The forum of the forums
Welcome to the Official Support Forum of Forumotion!

To take full advantage of everything offered by our forum, please log in if you are already a member, or join our community if you've not yet.



Create a free forum like this one.

Security: Postpone Sending Registration E-mail

View previous topic View next topic Go down

Do you support my suggestion?

0% 0% 
[ 0 ]
50% 50% 
[ 1 ]
50% 50% 
[ 1 ]
 
Total Votes : 2

Security: Postpone Sending Registration E-mail

Post by Guest on November 26th 2014, 6:06 pm

TitleSeurity: Postpone Sending Registration E-mail
Target Area(s)Global FM Network Security / ACP
Original Post(s)Click Here
By (FM Username)SamanthaS
Date2014-11-26
Split Post Follow-UpYes: Click Here



Concern:
Using a proxy and fake e-mail address, one can have unlimited anonymous access to anyone's board, even when banned based on (another) account, IP address or even e-mail address (see Split Post Follow-Up).

Detailed Description:
There are numerous servers around the world offering the creation of a free temporary e-mail address. Existence of such an e-mail address usually varies from 15 - 30 minutes. This temporary e-mail address can then be used to confirm the automated account creation e-mail sent when the admin decides to have their new users to finalize upon registration themselves. After 15 - 30 minutes, the temporary e-mail address is removed from the server where it was offered to create it, leaving the owner untraceable.

This also involves banning based on e-mail address. Usually 90% or so will be kept out after a ban, but it's this 10% left who try to smarten out the admin in a very unfortunate and annoying way. Usually banned members have caused a major incident or various ones even, like spamming the forum and stalking other members on the internet, and if I can't keep 'm out, well, you know, as an admin I'm the one responsible.

Suggestion / Request:
Aiming at full security for my website I'd like FM Technicians to consider postponing sending registration e-mails for 15 - 30 minutes and provide feedback on this to the new registrant upon registering or make it an option available within the ACP for the admin to decide the postpone period.

Guest
Guest


Back to top Go down

Re: Security: Postpone Sending Registration E-mail

Post by _Twisted_Mods_ on November 27th 2014, 1:06 am

to be honest it doesnt matter what you do if someone wants to do somthing bad enough they will find a way ..

lets say you post pone emails block proxy's, block fake emails, and everything else

whats to stop me from using another device or or a friends

and if you post pone them for 30 mins no big deal just means you cant use a temp email .. there is still email creators for yaho,hotmail,gmail and the rest of them

just to prove my point

these was all made in about 5 mins

Code:
amberduhamelxf306@yahoo.com:SAx6muLZjb
genniemeilekr218@yahoo.com:mPL6FTZ4BQl
caressashirleywp018@yahoo.com:Jvj4mmPslu
dodiwegmannkk782@yahoo.com:PSs0pXXTKn
feylollarra102@yahoo.com:NsD0ueP7QPX
fancierottenbergxj532@yahoo.com:BueUbK75Thi
elsbethelsenyo113@yahoo.com:beneqI9rzT
rosamundbenoitec245@yahoo.com:nfC0dwbnsF
katlindriskilltr342@yahoo.com:QCwIyg25RBJ
lexilaudemc786@yahoo.com:Sdk3wvuzbJ
cleopatranibbsxr762@yahoo.com:lKICBt87Vhp
karleenreusinguv106@yahoo.com:dkA5rabpfS
suellenfoerstergc436@yahoo.com:mSY72Vwh8AUd
rosamundiannellije486@yahoo.com:URr46pvr17CvM
korallealmasixr012@yahoo.com:mCeKKN4ptm
lurlenesingletaryns353@yahoo.com:zaU46NEx14Gvd
margueritemanassedb823@yahoo.com:NVi91KIZ88SKu
darynwelsonwa348@yahoo.com:XQm67jox77tpY
corellajoungij057@yahoo.com:OAM40sjSNry
ediemostowydh887@yahoo.com:TxO62bIY23bPP
charissalevensteinrc885@yahoo.com:TBo4WZTfzc
junettekurbantd380@yahoo.com:EGk01Ksj36AXA
francenecabanaju305@yahoo.com:XIK1kxjBAm
francenecabanaju305@yahoo.com:elBtUM62MIi
eloisemuskellyfs575@yahoo.com:TrxJSe7GUj
peggipleasenttu176@yahoo.com:RNxQEkUbL
brianasiegsj634@yahoo.com:Iha7zqG7NaU
bobinettegallimorecm770@yahoo.com:lGQ7qJQ54EOr
druciegivanpm417@yahoo.com:kfK63SZX8IGW
hilliaryhaversda845@yahoo.com:Oec96UMIfqZ
kelcicraigeir525@yahoo.com:rTL57HPB2XEb
timmiechairescn312@yahoo.com:ArqqHJWTc
leslythurauxo178@yahoo.com:ubj97grU6PhA
rosalyndautryko617@yahoo.com:vzE53jVQ3XCT
wendademmertrc885@yahoo.com:tOFkSKbbs
ellegolzag062@yahoo.com:FDw74XYn1iXf
marceliachabotnu610@yahoo.com:Xpg64LWQ4xuN
saundratarwaterwr553@yahoo.com:jml76FOi1rts
monaeveshn353@yahoo.com:oEP5akVgpi
alaynegalavispk506@yahoo.com:atrsbwmk562
bettinezeigersx071@yahoo.com:inigtrmye8556
susibendagy670@yahoo.com:mcihyfwis311
gratiafreudenburgul445@yahoo.com:ptqwepw7454
janeanwimpyss310@yahoo.com:naqbkcxias8526
jamiedallynv545@yahoo.com:sadxyqgy372
claudiepacharub661@yahoo.com:soktlqk55
nixiekersonrw527@yahoo.com:sgpsesvvli3307
livywingoxc226@yahoo.com:bmsnnoqvq2644
aloisiagodlovema203@yahoo.com:togggeadq48
lucebartholowau526@yahoo.com:tsfblowdiu651
pavlatoledanoto117@yahoo.com:rbvjqixmi136
veradisleemanrn563@yahoo.com:ijyixravu563
sindeekullmanow247@yahoo.com:qsswusa64
lyndseyniccumac433@yahoo.com:mvswnnv4152
dianaderoecknj207@yahoo.com:qpttinw428
donellaratzhv151@yahoo.com:qxwusooarq4107
joellensalmanmr868@yahoo.com:ulogyfyhgl7558
cristabelendersbx870@yahoo.com:ujpymjfqa83
channapersingerck460@yahoo.com:tmuxwljm04
cymbreweilllw243@yahoo.com:itdssnnct87
anjelamoynihanfu461@yahoo.com:alajbgrh686
saundrasymmondstf381@yahoo.com:xubfeph04
wynneappellovy170@yahoo.com:rfwbysbt04
barbquigghg073@yahoo.com:wkdmadty725
jesstianort683@yahoo.com:gsdkdklq173
wenonahgrajedapu126@yahoo.com:mhkxucq355
doerisonib138@yahoo.com:fqsjxiyf747
alineborummv267@yahoo.com:tmqkusah57
karisahudallaow247@yahoo.com:qsswusa64
fannymaederru485@yahoo.com:qmfnseupys70
winnahgilanirn163@yahoo.com:ouumvkeyev165
robbynkomobh534@yahoo.com:mgiadhkblv164
jennkozisekyi380@yahoo.com:fdjcwtuye833
livvyusienn821@yahoo.com:cxxpcaj148
korarosenbluthhy077@yahoo.com:slymtrs10
stefaharvillmk184@yahoo.com:wsyorhr22
eddiedalaljg442@yahoo.com:hjhxyheqni57
helgagarnesad877@yahoo.com:niyqgosg017
maressarossmanndk765@yahoo.com:omvunmm32
rozaliebrantongi357@yahoo.com:lfptpvb0338
bryanaruscettiov625@yahoo.com:ccykudfhq448
alanarosokm430@yahoo.com:xvdadak52
poppyhoneyht462@yahoo.com:kikxfclkl7324
magdalenclarkeyd820@yahoo.com:dommceayfl6276
christinaquakenbushil652@yahoo.com:wyvrwmlrv374
courtenaybrousejw520@yahoo.com:kbeqylyfc53
claribeljentzennr282@yahoo.com:uqvdfirc25
viviaerkelayg204@yahoo.com:lbacuonyv176
jolynfoshayke202@yahoo.com:qhesekw655
danielemerolalc566@yahoo.com:rusrmiw1322
jaquelinwarmingtonct354@yahoo.com:iqhvhkhjqa2884
willidoldcf007@yahoo.com:frmiylvg120
lynnashoatdc183@yahoo.com:kyueruvgn006
betteannehaskojt285@yahoo.com:gixcrymh5608
allxcherringtonec885@yahoo.com:bifuhspb0802
tamarahchicoinegm214@yahoo.com:eivpqtkji15
millisentlicavolijw520@yahoo.com:kbeqylyfc53
mariboomershineip061@yahoo.com:imeiwcujt845
tabinaquigleyoi580@yahoo.com:eobwclkimh02
olwencentersbp141@yahoo.com:oimavwuffj8683

_Twisted_Mods_
Helper
Helper

Male Posts : 2032
Reputation : 302
Language : English
Location : Ms

http://liquidcode.forumotion.com

Back to top Go down

Re: Security: Postpone Sending Registration E-mail

Post by Guest on November 27th 2014, 7:49 am

Well, I didn't say it's a comprehensive solution, it's a start, something I noticed and I've written it in a suggestion. At this moment we're empty handed. But it's open for debate. Everyone's got his or her own opinion.

Guest
Guest


Back to top Go down

Re: Security: Postpone Sending Registration E-mail

Post by SLGray on November 1st 2015, 9:52 pm

Bumping to move this suggestion to the first page.


When your topic has been solved, ensure you mark the topic solved.
Never post your email in public.


SLGray
Administrator
Administrator

Male Posts : 36659
Reputation : 2444
Language : English
Location : United States

http://ztwds.forumotion.com/

Back to top Go down

View previous topic View next topic Back to top


 
Permissions in this forum:
You cannot reply to topics in this forum