Brutkey

wakest ⁂ FOSDEM
@liaizon@social.wake.st

@jerry@infosec.exchange @stux@mstdn.social ah yes I just found another one https://mastodon.social/@imPooYa was registered in 2018! So they are taking over old accounts!

wakest ⁂ FOSDEM
@liaizon@social.wake.st

So I guess the question now is HOW they are taking over old accounts. Are these accounts that all had weak passwords? But I thought old accounts on m.s ask you to verify a email code if they haven't been logged into in a long time

Eugen Rochko
@Gargron@mastodon.social

@liaizon@social.wake.st I think we’ve had to undo that feature because of how many people were getting locked out and complaining. Now it just sends an email notifying about a new login to the account owner.