Happened to me, was able to log back in eventually. DON'T PANIC.


also, has nothing to do with changing your password, because I've had the same PW for 4 years and I'm not about to ****ing change it now

Got my PW changed but unable to get any emails to change my email addy to a more current one. At least I still seem to have control of my account again.

I'm in again. Took 1 hour.

Finally got back on, took about 30 min or so too

Last night I had about 15 emails about someone trying to login. I got the email from 2p2, went to the site and changed my pw. Then m account got locked out. I was just locked out of my stuff for a good hour, said I couldn't log in and that my web address was invalid or that I had tried to login incorrectly too many times. Tried to create another account to post that I thought I was hacked, couldn't activate a 2nd account even with a separate email.

Not sure what's going on...

Finally back in.

+1

sup

Thanks.

Seriously? Are these levels by gimmicks? Or did you all really use password as your password?

I tried to login 2 hours ago via the mobile app. I got a message that I had exceeded the Max login attempts and to try again in 15 minutes. I exited the app, relaunched it and got right in. Since then everything is fine

I can confirm it is tougher for bots to login now. Which is good for almost everybody.

I received 13 of the "failed log in" e-mails today. Apparently they never figured it out I still have control. Can't figure what anyone would gain from stealing my 2+2 account.

Instead of some dodgy looking email, wht didn't you do one of those banner type things which normally advertise poker sites I've never heard of?

I didn't think the email was dodgy at all. It's very clearly from twoplustwo.

thanks admins for the notice.


keep up the good work

I still can't guess Jetto's password.

it's theduckfliesatmidnight with the code imo

Yeah, does anyone know why someone would try to steal 2p2 accounts?

^^ so they can try do scam transfers from older / high post count accounts.

A PM:

"Hi random dumb (probably fairly new) 2+2 poster in a trading thread, I'm a 2007 account who is Marketplace Approved and can show a long history of previous successful activity. I'm happy to do that $2k trade with you, but due to my long membership you will send first.

Signed Taw420"

Etc.

And it obviously works because we still have to make posts like this http://forumserver.twoplustwo.com/sh...stcount=114618 and this http://forumserver.twoplustwo.com/sh...ostcount=13131 after idiots just give their money away without a care in the world.

To prevent someone being able spite lock your account, you need the login to not match your username. Your friends that know your email would be able to spite lock, but I think that's why they are your friends lol. You can make a new e-mail just for your 2p2 account so no one knows it if people really are spite locking it (other than the bots)

(You could also make it so you have a "Login username" and a forum username. So you have a separate username to login with that no one knows (cannot be the same as your forum username) and the bots won't be able to find it listed publicly.

I'm not sure if you can get someone's email address from their profile, but if you can, just change it so you have an email form like most other forums where you don't actually show their email, and you can just type into the box with your message to send an email.

This would be a less effective way for them to hack our accounts because no everyone has their e-mail address listed on their profile. (I don't know if you can actually see someone's email, I just tried and couldn't find anyone w/ their email linked). Everyone has a username of course, so they can just scan the member list to get all our usernames to run their bots on.


Btw, I'm glad to see that my 15 attempt suggestion is now causing everyone trouble. It makes me feel great /sarcasm lol sorry.

EDIT: This seems like a big deal, I think a mandatory password change should now be required.

I felt left out when I saw that nobody had attempted to invade my account

And/or try the same username/password combos on various poker sites.

I did not get one and I still have the same email I signed up with.
What date was it sent?

Can we get MrGatorade on this?