Develop Bugs

spam mail

I got spam mail to a unique address I registered with xda-developers.
The address is not readable publicly and isn't findable in Google.
If anybody with the site is interested I can provide details.

lklotz said:
I got spam mail to a unique address I registered with xda-developers.
The address is not readable publicly and isn't findable in Google.
If anybody with the site is interested I can provide details.
Click to expand...
Click to collapse
Not sure we can help, but yes, send me a PM with the details.
We do not sell or otherwise distribute email addresses. email addresses can "leak" out from many places, from your PC and from contact lists on your phone. This is happening to an increasing extent on mobile devices: http://www.xda-developers.com/android/logging-test-by-treve-sassibob-review/

OK I sent you a PM but it doesn't show up in my PM Sent folder so if you didn't get it let me know here. I'm certain the compromise didn't come from my phone as the address I use is only for this forum registration and not any other purpose.

lklotz said:
OK I sent you a PM but it doesn't show up in my PM Sent folder so if you didn't get it let me know here. I'm certain the compromise didn't come from my phone as the address I use is only for this forum registration and not any other purpose.
Click to expand...
Click to collapse
Received your PM and will have it looked into.
Also activated the option for you to have sent PMs saved in your sent mail folder.

lklotz said:
OK I sent you a PM but it doesn't show up in my PM Sent folder so if you didn't get it let me know here. I'm certain the compromise didn't come from my phone as the address I use is only for this forum registration and not any other purpose.
Click to expand...
Click to collapse
To satisfy my curiosity, do you use the XDA App / Tapa Talk / Forum Runner / etc?

Phishing attempt (Guild Wars 2)

I received a phishing e-mail today to an address that I set up specifically for the xda-developers forum. I'm pretty sure I haven't given it to anyone else. Could there be a database leak?
Greetings!
Due to an unusual change in your access pattern, the Guild Wars 2 account under this email address has been locked. This can be caused by logging in from a new location, but it may also signal an attempt to compromise your account. If you feel that your account's security is at risk, please follow the steps below.
Step 1: Verify Your Account Ownership​
​ Click on the link below to verify your e-mail address of the Guild Wars 2 account:​ hxxps://account.guildwars2.com/account/login-support.html
Click to expand...
Click to collapse
The link actually goes to hxxp://guildwars2.com.us-support.pw/?loginservice=wam&ref=0&app=bam (WARNING! COULD BE DANGEROUS)

IHaveADiamond said:
I received a phishing e-mail today to an address that I set up specifically for the xda-developers forum. I'm pretty sure I haven't given it to anyone else. Could there be a database leak?
​
The link actually goes to hxxp://guildwars2.com.us-support.pw/?loginservice=wam&ref=0&app=bam (WARNING! COULD BE DANGEROUS)
Click to expand...
Click to collapse
There is a thread from a few months back that describes a similar situation. If I can find it I'll post a link.
Edit:
http://forum.xda-developers.com/showthread.php?t=1835116

Flagging the admin to check it out @bitpushr
Thank you,
mikef
XDA Senior Moderator

403 Forbidden error when accessing post created by me using URL

If i use the URL https://forum.xda-developers.com/galaxy-note-8/help/able-to-whitepages-people-search-note-8-t3817418 which is a thread I have created in any browser after I am logged in, I will get a 403 Forbidden error as seen in the screen shot. However, the URL works fine when I am logged out of the site in any browser and I can reach the thread while logged on either by going to the specific forum itself and finding the thread or visiting my own profile in any other thread I have a post in, clicking on the post itself after showing posts I have started. This problem has happened ever since I originally created that specific thread.
Just for reference, I can access this thread fine without problems using the URL:
https://forum.xda-developers.com/general/about-xda/403-forbidden-error-accessing-post-t3877220

Almighty1 said:
If i use the URL..........
Click to expand...
Click to collapse
I can confirm this and this is indeed a weird thing...
My Personal Findings on being able to see it or not:
~XDA Apps (The ClaRetoX Forum & XDA Labs) - Yes (No problems at all)
~Android Browser App (Firefox & Puffin) - NO (Returns 403 Error)
~PC Browser Software (Firefox & Internet Explorer) - NO (Returns 403 Error)
I even see that thread listed in your profile as well.
This is definitely something that the Administrators, @MikeChannon and @bitpushr, should be aware of for further investigation.
Good Luck!
~~~~~~~~~~~~~~~
UNLESS asked to do so, PLEASE don't PM me regarding support. Sent using The ClaRetoX Forum App on my Commodore VIC-20.

Ibuprophen said:
.............
This is definitely something that the Administrators, @MikeChannon and @bitpushr, should be aware of for further investigation.
Click to expand...
Click to collapse
Yup... one for @bitpushr
Mike

Ibuprophen said:
I can confirm this and this is indeed a weird thing...
My Personal Findings on being able to see it or not:
~XDA Apps (The ClaRetoX Forum & XDA Labs) - Yes (No problems at all)
~Android Browser App (Firefox & Puffin) - NO (Returns 403 Error)
~PC Browser Software (Firefox & Internet Explorer) - NO (Returns 403 Error)
I even see that thread listed in your profile as well.
This is definitely something that the Administrators, @MikeChannon and @bitpushr, should be aware of for further investigation.
Good Luck!
~~~~~~~~~~~~~~~
UNLESS asked to do so, PLEASE don't PM me regarding support. Sent using The ClaRetoX Forum App on my Commodore VIC-20.
Click to expand...
Click to collapse
Interesting, I kept thinking I was the only one who had the problem because I created the thread and didn't realized others have the error as well. The only way I can open the thread is either through my profile or directly to the forum where it was pasted. I know that thread was moved so not sure if that has anything to do with it.

Almighty1 said:
Interesting, I kept thinking I was the only one who...........
Click to expand...
Click to collapse
It looks like this was referred to bitpushr who's the Administrator for the Technical Side of the XDA Server and such.
It may take a little time for this to be looked into with other server issues he's currently working on.
~~~~~~~~~~~~~~~
UNLESS asked to do so, PLEASE don't PM me regarding support. Sent using The ClaRetoX Forum App on my Commodore VIC-20.

Ibuprophen said:
It looks like this was referred to bitpushr who's the Administrator for the Technical Side of the XDA Server and such.
It may take a little time for this to be looked into with other server issues he's currently working on.
~~~~~~~~~~~~~~~
UNLESS asked to do so, PLEASE don't PM me regarding support. Sent using The ClaRetoX Forum App on my Commodore VIC-20.
Click to expand...
Click to collapse
Yeah, I realized that, what I meant was thanks for confirming the problem as someone who is not the OP having the same issue(s).

Almighty1 said:
If i use the URL https://forum.xda-developers.com/galaxy-note-8/help/able-to-whitepages-people-search-note-8-t3817418 which is a thread I have created in any browser after I am logged in, I will get a 403 Forbidden error as seen in the screen shot. However, the URL works fine when I am logged out of the site in any browser and I can reach the thread while logged on either by going to the specific forum itself and finding the thread or visiting my own profile in any other thread I have a post in, clicking on the post itself after showing posts I have started. This problem has happened ever since I originally created that specific thread.
Just for reference, I can access this thread fine without problems using the URL:
https://forum.xda-developers.com/general/about-xda/403-forbidden-error-accessing-post-t3877220
Click to expand...
Click to collapse
MikeChannon said:
Yup... one for @bitpushr
Mike
Click to expand...
Click to collapse
This should be fixed now. Reference: https://forum.xda-developers.com/ge...ccess-to-page-2-threads-t3915767/post79211243

This error indicates that the server has determined that you are not allowed access to the thing you've requested, either on purpose or due to a misconfiguration . It's probably because the site owner has limited access to it and you don't have permission to view it. The vast majority of the time, there's not much you can do to fix things on your (*client) end. There are four common causes for 403 Forbidden error (server side) . Here they are listed from most likely to least likely:
An empty website directory
No index page
Incorrect settings in the .htaccess file
Permission / Ownership error
If authentication credentials were provided in the request, the server considers them insufficient to grant access. The client SHOULD NOT automatically repeat the request with the same credentials. The client MAY repeat the request with new or different credentials. However, a request might be forbidden for reasons unrelated to the credentials.

Email app - No Connection!

I have a OnePlus One phone running LineageOS 15.1 I update the software once a week, but have noticed that some time over the last month, or so, The email application I have installed, Google's Inbox, can no longer collect email whilst I'm connected to the Mobile Internet.
I've checked the settings and the app is allowed to use mobile data, so there should not be an issue. However only when the phone enters a WiFi network will email be collected. If I try to force email collection then the app complains that there is no data connection. I tried to re-install the app but that didn't help at all.
I'd be grateful of anybody has any ideas about what I can do to resolve this issue.

jwhitmore said:
I have a OnePlus One phone running LineageOS 15.1.........
Click to expand...
Click to collapse
I don't have this device but, your best bet is to post this question within the following Official LineageOS 15.1 thread that's specific to your device for support and guidance.
https://forum.xda-developers.com/showthread.php?t=3843146
Good Luck!
~~~~~~~~~~~~~~~
UNLESS asked to do so, PLEASE don't PM me regarding support. Sent using The ClaRetoX Forum App on my Commodore VIC-20.

Ibuprophen said:
I don't have this device but, your best bet is to post this question within the following Official LineageOS 15.1 thread that's specific to your device for support and guidance.
https://forum.xda-developers.com/showthread.php?t=3843146
Good Luck!
Click to expand...
Click to collapse
Thanks for that suggestion, unfortunately I joined up to solve this problem and I don't have enough social credit to post there at the moment. Have to build up social credit here before I can ask there. What a time to be alive

jwhitmore said:
Thanks for that suggestion, unfortunately I joined up.........
Click to expand...
Click to collapse
I see... your referring to the XDA "10 Post" Rule...
This shouldn't take long for those who are serious about the Forum and use it appropriately.
So far your doing fine. :thumbup:
~~~~~~~~~~~~~~~
UNLESS asked to do so, PLEASE don't PM me regarding support. Sent using The ClaRetoX Forum App on my Commodore VIC-20.

Password Reset Spoofing

Hey,
Ive just used the pw reset feature today,
and heck,
I was shocked when I entered my email adress into the input form and it prompted a message that my password reset was send to my email.
A password reset request has been emailed to you. Please follow the instructions in that email.
Click to expand...
Click to collapse
The prompted message should NOT give any detail if the entered email is used in the db, or not!
That needs to be adressed imho asap!
Simply by:
If true:
If this email is associated with an account, the password reset request has been emailed to it. Please follow the instructions in that email.
If not true:
If this email is associated with an account, the password reset request has been emailed to it. Please follow the instructions in that email.
Ty

@MikeChannon @the_scotsman
Gentlemen, for your attention please.

GuestNoOne said:
Hey,
Ive just used the pw reset feature today,
and heck,
I was shocked when I entered my email adress into the input form and it prompted a message that my password reset was send to my email.
The prompted message should NOT give any detail if the entered email is used in the db, or not!
That needs to be adressed imho asap!
Simply by:
If true:
If this email is associated with an account, the password reset request has been emailed to it. Please follow the instructions in that email.
If not true:
If this email is associated with an account, the password reset request has been emailed to it. Please follow the instructions in that email.
Ty
Click to expand...
Click to collapse
Contact Us | XDA Developers
Founded in 2002, XDA is the world’s largest smartphone and electronics community. Looking for the latest tech news and reviews? Want to do more with your Android phone, Windows PC, iPhone, iPad, or MacBook? Look no further than XDA.
www.xda-developers.com
Requests to Moderators and Recommendations for XDA improvements
[All XDA Members] Requests to Moderators and Admins [All XDA Members] Feedback/Recommendations for XDA
forum.xda-developers.com

sd_shadow said:
Contact Us | XDA Developers
Founded in 2002, XDA is the world’s largest smartphone and electronics community. Looking for the latest tech news and reviews? Want to do more with your Android phone, Windows PC, iPhone, iPad, or MacBook? Look no further than XDA.
www.xda-developers.com
Requests to Moderators and Recommendations for XDA improvements
[All XDA Members] Requests to Moderators and Admins [All XDA Members] Feedback/Recommendations for XDA
forum.xda-developers.com
Click to expand...
Click to collapse
What a mess in here... Instead of deleting this thread the mod decided to delete the post I made, after checking your reply, in:
https://forum.xda-developers.com/t/...recommendations-for-xda-improvements.4300729/
... but hey, its actually not a recommendation, its a security flaw and therefor bug report. So maybe the mod was right to leave this thread. Still confused

GuestNoOne said:
Hey,
Ive just used the pw reset feature today,
and heck,
I was shocked when I entered my email adress into the input form and it prompted a message that my password reset was send to my email.
The prompted message should NOT give any detail if the entered email is used in the db, or not!
That needs to be adressed imho asap!
Simply by:
If true:
If this email is associated with an account, the password reset request has been emailed to it. Please follow the instructions in that email.
If not true:
If this email is associated with an account, the password reset request has been emailed to it. Please follow the instructions in that email.
Ty
Click to expand...
Click to collapse
This matter has been referred to those who can officially review and potentially change the way the process works.
Mike

I just fixed this by standardizing verbiage across both situations. Thank you for bringing it to our attention @GuestNoOne !

Lol. Mods thanking each other to gain more likes - while the one who brought it up doesnt get any.
That phenomen got a name and aint healthy...

GuestNoOne said:
Lol. Mods thanking each other to gain more likes - while the one who brought it up doesnt get any.
That phenomen got a name and aint healthy...
Click to expand...
Click to collapse
Do you really expect an answer? Certainly not from me.

GuestNoOne said:
Lol. Mods thanking each other to gain more likes
Click to expand...
Click to collapse
We don't care about likes anymore, this is no longer significant at this point, for moderators at least. We are not chasing them.
GuestNoOne said:
while the one who brought it up doesnt get any.
Click to expand...
Click to collapse
Fixed! You got likes now, thanks!
Yeah that happens, I've seen moderators (myself included) affected by this situation as well, don't worry, e.g. a moderator posts a smart question or an interesting issue and only the other mod who answered got likes! This is not specific to non-moderators, trust me.
GuestNoOne said:
That phenomen got a name and aint healthy...
Click to expand...
Click to collapse
I know for sure there is nothing malicious here. Trust me here too