BMWSportTouring BMWST DB
Previous Thread
Next Thread
Print Thread
Page 2 of 3 1 2 3
#757160 - 02/02/12 05:31 PM Re: BMW MOA Compromised? [Re: SageRider]  
Joined: Nov 2002
Posts: 717
99Roadster Offline
Member
99Roadster  Offline
Member

Joined: Nov 2002
Posts: 717
Ohio
Originally Posted By: SageRider
Originally Posted By: hopz
...
Changing P/W on the MOA site does not seem to be helpful.
...


Why not?


Your email address was compromised along with your password.


2007 R1200RT
1999 R1100RA
#757161 - 02/02/12 05:40 PM Re: BMW MOA Compromised? [Re: Mike O]  
Joined: Jul 2000
Posts: 10,375
Mike Offline
Administrator
Mike  Offline

Administrator
Member

Joined: Jul 2000
Posts: 10,375
Chicago area, IL, USA
Got it, too.

If I could also make a recommendation for folks here: We, of course, don't store any financial info since we're non-commercial, but I've seen some pretty weak passwords used here. It would be wise to make sure you have a strong password and that you are using something here other than the username/password combo that you use for websites that may have your financial information.

The dipsticks who are hacking successfully into websites like the MOA will probably eventually try it here.


Mike The Moderator
Born to be Mild
#757170 - 02/02/12 06:06 PM Re: BMW MOA Compromised? [Re: Mike O]  
Joined: Jun 2011
Posts: 213
Jaguar Offline
Member
Jaguar  Offline
Member

Joined: Jun 2011
Posts: 213
Palm Coast, Florida
Thanks for the heads up. It's been a while since I've been to MOA's website. I didn't receive the e-mail because all my info was out of date. E-mail address, phone number, model of bike, etc. I went in and changed my password and updated everything.


Russ
2007 R1200R
Florida

"Socialism is a philosophy of failure, the creed of ignorance, and the gospel of envy, its inherent virtue is the equal sharing of misery"
#757176 - 02/02/12 06:20 PM Re: BMW MOA Compromised? [Re: 99Roadster]  
Joined: Jan 2002
Posts: 8,287
SageRider Offline
Member
SageRider  Offline
Member

Joined: Jan 2002
Posts: 8,287
Minden, Nevada
Originally Posted By: 99Roadster
Originally Posted By: SageRider
Originally Posted By: hopz
...
Changing P/W on the MOA site does not seem to be helpful.
...


Why not?


Your email address was compromised along with your password.

Changing the board password (to a complex and unique password) does not address the email related issues, but does address the compromised board user name and password issue. Hopefully BMWMOA will also implement an account lockout policy (Account locks after 3-5 incorrect login attempts within an hour or something similar).


Michael
2010 Unrally IX Sierra Adventures Co-Chair
KE6GYC 2M/440
'12 F800-GS Trophy: (dearly departed)
'06 R1200-RT, Piedmont RED! (dearly departed)
'99 R1100-RT (dearly departed)
Minden, Nevada
#757188 - 02/02/12 07:50 PM Re: BMW MOA Compromised? [Re: Mike O]  
Joined: Aug 2005
Posts: 3,791
hopz Offline
Member
hopz  Offline
Member

Joined: Aug 2005
Posts: 3,791
Colorado Springs, CO
Michael, and others, what I was saying was that changing your password on the MOA site was good, now that the horses are out of the barn. It will not do anything for the places on the web where you are using the same password since the scofflaws already have it. If they wanted to get into your account on MOA they would be able to read your posts and not much else... just my first thoughts.
If you have others I am happy to learn from all.


<---- (That's not it) 2014 R1200RT-W

“As Woody Guthrie says, ‘Left wing, right wing, chicken wing.’I keep my mind open. Whatever you believe, it’s all a mystery in the end.”
#757189 - 02/02/12 07:50 PM Re: BMW MOA Compromised? [Re: SageRider]  
Joined: Jul 2000
Posts: 17,739
Joe Frickin' Friday Offline
Administrator
Joe Frickin' Friday  Offline

Administrator
Member

Joined: Jul 2000
Posts: 17,739
Ann Arbor, MI (USA)
Originally Posted By: SageRider
Changing the board password (to a complex and unique password)...


Re: password strength, an interesting perspective here. Summary: you can make a password that's easy for you to remember but extremely hard for computers to guess. all you need to do is string together four common words in an unusual phrase, ideally something you can visualize. No caps, no weird characters, no numbers, just four lower-case words.

#757273 - 02/03/12 01:54 AM Re: BMW MOA Compromised? [Re: hopz]  
Joined: Jan 2002
Posts: 8,287
SageRider Offline
Member
SageRider  Offline
Member

Joined: Jan 2002
Posts: 8,287
Minden, Nevada
Hopz, the same BMWMOA Forum account can be used on the BMWMOA store with a stolen credit card number...
But yes, a major risk is if one uses the same password in multiple places.


Michael
2010 Unrally IX Sierra Adventures Co-Chair
KE6GYC 2M/440
'12 F800-GS Trophy: (dearly departed)
'06 R1200-RT, Piedmont RED! (dearly departed)
'99 R1100-RT (dearly departed)
Minden, Nevada
#757275 - 02/03/12 01:59 AM Re: BMW MOA Compromised? [Re: Joe Frickin' Friday]  
Joined: Jan 2002
Posts: 8,287
SageRider Offline
Member
SageRider  Offline
Member

Joined: Jan 2002
Posts: 8,287
Minden, Nevada
JFF, another perspective is one I encountered recently:
One only needs to use complex passwords they can remember on sites they constantly access such as online banking, email, BMWST, etc.
For the remainder, a complex password can be used, but there is no need to remember. Simply use the forgot password function on the site logon screen. This will typically either email the password to you or reset the password and allow you to set a new password.


Michael
2010 Unrally IX Sierra Adventures Co-Chair
KE6GYC 2M/440
'12 F800-GS Trophy: (dearly departed)
'06 R1200-RT, Piedmont RED! (dearly departed)
'99 R1100-RT (dearly departed)
Minden, Nevada
#757332 - 02/03/12 06:28 AM Re: BMW MOA Compromised? [Re: SageRider]  
Joined: Feb 2012
Posts: 14
tvguy Offline
Newer Member
tvguy  Offline
Newer Member

Joined: Feb 2012
Posts: 14
Las Vegas, NV
I to received the same email. I went out and changed the basic info. BUT the real problem I am seeing on my own motorcycle site is the bogus people from someplace in Africa and surrounding areas joining the site and then trying to phish info from the members.

Like this site you really have to look at the people trying to join. My site has 3 Q's you have to answer and then I look at the IP address to see what part of the country you are from. Its good to have great admins that keep and eye on this site.


'11 R120RT - "Midnight Express"
'02 K1200LTE - "The Silver Bullet" SOLD
Chief Cat Herder
#757340 - 02/03/12 09:32 AM Re: BMW MOA Compromised? [Re: tvguy]  
Joined: Jul 2010
Posts: 110
Robus Offline
Member
Robus  Offline
Member

Joined: Jul 2010
Posts: 110
Chicagoland
Originally Posted By: tvguy
I to received the same email. I went out and changed the basic info. BUT the real problem I am seeing on my own motorcycle site is the bogus people from someplace in Africa and surrounding areas joining the site and then trying to phish info from the members.

Like this site you really have to look at the people trying to join. My site has 3 Q's you have to answer and then I look at the IP address to see what part of the country you are from. Its good to have great admins that keep and eye on this site.


BMW MOA is overzealous I'd say. I tried to register a year and a half ago when I bought the RT. Never was able to activate. Contacted the site master. No reply.

Page 2 of 3 1 2 3

Powered by UBB.threads™ PHP Forum Software 7.6.0
Page Time: 0.010s Queries: 15 (0.003s) Memory: 2.8081 MB (Peak: 2.9985 MB) Zlib enabled. Server Time: 2018-11-17 01:18:50 UTC