Poor security on forum account registration
Printed From: ASRock.com
Category: Technical Support
Forum Name: HTPC&Gaming Barebone&Others
Forum Description: Question about HTPC&Gaming Barebone&Others
URL: https://forum.asrock.com/forum_posts.asp?TID=4578
Printed Date: 13 Dec 2024 at 4:46pm Software Version: Web Wiz Forums 12.04 - http://www.webwizforums.com
Topic: Poor security on forum account registration
Posted By: aclaydog
Subject: Poor security on forum account registration
Date Posted: 11 Mar 2017 at 6:07am
Posting here as there is "general" or "forum feedback" forum.
There is no validation of email addresses when creating an account on these forums. This is a bad security practice, as you are not verifying someone owns the specified email address (i.e. identity theft).
It also makes the forum a more inviting target for spammers, who don't need to have valid mailboxes.
|
Replies:
Posted By: wardog
Date Posted: 11 Mar 2017 at 10:33am
aclaydog wrote:
Posting here as there is "general" or "forum feedback" forum.
There is no validation of email addresses when creating an account on these forums. This is a bad security practice, as you are not verifying someone owns the specified email address (i.e. identity theft).
It also makes the forum a more inviting target for spammers, who don't need to have valid mailboxes.
|
Unfortunately the forum is run from China and us Moderators don't have much control.
Yet I agree 110% that sending an email validation is more secure and I would like to see it implemented. Thanks, as this reminds me I should bring this to their attention as I too noticed that when I reg'd.
Believe it or not there is far FAR less spam and linkage occurring here than I, and you, would think. Maybe two or three Users a week abuse it. And, we are sub'd to a rather good IP and email list that automatically blocks I assume much of those shenanigans and attempted Users.
|
|