Forum account disappeare(deleted ?) after ~ 30 minutes after creation

Message boards : Questions and problems : Forum account disappeare(deleted ?) after ~ 30 minutes after creation
Message board moderation

To post messages, you must log in.

AuthorMessage
[CSF] Aleksey Belkov

Send message
Joined: 3 Mar 23
Posts: 14
Russia
Message 111163 - Posted: 3 Mar 2023, 22:48:43 UTC
Last modified: 3 Mar 2023, 22:56:22 UTC

Good day
Today I create account on this forum, but after some time(~30-50 min.),I found out that when I visit forum again, I am not logged in.
When I try to log in, I get message:
"No account with email address silmor.******** exists. Please go back and try again."

To put it mildly, I was very surprised, but I still allowed the possibility of some kind of problem at the forum level, and recreated account with the same data.
When checked the account after ~ 50 minutes, I found that it "disappeared" again.

I asking forum administrators to check what is the reason for this strange behaviour or someone's actions(don't want to sound paranoid, but still).

To confirm that I have already created accounts, and all this is not my sick fantasy, below are screenshots from my account's profile page.

These two account(that already disappeared) was created about 21:21 UTC 03.03.2023:

And 22:13 UTC 03.03.2023:

And this account(from witch I writing now) was created about 22:47 UTC 03.03.2023:
ID: 111163 · Report as offensive
Profile Jord
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 15477
Netherlands
Message 111170 - Posted: 5 Mar 2023, 7:45:31 UTC - in response to Message 111163.  

I'm not sure what is going on, but I forwarded your thread to the person with database access.
ID: 111170 · Report as offensive
Profile Jord
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 15477
Netherlands
Message 111173 - Posted: 5 Mar 2023, 9:13:03 UTC

One option is that the email account(s) used are compromised, that someone else has access to it/them. I'm not sure if we send out an email on account creation, but someone who has access to your email account could use it to get a temporary login link on the forums and delete the account that way, but that leaves emails in the email account (which of course can also be deleted by the other person).

We have disabled account creation on the forums for now.
ID: 111173 · Report as offensive
[CSF] Aleksey Belkov

Send message
Joined: 3 Mar 23
Posts: 14
Russia
Message 111175 - Posted: 5 Mar 2023, 14:19:34 UTC - in response to Message 111173.  

Good day, Jord
The possibility of compromising E-mail can be excluded for the following reasons:
1) There is no e-mail notification when forum account is created. E-mail verification occur only if you click the "Create" button in Community section of account settings page to create "Profile".
2) 2FA(OTP) is used to access my E-mail accounts.
3) I also audited access logs of E-mail account - all active sessions are only from trusted devices controlled by me.

Also about the verification of E-mail:
- The confirmation link in e-mail message contains http scheme instead of https.
This should be corrected.
- These e-mail messages sended form server isaac.ssl.berkeley.edu not protected by any of known methods:
There is no DKIM signing, no SPF and (active) DMARC policy for domain boinc.berkeley.edu, from which these messages are send(boincadm@boinc.berkeley.edu).
So, someone can relatively easy send spoof messages on behalf of boinc.berkeley.edu.
https://www.hardenize.com/report/boinc.berkeley.edu/1677879353#email_spf
https://www.hardenize.com/report/boinc.berkeley.edu/1677879353#email_dmarc
ID: 111175 · Report as offensive
[CSF] Aleksey Belkov

Send message
Joined: 3 Mar 23
Posts: 14
Russia
Message 111380 - Posted: 22 Mar 2023, 16:30:45 UTC - in response to Message 111170.  

I'm not sure what is going on, but I forwarded your thread to the person with database access.

Good day, Jord
Is there any news about that problem?
ID: 111380 · Report as offensive

Message boards : Questions and problems : Forum account disappeare(deleted ?) after ~ 30 minutes after creation

Copyright © 2024 University of California.
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation.