Trying to contact Joe Offer (password reset)

Subject: Trying to contact Joe Offer
From: GUEST,Guest Johnny J
Date: 30 Nov 22 - 06:07 AM

Hi Joe,

I wasn't sure whether to post this below the line or not but I usually just talk about music here.

Apparently, my password on this site has been compromised and I've been advised by my Anti Virus people to change same.... It's genuine as I checked my status directly through them.

Anyway, I e-mailed you a couple of weeks ago as is the procedure(I believe) to arrange to have it changed but you've not replied so far.

I've not logged on again with the old password, just in case, although any damage has probably been done by now anyway. My other sites etc seem secure.

Could you please assist me in getting back on site?

Subject: RE: Trying to contact Joe Offer
From: Stilly River Sage
Date: 30 Nov 22 - 10:36 AM

Your password on Mudcat won't endanger your computer, though your antivirus software may be telling you Mudcat isn't secure. Some of the pages here will occasionally show up without the "s" (in "https:"). Refresh the page and it will usually display properly.

Since Mudcat doesn't have images to load there is an extremely small possibility of any malware hitching a ride.

Joe can be reached at [e-mail]

Subject: RE: Trying to contact Joe Offer
From: Joe Offer
Date: 30 Nov 22 - 01:25 PM

What I said to John:

I hope this email address still works for you. I searched my email under your aol address, and couldn't find a message from you.
There are a lot of antivirus programs that are sending people warnings about their Mudcat password being compromised, and some people get all out of sorts about it. One man even left Mudcat because he didn't like the idea that I had to change his password on his request and would therefore know it. Mudcat passwords are not the same as bank passwords, and therefore do not need to have irontight security. Your Mudcat password is like the lock on a bathroom door, not like the combination lock on a bank vault. Your Mudcat password simply identifies you so you can send personal messages, identify yourself with credibility on posts, and use certain other services that need to identify you. But Mudcat is a place for exchanging words, not bank information and not binary information that could carry malware. We allow users to submit text, and only text - that keeps us simple, safe, and reasonably secure.
I'm glad to change your password if you want me to, but it's not likely to make any difference and then you'll have yet another password to memorize. If you want yours changed, email me the new password you'd like. If you can, email me from the email address you used when you became a Mudcatter. If you no longer have that address, at least tell me what it was. Otherwise, I may need to ask you a few questions to ensure it's you. We use a human form of two-step verification. That's why people have to go through me to join Mudcat or to change their registration information. The guy who left Mudcat thought it better to trust a machine to change his password, not a human.

Subject: RE: Trying to contact Joe Offer (password reset)
From: Helen
Date: 30 Nov 22 - 02:03 PM

Thanks for the explanation, Joe.

I did change my password this week, coincidentally, but only because I realised what a silly, simple password it was because I created it over 25 years ago and it was time for a more complicated one.

I can highly recommend Joe's fast and efficient service, and always with a virtual smile!

Thanks heaps, Joe.

Subject: RE: Trying to contact Joe Offer (password reset)
From: DaveRo
Date: 30 Nov 22 - 02:52 PM

I suspect that some antivirus programs are simply checking passwords against a list of known compromised passwords, probably the one at 'have I been pawned' (HIBP).
https://haveibeenpwned.com/Passwords

It means that password has appeared in a data breach. I doesn't mean anybody knows that password goes with a particular email address or that it's used by Mudcat. Unless Mudcat itself has been breached - which it might have been - but I doubt it because, well, who would bother?

If most Mudcat passwords are like mine - 4 letters and it's in the dictionary - then I expect they're in the HIBP database. Mine is - 176 times!

AV programs like justifying their existance by finding something to warn you about.

But - serious point - don't use the same password on several sites.

Subject: RE: Trying to contact Joe Offer (password reset)
From: Helen
Date: 30 Nov 22 - 03:13 PM

Good points, DaveRo.

And don't use the word "password" as your password. :-) More common than you would think, apparently.

Subject: RE: Trying to contact Joe Offer (password reset)
From: Jeri
Date: 15 Dec 22 - 11:21 AM

I believe some anti-malware programs simply don't like the way Mudcat does things. Passwords are relatively simple - no 37 digits with upper and lower case, number and symbol. I seem to remember I got a notice once, which I ignored., with no subsequent problems.

Subject: RE: Trying to contact Joe Offer (password reset)
From: GUEST,mag
Date: 05 May 25 - 06:00 PM

trying to rejoin, now that i have upgraded my 'puter.

nada.
help.

Hi, MAG - email me. [e-mail]

Subject: RE: Trying to contact Joe Offer (password reset)
From: Stilly River Sage
Date: 05 May 25 - 06:02 PM

Good to see you back, mag! Take a stroll over to the Declutter thread when you get back in. I'd love to hear if you're still gardening and taking photos, etc.