[Forum] Max login attempts after only one?

[Sarah]

Occurred just now to me; I'm about 95% sure my password was right, was told I was wrong and has used up my login attempts, and forced to solve Doom trivia to login.

*On a related note, if you don't erase your history often like myself, does the drop menu that appears when you start typing in your user name appear different? It looks unusually bold and maybe even misaligned to the right a bit to me.

Edit: I was just on CGTextures and the dropdown that contained my username there was similar, so it's the browser or OS (new to Win10).

[LedIris]

Also got this bug as well. I couldn't access my account all week because I was typing in the wrong captcha.
I thought I was hacked or something.

[amv2k9]

Happened to me too... Think I'll change my password.

[randi]

On separate occasions on the 10th and 11th, forum.zdoom.org saw a marked increase in traffic from several (dozen?) bots trying to brute-force their way into different accounts. The offenders that stood out because they managed to use nearly a gigabyte or more of traffic in one day have been blocked (at the firewall level). Attached is a graph of network requests for the past few days. Everything seems to be back to normal now.

[Caligari87]

Is there any way to tell if any accounts were compromised as a result? I was one of the accounts that got the "too many attempts" message. Should anyone affected change their passwords just to be safe?

[NeuralStunner]

Malicious users are trying to gain access to your account by guessing passwords. In order to make that more difficult, a CAPTCHA is displayed after a certain amount of failed logins. It isn't removed until you successfully log in.

If an account password has been compromised, the notification would vanish and, presumably, spam would start appearing via that account.

Though you should definitely change your password if it's clearly not very secure. (E.G. "password", "12345", and "ilovedoom" are not good passwords. )

[simpletonnn]

oh shit hopefully my account wont get hijacked or something
hopefully not since i never have seen this error so it's plausible to assume i'm okay but

be safe friends

[eyesoftheworld94]

this happened to me yesterday... only once though (and then subsequent attempts didn't show the "max login / captcha thing" ... i'll change the pass just to be sure...

[Big C]

Changed my password as well between this (which I just *now* noticed) and the recent troll accounts.

[Raziel236]

It's happening again..

[wildweasel]

It's happening again..

Yes. We know. =/

[Raziel236]

Just trying to be helpful, no need to be rude.

[Accensus]

He's not rude, mate. It's just kinda obvious that everyone knows, lol. No hard feelings there.

[Raziel236]

Why don't you let him speak for himself.

[wildweasel]

The longer version of my reply is, yes, we're all pretty well aware that the intrusions are still going on. Because some idiot is very rapidly trying to log in to as many accounts as they can, presumably with some kind of script and network of bots that run that script, almost everybody active on the forums will probably see the "max login attempts" message when they try to log in.

More information is collated here: http://forum.zdoom.org/viewtopic.php?f=7&t=52195