I received a phishing e-mail today to an address that I set up specifically for the xda-developers forum. I'm pretty sure I haven't given it to anyone else. Could there be a database leak?
Greetings!
Due to an unusual change in your access pattern, the Guild Wars 2 account under this email address has been locked. This can be caused by logging in from a new location, but it may also signal an attempt to compromise your account. If you feel that your account's security is at risk, please follow the steps below.
Step 1: Verify Your Account Ownership
Click on the link below to verify your e-mail address of the Guild Wars 2 account: hxxps://account.guildwars2.com/account/login-support.html
Click to expand...
Click to collapse
The link actually goes to hxxp://guildwars2.com.us-support.pw/?loginservice=wam&ref=0&app=bam (WARNING! COULD BE DANGEROUS)
IHaveADiamond said:
I received a phishing e-mail today to an address that I set up specifically for the xda-developers forum. I'm pretty sure I haven't given it to anyone else. Could there be a database leak?
The link actually goes to hxxp://guildwars2.com.us-support.pw/?loginservice=wam&ref=0&app=bam (WARNING! COULD BE DANGEROUS)
Click to expand...
Click to collapse
There is a thread from a few months back that describes a similar situation. If I can find it I'll post a link.
Edit:
http://forum.xda-developers.com/showthread.php?t=1835116
Flagging the admin to check it out @bitpushr
Thank you,
mikef
XDA Senior Moderator
Related
Hello,
I had some problems submitting my first post to this forum. I always got this error message:
1.To prevent spam to the forums, new users are not permitted to post outside links in their messages. All new user accounts will be verified by moderators before this restriction is removed.
... and wondered what went wrong. I had no outside links in my posting and decided to wait for some time, maybe it was a temporary problem with the forum. After then I tried to post my message again. Same error.
After some brain work I noticed my mistake:
in my nickname I have a (at). Maybe the rule set for the e-mail-filter is a bit restrictive, so it wrongly validates every (at) in the posting.
Should be only taken as an advice to maybe adjust the filtering or at least the error message a bit.
best regards
gu(at)no
[email protected] said:
Hello,
I had some problems submitting my first post to this forum. I always got this error message:
1.To prevent spam to the forums, new users are not permitted to post outside links in their messages. All new user accounts will be verified by moderators before this restriction is removed.
... and wondered what went wrong. I had no outside links in my posting and decided to wait for some time, maybe it was a temporary problem with the forum. After then I tried to post my message again. Same error.
After some brain work I noticed my mistake:
in my nickname I have a (at). Maybe the rule set for the e-mail-filter is a bit restrictive, so it wrongly validates every (at) in the posting.
Should be only taken as an advice to maybe adjust the filtering or at least the error message a bit.
best regards
gu(at)no
Click to expand...
Click to collapse
Maybe trying to find clever ways to put sh*t as your user name, wasn't as clever as you thought ?
Hello, I have a problem in my first Thread. I would send a new ROM for the raphael, but it gives me this error "To prevent spam to the forums, new users are not permitted to post outside links in their messages. All new user accounts will be verified by moderators before this restriction is removed."
how can I do?
thanks for all answers.
blaste said:
Hello, I have a problem in my first Thread. I would send a new ROM for the raphael, but it gives me this error "To prevent spam to the forums, new users are not permitted to post outside links in their messages. All new user accounts will be verified by moderators before this restriction is removed."
how can I do?
thanks for all answers.
Click to expand...
Click to collapse
Check your PMs
Mike
ok, thaks!
i have the some problem like friends up
Bartezz612 said:
i have the some problem like friends up
Click to expand...
Click to collapse
I would do what the warning/restriction says and contact a moderator.
JAguirre1231 said:
I would do what the warning/restriction says and contact a moderator.
Click to expand...
Click to collapse
I wouldn't
There's nothing we can do. The restriction is on posting links and images. It automatically lifts after the member posts enough times.
It was added to prevent spam bots and it has worked wonders.
Dave
DaveShaw said:
I wouldn't
There's nothing we can do. The restriction is on posting links and images. It automatically lifts after the member posts enough times.
It was added to prevent spam bots and it has worked wonders.
Dave
Click to expand...
Click to collapse
So...... it was a lie? False advertising I say, even if the product is the ability to post links.
JAguirre1231 said:
So...... it was a lie? False advertising I say, even if the product is the ability to post links.
Click to expand...
Click to collapse
Contact us by all means, but we will tell you we can't help .
I have asked if this can be re-worded at some point in the future.
Dave
work in progress said:
If you can't help new users post questions, then this forum isn't worth a**** !!!!! I will go to another site where the people aren't as useless and ***** as you are!!!!!
Click to expand...
Click to collapse
You will be dearly missed. New members are allowed to post questions...just not links without mod approval. Have fun at your new site.
I'm having the same issue. I get the following message, which is different from the one above:
"To prevent spam to the forums, ALL new users are not permitted to post outside links in their messages. After approximately eight posts, you will be able to post outside links. Thanks for understanding!"
But I do not have any links in my message.
What are the characters the forum SW parses as links?
bozothedeathmachine said:
I'm having the same issue. I get the following message, which is different from the one above:
"To prevent spam to the forums, ALL new users are not permitted to post outside links in their messages. After approximately eight posts, you will be able to post outside links. Thanks for understanding!"
But I do not have any links in my message.
What are the characters the forum SW parses as links?
Click to expand...
Click to collapse
Images also count as part of the check, or anything starting http:// (IIRC).
If you are still having problems, try uploading the BB Code to pastebin (or similar).
Dave
bozothedeathmachine said:
I'm having the same issue. I get the following message, which is different from the one above:
"To prevent spam to the forums, ALL new users are not permitted to post outside links in their messages. After approximately eight posts, you will be able to post outside links. Thanks for understanding!"
But I do not have any links in my message.
What are the characters the forum SW parses as links?
Click to expand...
Click to collapse
I believe it can also detect links as being strings separated by at least one dot, with a slash "/" present...
But I think Dave might be right about the http part. Try a basic post, removing anything other than plain text, then add the suspected parts in via edit, and see what it is rejecting.
I think I found the issue. I didn't have any "http", slashes, or images.
I was trying to post the handset info from my HTC Hero, which contains all manner of random characters, including the hash sign. I'm thinking it was that which was marked as spam.
Three posts down, 5 to go before I can start making sense.
Thanks for the assist.
Can any of the Admins look into this: I received spam on my email account that is only used to register for this forum. There must be a leak.
maicod said:
Can any of the Admins look into this: I received spam on my email account that is only used to register for this forum. There must be a leak.
Click to expand...
Click to collapse
The admins have been monitoring on this thread: Forum Database Email Spam Compromise?
If you could please take a look there and see if your details match anything reported or if you might have some new clues to offer we would appreciate it. Thanks!
If i use the URL https://forum.xda-developers.com/galaxy-note-8/help/able-to-whitepages-people-search-note-8-t3817418 which is a thread I have created in any browser after I am logged in, I will get a 403 Forbidden error as seen in the screen shot. However, the URL works fine when I am logged out of the site in any browser and I can reach the thread while logged on either by going to the specific forum itself and finding the thread or visiting my own profile in any other thread I have a post in, clicking on the post itself after showing posts I have started. This problem has happened ever since I originally created that specific thread.
Just for reference, I can access this thread fine without problems using the URL:
https://forum.xda-developers.com/general/about-xda/403-forbidden-error-accessing-post-t3877220
Almighty1 said:
If i use the URL..........
Click to expand...
Click to collapse
I can confirm this and this is indeed a weird thing...
My Personal Findings on being able to see it or not:
~XDA Apps (The ClaRetoX Forum & XDA Labs) - Yes (No problems at all)
~Android Browser App (Firefox & Puffin) - NO (Returns 403 Error)
~PC Browser Software (Firefox & Internet Explorer) - NO (Returns 403 Error)
I even see that thread listed in your profile as well.
This is definitely something that the Administrators, @MikeChannon and @bitpushr, should be aware of for further investigation.
Good Luck!
~~~~~~~~~~~~~~~
UNLESS asked to do so, PLEASE don't PM me regarding support. Sent using The ClaRetoX Forum App on my Commodore VIC-20.
Ibuprophen said:
.............
This is definitely something that the Administrators, @MikeChannon and @bitpushr, should be aware of for further investigation.
Click to expand...
Click to collapse
Yup... one for @bitpushr
Mike
Ibuprophen said:
I can confirm this and this is indeed a weird thing...
My Personal Findings on being able to see it or not:
~XDA Apps (The ClaRetoX Forum & XDA Labs) - Yes (No problems at all)
~Android Browser App (Firefox & Puffin) - NO (Returns 403 Error)
~PC Browser Software (Firefox & Internet Explorer) - NO (Returns 403 Error)
I even see that thread listed in your profile as well.
This is definitely something that the Administrators, @MikeChannon and @bitpushr, should be aware of for further investigation.
Good Luck!
~~~~~~~~~~~~~~~
UNLESS asked to do so, PLEASE don't PM me regarding support. Sent using The ClaRetoX Forum App on my Commodore VIC-20.
Click to expand...
Click to collapse
Interesting, I kept thinking I was the only one who had the problem because I created the thread and didn't realized others have the error as well. The only way I can open the thread is either through my profile or directly to the forum where it was pasted. I know that thread was moved so not sure if that has anything to do with it.
Almighty1 said:
Interesting, I kept thinking I was the only one who...........
Click to expand...
Click to collapse
It looks like this was referred to bitpushr who's the Administrator for the Technical Side of the XDA Server and such.
It may take a little time for this to be looked into with other server issues he's currently working on.
~~~~~~~~~~~~~~~
UNLESS asked to do so, PLEASE don't PM me regarding support. Sent using The ClaRetoX Forum App on my Commodore VIC-20.
Ibuprophen said:
It looks like this was referred to bitpushr who's the Administrator for the Technical Side of the XDA Server and such.
It may take a little time for this to be looked into with other server issues he's currently working on.
~~~~~~~~~~~~~~~
UNLESS asked to do so, PLEASE don't PM me regarding support. Sent using The ClaRetoX Forum App on my Commodore VIC-20.
Click to expand...
Click to collapse
Yeah, I realized that, what I meant was thanks for confirming the problem as someone who is not the OP having the same issue(s).
Almighty1 said:
If i use the URL https://forum.xda-developers.com/galaxy-note-8/help/able-to-whitepages-people-search-note-8-t3817418 which is a thread I have created in any browser after I am logged in, I will get a 403 Forbidden error as seen in the screen shot. However, the URL works fine when I am logged out of the site in any browser and I can reach the thread while logged on either by going to the specific forum itself and finding the thread or visiting my own profile in any other thread I have a post in, clicking on the post itself after showing posts I have started. This problem has happened ever since I originally created that specific thread.
Just for reference, I can access this thread fine without problems using the URL:
https://forum.xda-developers.com/general/about-xda/403-forbidden-error-accessing-post-t3877220
Click to expand...
Click to collapse
MikeChannon said:
Yup... one for @bitpushr
Mike
Click to expand...
Click to collapse
This should be fixed now. Reference: https://forum.xda-developers.com/ge...ccess-to-page-2-threads-t3915767/post79211243
This error indicates that the server has determined that you are not allowed access to the thing you've requested, either on purpose or due to a misconfiguration . It's probably because the site owner has limited access to it and you don't have permission to view it. The vast majority of the time, there's not much you can do to fix things on your (*client) end. There are four common causes for 403 Forbidden error (server side) . Here they are listed from most likely to least likely:
An empty website directory
No index page
Incorrect settings in the .htaccess file
Permission / Ownership error
If authentication credentials were provided in the request, the server considers them insufficient to grant access. The client SHOULD NOT automatically repeat the request with the same credentials. The client MAY repeat the request with new or different credentials. However, a request might be forbidden for reasons unrelated to the credentials.
Hello folks,
I registered here some time ago to ask some questions about xposed module development.
I got the answers I needed, completed the module, released it and updated it a few times since then.
Now I received an email that someone contacted me here via private message to ask some questions about this module.
Well I'd like to answer but I really have trouble navigating to this page.
[...]
To read the original version, respond to, or delete this message, you must log in here:
https://forum.xda-developers.com/private.php
This is the message that was sent:
[...]
Click to expand...
Click to collapse
If I log in and navigate to the given link I get redirected to https://forum.xda-developers.com/register.php?from=permissions (I'm still logged in)
vBulletin Message
Our records show that you have already registered under the name of toni.xda. If you have lost your password, click here. If you would like to modify your profile, click here.
Click to expand...
Click to collapse
429 Rate Limited
Whoa there, hold your horses! We've detected a lot of requests coming from your IP and have rate limited you. Please check your configuration and try again.
Click to expand...
Click to collapse
Does this sound familiar to anyone?
I remember having problems using the correct subforums when I developed the module because I didn't have enough reputation/posts/whatever.
May this also be the cause for not being able to access the private messages section?
toni.xda said:
Hello folks,
I registered here some time ago to ask some questions about xposed module development..........
Click to expand...
Click to collapse
Try logging out, clean your browser cookies, restart your browser, go to any thread/area then log back in and try the same https://forum.xda-developers.com/private.php link again.
Make sure you don't have multiple profiles on XDA because the server may be seeing activity on multiple profiles from the same IP Address as well.
If this is some type of an ongoing account issue, you may need to contact @MikeChannon (an XDA Administrator) to help you out with some further investigation regarding your account.
This is about the best guidance I can provide you with myself...
Good Luck!
~~~~~~~~~~~~~~~
UNLESS asked to do so, PLEASE don't PM me regarding support. Sent using The ClaRetoX Forum App on my Enigma Machine {aenigma = Latin for "Riddle"}.
Ibuprophen said:
Try logging out, clean your browser cookies, restart your browser, go to any thread/area then log back in and try the same https://forum.xda-developers.com/private.php link again.
Make sure you don't have multiple profiles on XDA because the server may be seeing activity on multiple profiles from the same IP Address as well.
If this is some type of an ongoing account issue, you may need to contact @MikeChannon (an XDA Administrator) to help you out with some further investigation regarding your account.
This is about the best guidance I can provide you with myself...
Good Luck!
~~~~~~~~~~~~~~~
UNLESS asked to do so, PLEASE don't PM me regarding support. Sent using The ClaRetoX Forum App on my Enigma Machine {aenigma = Latin for "Riddle"}.
Click to expand...
Click to collapse
Thank you, the problem does not appear on my notebook, so I guess there really might have been some cache inconsitencies on the other machine.
Hey,
Ive just used the pw reset feature today,
and heck,
I was shocked when I entered my email adress into the input form and it prompted a message that my password reset was send to my email.
A password reset request has been emailed to you. Please follow the instructions in that email.
Click to expand...
Click to collapse
The prompted message should NOT give any detail if the entered email is used in the db, or not!
That needs to be adressed imho asap!
Simply by:
If true:
If this email is associated with an account, the password reset request has been emailed to it. Please follow the instructions in that email.
If not true:
If this email is associated with an account, the password reset request has been emailed to it. Please follow the instructions in that email.
Ty
@MikeChannon @the_scotsman
Gentlemen, for your attention please.
GuestNoOne said:
Hey,
Ive just used the pw reset feature today,
and heck,
I was shocked when I entered my email adress into the input form and it prompted a message that my password reset was send to my email.
The prompted message should NOT give any detail if the entered email is used in the db, or not!
That needs to be adressed imho asap!
Simply by:
If true:
If this email is associated with an account, the password reset request has been emailed to it. Please follow the instructions in that email.
If not true:
If this email is associated with an account, the password reset request has been emailed to it. Please follow the instructions in that email.
Ty
Click to expand...
Click to collapse
Contact Us | XDA Developers
Founded in 2002, XDA is the world’s largest smartphone and electronics community. Looking for the latest tech news and reviews? Want to do more with your Android phone, Windows PC, iPhone, iPad, or MacBook? Look no further than XDA.
www.xda-developers.com
Requests to Moderators and Recommendations for XDA improvements
[All XDA Members] Requests to Moderators and Admins [All XDA Members] Feedback/Recommendations for XDA
forum.xda-developers.com
sd_shadow said:
Contact Us | XDA Developers
Founded in 2002, XDA is the world’s largest smartphone and electronics community. Looking for the latest tech news and reviews? Want to do more with your Android phone, Windows PC, iPhone, iPad, or MacBook? Look no further than XDA.
www.xda-developers.com
Requests to Moderators and Recommendations for XDA improvements
[All XDA Members] Requests to Moderators and Admins [All XDA Members] Feedback/Recommendations for XDA
forum.xda-developers.com
Click to expand...
Click to collapse
What a mess in here... Instead of deleting this thread the mod decided to delete the post I made, after checking your reply, in:
https://forum.xda-developers.com/t/...recommendations-for-xda-improvements.4300729/
... but hey, its actually not a recommendation, its a security flaw and therefor bug report. So maybe the mod was right to leave this thread. Still confused
GuestNoOne said:
Hey,
Ive just used the pw reset feature today,
and heck,
I was shocked when I entered my email adress into the input form and it prompted a message that my password reset was send to my email.
The prompted message should NOT give any detail if the entered email is used in the db, or not!
That needs to be adressed imho asap!
Simply by:
If true:
If this email is associated with an account, the password reset request has been emailed to it. Please follow the instructions in that email.
If not true:
If this email is associated with an account, the password reset request has been emailed to it. Please follow the instructions in that email.
Ty
Click to expand...
Click to collapse
This matter has been referred to those who can officially review and potentially change the way the process works.
Mike
I just fixed this by standardizing verbiage across both situations. Thank you for bringing it to our attention @GuestNoOne !
Lol. Mods thanking each other to gain more likes - while the one who brought it up doesnt get any.
That phenomen got a name and aint healthy...
GuestNoOne said:
Lol. Mods thanking each other to gain more likes - while the one who brought it up doesnt get any.
That phenomen got a name and aint healthy...
Click to expand...
Click to collapse
Do you really expect an answer? Certainly not from me.
GuestNoOne said:
Lol. Mods thanking each other to gain more likes
Click to expand...
Click to collapse
We don't care about likes anymore, this is no longer significant at this point, for moderators at least. We are not chasing them.
GuestNoOne said:
while the one who brought it up doesnt get any.
Click to expand...
Click to collapse
Fixed! You got likes now, thanks!
Yeah that happens, I've seen moderators (myself included) affected by this situation as well, don't worry, e.g. a moderator posts a smart question or an interesting issue and only the other mod who answered got likes! This is not specific to non-moderators, trust me.
GuestNoOne said:
That phenomen got a name and aint healthy...
Click to expand...
Click to collapse
I know for sure there is nothing malicious here. Trust me here too