Someone changed my IDPA email

[1KPerDay]

Anyone else get a notification from "Wordpress" IDPA that your email had been changed? I logged in directly to the site and someone had changed it. I tried to reset password but that link is nonfunctional.

Super cool.

 

[1KPerDay]

Been in touch with Joyce. Apparently someone submitted a help desk request that they couldn't log in and she assumed it was me.

Common cyber criminal technique but she insists there's no funny business going on. I changed my password.

 

[ATLDave]

"no funny business" - Why would someone want help logging in to your account for "no funny business"? Does she even understand the concept of cybercrime?

 

[egd]

It's ok. They sent her a picture with their vest on so she knew they were the good guys.

 

[1KPerDay]

"no funny business" - Why would someone want help logging in to your account for "no funny business"? Does she even understand the concept of cybercrime?

Apparently not. I tried to explain to her that this is a common hacker technique. "Can't log in, please change the email in my profile." Then log in, change the password, and lock the original owner out of the account.

I'm afraid it fell on deaf ears. Trying to imagine what havoc someone could wreak with my IDPA account.... maybe they can bump me to Master. LOL


Hopefully she just got confused when another member with my same name forgot his password and she clicked the wrong line in the member list.

If I start getting counterfeit iPads charged on my Nigerian credit cards we'll know for sure.

 

[ATLDave]

Person who doesn't understand cybercrime/hacking: Oh, no, there's nothing to worry about from the fact that someone other than you asked for a password reset email be sent to a new email address never previously used with your account. All is well!

 

[1KPerDay]

Dumb thing is I wouldn't have even known about it but I got an automated email to the old address (mine, the right one) saying "we updated your email address per your request."
The new email address did have my first name in it so I'm crossing my fingers that it's an honest mistake.

Seriously though... admins just need to assume everyone is hacking. Make the user use the reset password link to log in. Make the user update his/her own email address AFTER successful login. They can't do that? Sorry... create a new account if you want.

 

[ATLDave]

I am shocked, shocked to hear any information suggesting that the people running IDPA are old and out of touch with the modern world. Just shocking, really.

 

[1KPerDay]

Well I was logging on to AOL via Altavista on a dial up...

 

[waktasz]

Are you saying that Joyce actually answers help desk\IT service calls and handles them herself?

 

[1KPerDay]

Apparently

 

[Dudedog]

If I start getting counterfeit iPads charged on my Nigerian credit cards we'll know for sure.

Glad you got that email fixed right away, there is a Nigerian Prince who shoots IDPA that wants to leave you his fortune and has been attempting to contact you