https://forum.asrock.com/ Copyright (c) 2006-2013 Web Wiz Forums - All Rights Reserved. Fri, 06 Mar 2026 22:20:51 +0000 Sat, 11 Mar 2017 10:33:39 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 12.04 360 https://forum.asrock.com/RSS_post_feed.asp?TID=4578 https://forum.asrock.com/forum_images/web_wiz_forums_black.png https://forum.asrock.com/ https://forum.asrock.com/forum_posts.asp?TID=4578&PID=24891&title=poor-security-on-forum-account-registration#24891 Author: wardog
Subject: 4578
Posted: 11 Mar 2017 at 10:33am

aclaydog wrote: Posting here as there is "general" or "forum feedback" forum. There is no validation of email addresses when creating an account on these forums.  This is a bad security practice, as you are not verifying someone owns the specified email address (i.e. identity theft). It also makes the forum a more inviting target for spammers, who don't need to have valid mailboxes.

Unfortunately the forum is run from China and us Moderators don't have much control.

Yet I agree 110% that sending an email validation is more secure and I would like to see it implemented. Thanks, as this reminds me I should bring this to their attention as I too noticed that when I reg'd.

Believe it or not there is far FAR less spam and linkage occurring here than I, and you, would think. Maybe two or three Users a week abuse it. And, we are sub'd to a rather good IP and email list that automatically blocks I assume much of those shenanigans and attempted Users.




]]> Sat, 11 Mar 2017 10:33:39 +0000 https://forum.asrock.com/forum_posts.asp?TID=4578&PID=24891&title=poor-security-on-forum-account-registration#24891 https://forum.asrock.com/forum_posts.asp?TID=4578&PID=24877&title=poor-security-on-forum-account-registration#24877 Author: aclaydog
Subject: 4578
Posted: 11 Mar 2017 at 6:07am

Posting here as there is "general" or "forum feedback" forum.

There is no validation of email addresses when creating an account on these forums.  This is a bad security practice, as you are not verifying someone owns the specified email address (i.e. identity theft).

It also makes the forum a more inviting target for spammers, who don't need to have valid mailboxes.
]]> Sat, 11 Mar 2017 06:07:11 +0000 https://forum.asrock.com/forum_posts.asp?TID=4578&PID=24877&title=poor-security-on-forum-account-registration#24877