Hello,
thank you all for joining the "AstroBin Beta Testers" group.
Being part of this group you help AstroBin in two ways:
- Get early access to new feature that require a slow roll-out
- Provide feedback, opinions, and ideas
Today I want to pick your brains because there's a new problem on the horizon.
As you may know, AstroBin is the target of a little spamming. Nothing serious, and I can manage by myself with moderation, but usually I have to mark as spam a few images and a few forum posts every day.
This is achieved by a moderation queue: users who are on a free account and who haven't had some content approved in the past, go thru the moderation queue.
Lately, spammers have learned a new trick: they have broken into the accounts of users with weak passwords (like "password123" or something) to post on their behalf. So far we've been lucky, and this content always ended up in the moderation queue, but if I don't take action, soon a spammer will break into the account of some active astrophotographer with a weak password, and start posting a lot of spam on AstroBin.
This is highly indesirable, because often spam includes pornography.
To stop this, I want to enforce a "minimum password strength" requirement on AstroBin.
This will be done in two phases:
- New accounts get the minimum password strength requirement upon signing up
- Existing accounts are asked to check the strength of their password, and forced to change it if it doesn't meet the requirements (I need to ask because AstroBin doesn't know your passwords, they are encrypted)
Now, I want you to have strong passwords, but I don't want to be overly annoying.
Please see the poll above and SELECT all the password requirements that you think are acceptable. DO NOT SELECT the ones that you think are annoying and I shouldn't add them.
If you have any questions, please ask away.
Thank you!
Salvatore
thank you all for joining the "AstroBin Beta Testers" group.
Being part of this group you help AstroBin in two ways:
- Get early access to new feature that require a slow roll-out
- Provide feedback, opinions, and ideas
Today I want to pick your brains because there's a new problem on the horizon.
As you may know, AstroBin is the target of a little spamming. Nothing serious, and I can manage by myself with moderation, but usually I have to mark as spam a few images and a few forum posts every day.
This is achieved by a moderation queue: users who are on a free account and who haven't had some content approved in the past, go thru the moderation queue.
Lately, spammers have learned a new trick: they have broken into the accounts of users with weak passwords (like "password123" or something) to post on their behalf. So far we've been lucky, and this content always ended up in the moderation queue, but if I don't take action, soon a spammer will break into the account of some active astrophotographer with a weak password, and start posting a lot of spam on AstroBin.
This is highly indesirable, because often spam includes pornography.
To stop this, I want to enforce a "minimum password strength" requirement on AstroBin.
This will be done in two phases:
- New accounts get the minimum password strength requirement upon signing up
- Existing accounts are asked to check the strength of their password, and forced to change it if it doesn't meet the requirements (I need to ask because AstroBin doesn't know your passwords, they are encrypted)
Now, I want you to have strong passwords, but I don't want to be overly annoying.
Please see the poll above and SELECT all the password requirements that you think are acceptable. DO NOT SELECT the ones that you think are annoying and I shouldn't add them.
If you have any questions, please ask away.
Thank you!
Salvatore
