Proboards You Yet Again gave my account away

[Former Member]

Oct 26, 2017 10:19:47 GMT -8 sjfrom610 said:

Can you note for all other admins that, if ANY OTHER account with a DIFFERENT IP then tobyrba , tries to come forth and request a password reset, or say it's their account and it's not..It is NOT Toby, It's a FAKE.

What if he needs to reset it in the future?

[Brian]

Oct 26, 2017 10:19:47 GMT -8 sjfrom610 said:

Can you note for all other admins that, if ANY OTHER account with a DIFFERENT IP then tobyrba , tries to come forth and request a password reset, or say it's their account and it's not..It is NOT Toby, It's a FAKE.

We don't rely on IP addresses to begin with because they constantly get reassigned, and there's no guarantee that a user doesn't access their forum from multiple connections.

My mistake was that I homed in on what I initially concluded was the oldest trace of evidence I could find. I will not allow this to happen again, and I'll be discussing means of preventing this possibility from occurring again with my manager as well as the CEO.

[Former Member]

Oct 26, 2017 10:26:55 GMT -8 Brian said:

Oct 26, 2017 10:19:47 GMT -8 sjfrom610 said:

Can you note for all other admins that, if ANY OTHER account with a DIFFERENT IP then tobyrba , tries to come forth and request a password reset, or say it's their account and it's not..It is NOT Toby, It's a FAKE.

We don't rely on IP addresses to begin with because they constantly get reassigned, and there's no guarantee that a user doesn't access their forum from multiple connections.

My mistake was that I homed in on what I initially concluded was the oldest trace of evidence I could find. I will not allow this to happen again, and I'll be discussing means of preventing this possibility from occurring again with my manager as well as the CEO.

*claps*
Bravo!

[Brian]

tobyrba, sjfrom610:

I'm currently working with our sysadmin to reverse the damage that was performed on the forum as a result of this. The forum should return back to the state it was in right before I got into work 3 hours and 30 minutes ago.

[mmhmm]

If I might add a word of caution: Toby, your original post indicates you're sharing login information with other members. That's precluded the the ProBoards ToS for a reason. If others have your login information it's not difficult for them to get into your Admin account and do damage. Never, ever, ever share login information with anyone. No exceptions.

Just a word to the wise.

[tobyrba]

Btw I wasn't sharing my login information, if I did why would I let him get into my facebook & yahoo??


Plus he used this forum to get access to my accounts, because all he had to say is that his account was lost and they it was stolen.

[tobyrba]

Oct 26, 2017 11:01:35 GMT -8 Brian said:

tobyrba , sjfrom610 :

I'm currently working with our sysadmin to reverse the damage that was performed on the forum as a result of this. The forum should return back to the state it was in right before I got into work 3 hours and 30 minutes ago.

How do I get admin again?

Because my forum owner Marcus (Artist on the forums) is banned from it and we can't log on to fix what he did. Because he made a custom page that shows youtube videos and he deleted 3 threads that was made on the forum in the BBA section

[mmhmm]

Oct 26, 2017 12:31:19 GMT -8 tobyrba said:

Btw I wasn't sharing my login information, if I did why would I let him get into my facebook & yahoo??


Plus he used this forum to get access to my accounts, because all he had to say is that his account was lost and they it was stolen.

I was referring to the following statement in your second post:


"I've tried to log on my other staff members account to ban the account & remove rights but he has edited the group rights making them not able to do that and he has banned one of my staff members."

That would indicate login information is, indeed, being shared, which is against ProBoards' ToS. The reason for the ToS rule is to provide individual account security.

[Brian]

Oct 26, 2017 12:32:20 GMT -8 tobyrba said:

Oct 26, 2017 11:01:35 GMT -8 Brian said:

tobyrba , sjfrom610 :

I'm currently working with our sysadmin to reverse the damage that was performed on the forum as a result of this. The forum should return back to the state it was in right before I got into work 3 hours and 30 minutes ago.

How do I get admin again?

Because my forum owner Marcus (Artist on the forums) is banned from it and we can't log on to fix what he did. Because he made a custom page that shows youtube videos and he deleted 3 threads that was made on the forum in the BBA section

It looks like all of your bans have been cleared.

I've also PMed the admin of the forum to let them know about their content restoration. Once we've confirmed that all of the data we've retrieved is in order we'll place it on the forum as promised.

All of the powers that were assigned on the forum will be regained as well following the restoration.

[tobyrba]

Oct 26, 2017 12:51:39 GMT -8 mmhmm said:

Oct 26, 2017 12:31:19 GMT -8 tobyrba said:

Btw I wasn't sharing my login information, if I did why would I let him get into my facebook & yahoo??


Plus he used this forum to get access to my accounts, because all he had to say is that his account was lost and they it was stolen.

I was referring to the following statement in your second post:


"I've tried to log on my other staff members account to ban the account & remove rights but he has edited the group rights making them not able to do that and he has banned one of my staff members."

That would indicate login information is, indeed, being shared, which is against ProBoards' ToS. The reason for the ToS rule is to provide individual account security.

Guy if you listened.. I asked them for their login information TO BAN/DELETE MY OWN ACCOUNT, he was trying to steal IPs and he is currently booting my Admin of the forums offline..

[tobyrba]

Oct 26, 2017 13:22:18 GMT -8 Brian said:

Oct 26, 2017 12:32:20 GMT -8 tobyrba said:

How do I get admin again?

Because my forum owner Marcus (Artist on the forums) is banned from it and we can't log on to fix what he did. Because he made a custom page that shows youtube videos and he deleted 3 threads that was made on the forum in the BBA section

It looks like all of your bans have been cleared.

I've also PMed the admin of the forum to let them know about their content restoration. Once we've confirmed that all of the data we've retrieved is in order we'll place it on the forum as promised.

All of the powers that were assigned on the forum will be regained as well following the restoration.

Thank you !

[Kami]

Oct 26, 2017 13:44:10 GMT -8 tobyrba said:

Oct 26, 2017 12:51:39 GMT -8 mmhmm said:

I was referring to the following statement in your second post:


"I've tried to log on my other staff members account to ban the account & remove rights but he has edited the group rights making them not able to do that and he has banned one of my staff members."

That would indicate login information is, indeed, being shared, which is against ProBoards' ToS. The reason for the ToS rule is to provide individual account security.

Guy if you listened.. I asked them for their login information TO BAN/DELETE MY OWN ACCOUNT, he was trying to steal IPs and he is currently booting my Admin of the forums offline..

We all understand that, but regardless of your reasoning you're not, as per the ProBoards Terms of Service, allowed to access an account that isn't yours. Heaven forbid this happens again, but if it does your immediate first recourse should be to alert ProBoards admins of someone attempting to compromise your accounts.

Imagine, if you will, the more extreme scenario that this person was more technically savvy and was capable of tricking you into installing a keylogger onto your system. You accessing anyone else's account would have wound up giving them all their info too. (I am NOT saying this happened, just imagine if it did!)

Or, imagine, if you will, that you were a malicious person. You could have created a false situation to obtain the account info under false pretence! I'm not saying you DID, but if sharing account credentials -- for ANY reason, no matter how legitimate you view that reason -- was allowed, it would create a lot of security issues.

This is the reason that admins / staff members no longer have the ability to change their members' email addresses, too.

While I definitely understand and respect your reasoning, please note that sharing account credentials for any reason is against the TOS. If you have reason to believe your account / forum have been compromised in any manner, contact ProBoards immediately.

[Jaguar]

tobyrba & sjfrom610 or anyone else from that Forum in question, make your passwords very hard and do not store those passwords online.

Go for at the very least 50 to 60 characters long, upper and lower case letters and numbers. And tell no one your login info.

Don't share accounts either, your bestie can become your enemy.

Good Luck.

[Brian]

Oct 26, 2017 13:44:25 GMT -8 tobyrba said:

Oct 26, 2017 13:22:18 GMT -8 Brian said:

It looks like all of your bans have been cleared.

I've also PMed the admin of the forum to let them know about their content restoration. Once we've confirmed that all of the data we've retrieved is in order we'll place it on the forum as promised.

All of the powers that were assigned on the forum will be regained as well following the restoration.

Thank you !

This should now be complete, and you should once again have power on the forum.