Wrestling Forum banner

There is no reason to have such complex passwords on a non HTTPS site: Change them.

2K views 19 replies 13 participants last post by  Administrator 
#1 ·
Lets look in the mirror and be honest: We are just a bunch of fans that hate/praise our favorite/hated wrestler. There is no money here, there is no personal details, etc. If our account gets hacked, SO WHAT? For sites talking about dumb shit like this, you shouldn't even use your real email/account. Just go to http://10minutemail.com (it automatically redirects to HTTPS, more on that in a second), make a dumb email register and done.

Even if you make a account here, it is still insecure; A site where traffic is moved without any verification (such as a certificate) can be sniffed pretty easy with MITM attacks and such. So making a complex (10 characters is not complex nowaways; Security standards ask for min 12) password is stupid. Make it a recommendation but allow the users to put whatever they want at their own risk. That or change the entire site to HTTPS, which isn't that difficult.
 
#2 ·
I agree that the password complexity is dumb but VerticalScope doesn't care what any of us think. You're just going to have to live with it just like we have to live with the fact that they killed off some of our activity on this forum if you've noticed. Could be a New York Times best seller if they wrote a book on how to kill forum activity 101.
 
#8 ·
The current password thing is already too complex, it's hard to remember sophisticated passwords for a site that rarely requires me to re-login, plus I normally don't use such complex passwords for non-essential sites. The requirements are more complicated than what gmail or most game platforms require, and I just find it very unnecessary.
 
#14 ·
Heya all,

Guys it is a few extra characters and should not be a big deal. Extra security is a good thing and members are getting back online as we update old emails and send resets to those locked out.

Just use Google Chrome Password manager and life will be good.
https://support.google.com/chrome/answer/95606?hl=en

Also make sure to keep your email address updated here:
http://www.wrestlingforum.com/profile.php?do=editpassword

Watch this and all will be ok:
http://www.youtube.com/watch?v=dw62C1MBKJc

Jeff M
 
#15 ·
I don't really care because this is a throw-away account and email with an intentionally guessable password but the other posters are right. If people want insecure passwords then that's their choice. The overkill requirements seem like an attempt to shift blame to users and change the subject.
 
#17 ·
Oh, and now VS wants to think this over. Classic.

Show this to your Manager. Show this to your Director. Show this to Rob.

Our user activity stats before and after you started this password shit. Notice the big decrease and it has been this way for weeks. Thanks for killing off some of our activity. It won't be the same for a long time.



 
#20 ·
Heya all,

Yeah the password reset killed traffic on a lot of sites. We are aware of it and trying to just move forward for the community.

The Mods and Admins have been super heros through all this and I asked the password reset crew to update WF tickets first ahead of others since I love ya all so much.

Feel free to rant on, I can take it. Not much we can do right now except head down and power through it.



Jeff M
 
This is an older thread, you may not receive a response, and could be reviving an old thread. Please consider creating a new thread.
Top