Username: Password:   Forgot your password?
 
Forums
» View Categories » Extermination Station » Change your password signup message...
Previous 30
Page of 1 Next 30

Member:418
Posts:174
Joined:1-7-2006
Seen:7-10-2009
Mar 12,`08 10:02pm | Quote |

Go to the sign-up page, past the 13 years or older part, see the form, don't enter anything and click Continue!
You will see a box popup saying 'Confirm password change'.
For me it lists my accounts that I'm signed up with on DD. I have tried using it to actually change my password, I don't believe it works. It is still damn weird though.

 
Member:418
Posts:174
Joined:1-7-2006
Seen:7-10-2009
Mar 12,`08 10:36pm | Quote |

Hmm, just thinking this one over... Why would it list my accounts even though I'm not logged in? Security flaw much?

 
Member:1,650
Posts:5,251
Joined:2-9-2006
Seen:11-15-2009
Mar 13,`08 12:08am | Quote |

I know DD has a ton of security flaws, which is why most people should use a password here that they don't use anywhere else.

However, to change it you still have to contact volte directly. DD has not had a password changing system that I know of for a long time now, and goes up there with several other really simple features that most websites have.

Expect it to never be fixed.

 
Member:47,178
Posts:130
Joined:1-4-2008
Seen:4-15-2008
Mar 13,`08 9:54pm | Quote |

I'm not mentioning details, but I found a method in which I can get any users password in plain text sent right to my email. Combine this with the fact that the security flaws I found here well over a month and a half ago haven't been fixed. Anyone with knowledge in PHP can fix these, to be honest I worry about the people that use the same password here as they do for their Email, ISP, and anything else important to them, as it would only take someone a few minutes to get everything.

Things left unfixed:

Multiple XSS flaws [same way DD was hacked in the past]
Avatar Forum Crash [exactly what it sounds like]
Password Stealing [Get anyones password sent to your email]

This lack of security by the operators of this site [people at platinum] is going to run this site further into the ground, for the love of all things good please please fix them, contact me if you have problems I gave you source to fix them last time and I would gladly do it again, but none of the operators have taken the five minutes to place them in.



Vote Lefarce as the TD overlord, he will deliver hats instead of promises to the good people of Top Drawer.
 
Member:418
Posts:174
Joined:1-7-2006
Seen:7-10-2009
Mar 14,`08 1:52am | Quote |

Wow, scary o.O


Previous 30
Page of 1 Next 30

 

Not Registered?
Signup for a FREE Account!


Registered users can:
Comment on comics!
Create their own comics!
Vote in polls and contests!
Use the forums!
   Latest News
   DD Cam (Now Featuring: DDBook)