MobileRead forum is requesting authentication upon entering any forum

Katsunami · 02-28-2014, 08:59 AM

When entering any forum, the site pops up an authentication request dialog.

Is one of the images used in the forums located inside a protected folder, or lost the rights to be viewed, or something?

tubemonkey · 02-28-2014, 09:03 AM

I see the same thing.

we've been highjacked and someone is phishing for passwords

soulfuldog · 02-28-2014, 09:04 AM

I just started getting this too. Looked at a couple of forums with no issue, but it's now popping up on every forum. Probably an issue with an ad or something?

Katsunami · 02-28-2014, 09:52 AM

Seems fixed

WT Sharpe · 02-28-2014, 12:40 PM

There is more information forthcoming. An announcement is being prepared, and those of you who experienced this (everyone above and several others) will soon get a PM.

In the meantime, it would be a good idea to change your MobileRead password.

Katsunami · 02-28-2014, 12:58 PM

Sounds bad. Thanks for the suggestion; password was changed.

Ah, well. That's why one should use different, 50 characters long passwords for every site and store them using something such as Keepass.

WT Sharpe · 02-28-2014, 01:13 PM

The good news is that it was contained so quickly. Still, as a precaution, it's a good idea to change the password as you did, kat.

Katsunami · 02-28-2014, 01:21 PM

Malware on the server, or in an advertisement? Wouldn't be the first it happened to a big site. The very best protection is to have a different password for each site you have an account at. If one account is possibly compromised, other accounts stay safe.

I look forward to the announcement to learn what was amiss.

WT Sharpe · 02-28-2014, 01:28 PM

PMs have been sent to all affected users.

Alexander Turcic · 02-28-2014, 02:11 PM

HI guys,

Sorry for the late reply. Please the announcement over here: https://www.mobileread.com/forums/sho...d.php?t=235011

Alex

tubemonkey · 02-28-2014, 02:40 PM

That was not nice of that person.

Password changed - that person owes me a banana for the trouble I went through

eschwartz · 02-28-2014, 03:42 PM

Quote:

Originally Posted by Katsunami

Sounds bad. Thanks for the suggestion; password was changed.

Ah, well. That's why one should use different, 50 characters long passwords for every site and store them using something such as Keepass.

Wow, 50 characters?

I just use 15 on average -- some of them I want to remember!

And Lastpass of course.

Good job mods on containing it so quickly!

Katsunami · 02-28-2014, 03:50 PM

Quote:

Originally Posted by eschwartz

Wow, 50 characters?

Why not? They're all in Keepass. If a site does not accept them, I shorten them to 25 or 15 characters if need be.

Quote:

I just use 15 on average -- some of them I want to remember!

The ones I need to remember are constructed using an algorithm only I know, which makes each of them different, but even if I forget, I can derive the password from several clues (which, for example, includes the site's name) and some personal details only I know.

I carry KeepassDroid on my phone, but even if the database AND the key file are stolen (which are both on the phone), the master password is still unknown.

FizzyWater · 02-28-2014, 07:52 PM

I need to look into this Keepass....I'm still using a little 16-bit program I got when I was running Windows 3.1.

Probably not all that safe these days...

jgaiser · 03-01-2014, 10:50 AM

Quote:

Originally Posted by eschwartz

And Lastpass of course.

Like Lastpass a lot. Works on all my OS's (Windows, iPhone, Linux and Android). Even ended up get the paid version. As much as I use it, I should support it.

02-28-2014, 08:59 AM	#1
Katsunami Grand Sorcerer Posts: 6,111 Karma: 34000001 Join Date: Mar 2008 Device: KPW1, KA1	MobileRead forum is requesting authentication upon entering any forum When entering any forum, the site pops up an authentication request dialog. Is one of the images used in the forums located inside a protected folder, or lost the rights to be viewed, or something? Last edited by Katsunami; 02-28-2014 at 09:04 AM.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
You know you are on a MobileRead forum if....	hidari	Lounge	150	02-02-2015 12:48 AM
New to the MobileRead forum	Wolfmont	General Discussions	4	06-17-2011 02:33 AM
Mobileread forum not very mobile	pda_junkie	Feedback	9	10-26-2010 01:03 AM
mobileread forum	karvelis	Introduce Yourself	4	04-06-2009 12:53 PM
New User in the mobileRead Forum	rspicken	Introduce Yourself	2	10-05-2008 02:59 PM

02-28-2014, 09:03 AM	#2
tubemonkey monkey on the fringe Posts: 45,477 Karma: 158151390 Join Date: May 2010 Location: Seattle Metro Device: Moto E6, Echo Show	I see the same thing. we've been highjacked and someone is phishing for passwords

02-28-2014, 09:04 AM	#3
soulfuldog I ♥ Calibre Posts: 2,073 Karma: 5678911 Join Date: Aug 2011 Location: UK Device: Kindle Oasis, Voyage, Sony PRS-350, Hudl2	I just started getting this too. Looked at a couple of forums with no issue, but it's now popping up on every forum. Probably an issue with an ad or something?

02-28-2014, 09:52 AM	#4
Katsunami Grand Sorcerer Posts: 6,111 Karma: 34000001 Join Date: Mar 2008 Device: KPW1, KA1	Seems fixed

02-28-2014, 12:40 PM	#5
WT Sharpe Bah, humbug! Posts: 39,073 Karma: 157049943 Join Date: Jun 2009 Location: Chesapeake, VA, USA Device: Kindle Oasis, iPad Pro, & a Samsung Galaxy S9.	There is more information forthcoming. An announcement is being prepared, and those of you who experienced this (everyone above and several others) will soon get a PM. In the meantime, it would be a good idea to change your MobileRead password.

02-28-2014, 12:58 PM	#6
Katsunami Grand Sorcerer Posts: 6,111 Karma: 34000001 Join Date: Mar 2008 Device: KPW1, KA1	Sounds bad. Thanks for the suggestion; password was changed. Ah, well. That's why one should use different, 50 characters long passwords for every site and store them using something such as Keepass.

02-28-2014, 01:13 PM	#7
WT Sharpe Bah, humbug! Posts: 39,073 Karma: 157049943 Join Date: Jun 2009 Location: Chesapeake, VA, USA Device: Kindle Oasis, iPad Pro, & a Samsung Galaxy S9.	The good news is that it was contained so quickly. Still, as a precaution, it's a good idea to change the password as you did, kat.

02-28-2014, 01:21 PM	#8
Katsunami Grand Sorcerer Posts: 6,111 Karma: 34000001 Join Date: Mar 2008 Device: KPW1, KA1	Malware on the server, or in an advertisement? Wouldn't be the first it happened to a big site. The very best protection is to have a different password for each site you have an account at. If one account is possibly compromised, other accounts stay safe. I look forward to the announcement to learn what was amiss.

02-28-2014, 01:28 PM	#9
WT Sharpe Bah, humbug! Posts: 39,073 Karma: 157049943 Join Date: Jun 2009 Location: Chesapeake, VA, USA Device: Kindle Oasis, iPad Pro, & a Samsung Galaxy S9.	PMs have been sent to all affected users.

02-28-2014, 02:11 PM	#10
Alexander Turcic Fully Converged Posts: 18,163 Karma: 14021202 Join Date: Oct 2002 Location: Switzerland Device: Too many to count here.	HI guys, Sorry for the late reply. Please the announcement over here: https://www.mobileread.com/forums/sho...d.php?t=235011 Alex

02-28-2014, 02:40 PM	#11
tubemonkey monkey on the fringe Posts: 45,477 Karma: 158151390 Join Date: May 2010 Location: Seattle Metro Device: Moto E6, Echo Show	That was not nice of that person. Password changed - that person owes me a banana for the trouble I went through

02-28-2014, 07:52 PM	#14
FizzyWater You kids get off my lawn! Posts: 4,220 Karma: 73492664 Join Date: Aug 2007 Location: Columbus, Ohio Device: Oasis 2 and Libra H2O and half a dozen older models I can't let go of	I need to look into this Keepass....I'm still using a little 16-bit program I got when I was running Windows 3.1. Probably not all that safe these days...