done in an hour.

[Wartex]

Let me translate this into layman terms:

1. We've been owned again, but this time we are honest and telling you right away instead of sitting on it for 6 months like we did last time, potentially compromising your paypal accounts.

2. Our programmers are morons because they cannot implement a simple antispam script to prevent people posting malware links and referral spam

3. We just learned what HTTPS is yesterday, and this thing is new and scary.

4. We store your passwords as md5 has so that any noob with rainbow tables can reverse them in minutes and then pump all the money out of your paypal if you happen to reuse passwords. Did I guess this one correctly? Are the passwords salted with a dynamic salt?

5. We are going to implement HTTPS but we will still get owned because someone is stealing cookies from the admin's PC.

6. We will promise forever that "things are being worked on" but do nothing until someone files a suit in a small claims court.

7. We will downplay this and call it a "security incident" because posting "we've been hacked again" is embarrassing.

[#1P8ntballer]

3000 days old. oh lawrd.

[firefoxx04]

Originally Posted by Wartex

Let me translate this into layman terms:

1. We've been owned again, but this time we are honest and telling you right away instead of sitting on it for 6 months like we did last time, potentially compromising your paypal accounts.

2. Our programmers are morons because they cannot implement a simple antispam script to prevent people posting malware links and referral spam

3. We just learned what HTTPS is yesterday, and this thing is new and scary.

4. We store your passwords as md5 has so that any noob with rainbow tables can reverse them in minutes and then pump all the money out of your paypal if you happen to reuse passwords. Did I guess this one correctly? Are the passwords salted with a dynamic salt?

5. We are going to implement HTTPS but we will still get owned because someone is stealing cookies from the admin's PC.

6. We will promise forever that "things are being worked on" but do nothing until someone files a suit in a small claims court.

7. We will downplay this and call it a "security incident" because posting "we've been hacked again" is embarrassing.

Right? why force me to change my password when you cant even implement ****ing SSL in 2017.

The password is sent in the clear every single time someone logs in, dont force me to rotate when it doesnt even change a damn thing.

[Lut4fi]

hallo all i,am a now player

[TheOriginalJunki]

Why did I have to change my password again??? It said 10 days this time!

[PeteSterE]

Originally Posted by TheOriginalJunki

Why did I have to change my password again??? It said 10 days this time!

Myself as well. WTF.

[John]

Originally Posted by TheOriginalJunki

Why did I have to change my password again??? It said 10 days this time!

Me too.

[Grapepress]

Is the 10 day password change going to be a consistent policy?
Will PBN create the new marker forums people are still looking for under their respective marker manufacturers?
Will PBN become a Mecca of information again?
Tune in later on to see.....

[SCthumper]

ok I am old and stupid. I have a few passwords I use for all my non essential stuff like forums and what not. my secure passwords are different. If this type of frequent change is going to be standard (assumption on my part) please accept a request to allow the use of old passwords so i can just keep switching back and fourth between 2-3.

yes I am lazy...but I had to ask

[soccerguy243]

who the hell said anything about a 10 day policy?

[TargetIndy]

My guess is somebody screwed up a setting. I blame Canada.

[PimpInDistress]

I had to change mine when this first happened and then it prompted me to do it again today

[JerryRigged]

So does this mean that yet again there's been a breach just 10 days later? Only reason to expire passwords again is cause you're not keeping them safe or I guess it's possible somebody doesn't know how to admin the site at all.

Really makes me think about the ASM money. If they cant do the most simple things like use HTTPS for logins or keep their user DB secure, why should we keep supporting the site hosts?

[dualimpact]

I canceled my subscription. They are doing nothing to improve the site.

They still haven't handled the spam bots either.