1. Some members were not receiving emails sent from XJbikes.com. For example: "Forgot your password?" function to reset your password would not send email to some members. I believe this has been resolved now. Please use "Contact Us" form (see page footer link) if you still have email issues. SnoSheriff

    Hello Guest. You have limited privileges and you can't "SEARCH" the forums. Please "Log In" or "Sign Up" for additional functionality. Click HERE to proceed.

Security Enhancements

Discussion in 'Announcement' started by SnoSheriff, Jun 23, 2024.

Tags:
  1. SnoSheriff

    SnoSheriff Site Owner Staff Member Administrator

    Messages:
    20,740
    Likes Received:
    111
    Trophy Points:
    63
    Location:
    MB, CAN
    To further secure your accounts from hackers and scammers, 2FA (Two-Factor Authentication) has been enabled for all site members. All members will be required to set up 2FA the next time they log into their accounts.

    Once you set up 2FA on your account, you will need to enter an additional code each time you log into the site. Depending on your 2FA setup, this code will either be emailed to you or displayed in your Authentication App.

    I have tested this feature and it works with Email and Google Authenticator app.

    upload_2024-6-23_13-14-24.png
     
    Franz and Dave in Ireland like this.
  2. chacal

    chacal Moderator Moderator Supporting Vendor Premium Member

    Messages:
    9,046
    Likes Received:
    1,918
    Trophy Points:
    113
    Location:
    The room where it happened
    Great idea, I've seen a lot of hacked and spam account recently......
     
  3. Huntchuks

    Huntchuks Well-Known Member

    Messages:
    1,106
    Likes Received:
    488
    Trophy Points:
    83
    Location:
    East Rochester, NY
    Not liking this at all.
     
  4. Roast644

    Roast644 Well-Known Member

    Messages:
    458
    Likes Received:
    431
    Trophy Points:
    63
    Location:
    WASHINGTON
    There's a checkbox you can click that says "trust this device" for 30 days. Then you don't have to do the email code every time.
     
  5. McTavish

    McTavish Active Member

    Messages:
    187
    Likes Received:
    86
    Trophy Points:
    28
    Location:
    Daytona Beach, Fla.
    weeding out the riff raff - I'm insulted.
     
    Timbox and chacal like this.
  6. Huntchuks

    Huntchuks Well-Known Member

    Messages:
    1,106
    Likes Received:
    488
    Trophy Points:
    83
    Location:
    East Rochester, NY
    I didn't get that checkbox. If I am on my home computer, it should always be trusted.
     
  7. Roast644

    Roast644 Well-Known Member

    Messages:
    458
    Likes Received:
    431
    Trophy Points:
    63
    Location:
    WASHINGTON
    I was going to screenshot mine to show the checkbox, but now that I've checked it, I can't go back to that screen (presumably for 30 days). I dunno. I'm no tech wizard, just beating on keys like a monkey here. Maybe @SnoSheriff can explain better.
     
  8. Huntchuks

    Huntchuks Well-Known Member

    Messages:
    1,106
    Likes Received:
    488
    Trophy Points:
    83
    Location:
    East Rochester, NY
    THAT, my friend, made for a good laugh.
     
    Roast644 likes this.
  9. hogfiddles

    hogfiddles XJ-Wizard, Host-Central NY Carb Clinic Moderator Premium Member

    Messages:
    14,809
    Likes Received:
    5,140
    Trophy Points:
    113
    Location:
    near utica, new york
    Yes, the box is there, but you had to scroll down below where you type in the code. Also, once you’re in, you can’t go back to that page until either your ‘cookie’ expires, or you clear the cache, or your timed-out.

    I also made a post in the Hangout Lounge……..I didn’t see Sno’s announcement here, til just now.
     
  10. Dave in Ireland

    Dave in Ireland Well-Known Member

    Messages:
    586
    Likes Received:
    330
    Trophy Points:
    63
    Location:
    Ireland
    The 30-day extension is fine by me. It was rapidly a pain in the arse having to sign in every time.
     
    Franz and Huntchuks like this.
  11. chacal

    chacal Moderator Moderator Supporting Vendor Premium Member

    Messages:
    9,046
    Likes Received:
    1,918
    Trophy Points:
    113
    Location:
    The room where it happened
    Let me just add that it was me who brought this issue to SnoSheriff's attention, because although this site (and probably all other forums) have always had "spam" accounts ("Date Pretty Girls Here" links, etc.), the last batch of these (starting a couple of months ago) were from registered user accounts....meaning, someone wasn't just doing drive-by spamming, they were actively hijacking already-existing accounts (username, passwords, and e-mail addreses, etc.) ----which is an entirely more serious type of problem.

    Probably some of you who got hijacked don't even know it happened, as I would kill the thread / "ghost account" as soon as they popped up.

    Although the 2-step authentication (every time you log in, or, as Hogfiddles points out, every 30-days if you decide to "stay logged in" to your account once you sign on) is something new and different, it's easy enough to get used to and it should all but eliminate this type of problem.
     
    Timbox and Roast644 like this.
  12. Roast644

    Roast644 Well-Known Member

    Messages:
    458
    Likes Received:
    431
    Trophy Points:
    63
    Location:
    WASHINGTON
    Of course this leaves only one obvious issue. Where do I go now to "Date Pretty Girls"??
     
  13. hogfiddles

    hogfiddles XJ-Wizard, Host-Central NY Carb Clinic Moderator Premium Member

    Messages:
    14,809
    Likes Received:
    5,140
    Trophy Points:
    113
    Location:
    near utica, new york
    Ahem, cough cough..... AND MEEEE... cough cough.... from the little scrawny kid in the back row frantically waving his hand and jumping up and down——
     
  14. chacal

    chacal Moderator Moderator Supporting Vendor Premium Member

    Messages:
    9,046
    Likes Received:
    1,918
    Trophy Points:
    113
    Location:
    The room where it happened
    And Dave did too! In fact he probably beat me to it!! (but it was a photo-finish). Sorry about that Dave, I thought you were just indicating you had to go to the bathroom.
     
    Oblivion and hogfiddles like this.
  15. chacal

    chacal Moderator Moderator Supporting Vendor Premium Member

    Messages:
    9,046
    Likes Received:
    1,918
    Trophy Points:
    113
    Location:
    The room where it happened
     
  16. minimuttly

    minimuttly Active Member

    Messages:
    126
    Likes Received:
    45
    Trophy Points:
    28
    Location:
    UK
    Hi, I'm new to this forum, well my new me is new to this forum...
    2 factor authentication would not email me with a password, so I've temporarily given up on it - not a bad thing maybe not posting, since much of what I post is drivel anyway, but, it means I can't open up pics, and that is a shame I think.
    Anyway @SnoSheriff , if you have any suggestions how to fix the emailing code issue I'm all ears, then we can delete me, the new, or second minimuttly if you will.
     
  17. Timbox

    Timbox Well-Known Member

    Messages:
    2,512
    Likes Received:
    849
    Trophy Points:
    113
    Location:
    Wisconsin, Tomah
    I understand the need for this, just helps out and cuts down some work for the admin people. I had to use the QR code as the email link is not working. Tried for three days with the email link, nothing in the inbox or spam folder for me. The QR code worked right away, though, so that is good news. Good-looking out for the forum to keep it safe and secure. I thank you guys for keeping up with the times.
     
  18. hogfiddles

    hogfiddles XJ-Wizard, Host-Central NY Carb Clinic Moderator Premium Member

    Messages:
    14,809
    Likes Received:
    5,140
    Trophy Points:
    113
    Location:
    near utica, new york
    Possibly you originally used a different email address?
     
  19. Timbox

    Timbox Well-Known Member

    Messages:
    2,512
    Likes Received:
    849
    Trophy Points:
    113
    Location:
    Wisconsin, Tomah
    Just checked my setting, same as my login as far as I can tell. It is a yahoo account, so that might have something to do with it? I downloaded the QR app on my phone and will just have to use that.
     
  20. minimuttly

    minimuttly Active Member

    Messages:
    126
    Likes Received:
    45
    Trophy Points:
    28
    Location:
    UK
    email address was correct, this username uses a different one (because I expected the registration to crosscheck and throw it out if it found a duplicate).
     
  21. minimuttly

    minimuttly Active Member

    Messages:
    126
    Likes Received:
    45
    Trophy Points:
    28
    Location:
    UK
    like this exactly....
     
  22. hogfiddles

    hogfiddles XJ-Wizard, Host-Central NY Carb Clinic Moderator Premium Member

    Messages:
    14,809
    Likes Received:
    5,140
    Trophy Points:
    113
    Location:
    near utica, new york
    I guess we’ll have to see what Sno says when he checks in.....
     
    minimuttly likes this.
  23. Timbox

    Timbox Well-Known Member

    Messages:
    2,512
    Likes Received:
    849
    Trophy Points:
    113
    Location:
    Wisconsin, Tomah
    @hogfiddles, it is all good, that other app on my smartphone works just fine. I just hope others who might not be into smartphones or tech stuff are not left off the forum. That is all, we have a great group of folks here and just want them all to be able to get back on the form if they want.

    • I am good with the app, works very easy now that I have logged in and out a few times today. Just have to have app up and running when you log int, code changes ever few seconds, I like it.
     
  24. minimuttly

    minimuttly Active Member

    Messages:
    126
    Likes Received:
    45
    Trophy Points:
    28
    Location:
    UK
    yes, but if you don't have or use a smartphone, and your apple device is too old to upload a new operating system that will allow the app to work you are stuffed.
    if I hadn't had a second email address I would have walked away, pending creating a new email of course.
     
  25. SnoSheriff

    SnoSheriff Site Owner Staff Member Administrator

    Messages:
    20,740
    Likes Received:
    111
    Trophy Points:
    63
    Location:
    MB, CAN
    This is the checkbox:
    upload_2024-6-27_10-7-52.png
     
  26. SnoSheriff

    SnoSheriff Site Owner Staff Member Administrator

    Messages:
    20,740
    Likes Received:
    111
    Trophy Points:
    63
    Location:
    MB, CAN
    I don't know why you're not receiving the emails. I tested and it works for me.

    You guys can check your the email associated with your accounts here: https://www.xjbikes.com/forums/account/contact-details
    I guess you can change your email addy but I have not tested this. I see the following text warning: "If you change your email, you may need to reconfirm your account".

    For those who do not receive emails I suggest using the Google Authenticator app. It works on my Adroid phone for this site and many others.
     
    minimuttly, Timbox and Roast644 like this.
  27. Huntchuks

    Huntchuks Well-Known Member

    Messages:
    1,106
    Likes Received:
    488
    Trophy Points:
    83
    Location:
    East Rochester, NY
    I successfully changed my associated email address recently with no issues.
     
    SnoSheriff likes this.
  28. minimuttly

    minimuttly Active Member

    Messages:
    126
    Likes Received:
    45
    Trophy Points:
    28
    Location:
    UK
    maybe I should change it and change it back again?
     

Share This Page