Hackers...

[tsugg]

Me too, my mac ended up at the apple store last sat. because it wouldn't accept any password entered from me, so I couldn't log in. Apple guy fixed it for free but said I picked up a bot that was embbeded in a web site I had visited.He didn't say what web site but said its very commom. It happened right after I recieved that same e-mail from BWE saying someone is trying to log in to my account. ??? I'm not a computer guy so I have no idea whats really going on, it is strange that the order in which all this is happening, considering I've never had a problem with this computer in the 5 years since I bought it.

[makobob]

3:40 am last night they tried mine. Make your password strong. After 5 attempts they get locked out. But how do they attack BWE?

[lambadmin]

Yes. Lately, there's been an increase of apparent random login attempts. Spam bots have been trying to log on to forums using existing usernames, and trying random passwords.

So, once again - make sure you set a strong password on your account!

That stands for your login here on BWE, as well as any other place on the internet where you have a login account. Your password should be a non-dictionary word, at least 8 (or more!) characters long, a combination of uppercase +lower case + a number or a special character. That is the best password practices that ought to keep you safe.

While we have a full control of our forum, and we're keeping it as safe as it can be - we do not have a control over the internet. Usernames on internet forums are public domain information - passwords aren't.

These are the random bot login attempts, not humans. I can tell as these 5 random login attempts happen within 1 second.

We have security measures in place to temporarily lock out user's account after 5 unsuccessful login attempts. That's that email you guys see - automatic email from the forum gets fired out informing you about that. And that pretty much stops the bot in it's tracks.... for 15 minutes, when it moves on and tried to hack in another user account. The chance of random password guessing routine the bot is using guessing your password in 5 unsuccessful login attempts that's all the forum will allow is rather tiny, if existent at all.

We'll look into way to stop this all together. We may start hiding usernames, blocking some countries where the spam bots seem to be out of control all together (China, Russia, etc.)

So - not too big of a deal, as it is.
With a strong /complex password in place, really not much to worry about.

Hope this clarifies the things.