| We believe we've fixed the majority of login issues. Terribly sorry it took so long to get this under control, but hopefully we can move forward from here. If your IP is changing frequently though, you'll still get logged out on each subsequent change. Also, we've received information that the attacker who has hit MAL before may have compromised other anime sites as well. If you've reused usernames, e-mail addresses, and passwords on these sites, it is likely that the attacker has them, and can log in as you if he or she wants. We highly recommend that you change your password as soon as possible, to ensure that your profile and data aren't compromised. Starting on September 20, we will no longer be able to restore profiles for users who have not changed their password since August 22. It takes a lot of work to restore hacked profiles, and we would rather put that effort into security improvements that can benefit everyone. Thanks everyone! |
| I'll change my password Soon... |
| I can log-in, even though I get randomly logged out at times, which is fine I suppose. But the only thing that doesn't let me log in is when I check the "Stay logged in" box. No matter how many tries. |
 |
| I'm still kinda getting logged out sometimes...even though I'm using the same computer without changing. |
 |
| Will do. Thank you for your advice & your hard work. |
| I like anime. |
PrOxAnto said: It hasn't been working for some time now and yes, it won't let you log in at all.But the only thing that doesn't let me log in is when I check the "Stay logged in" box. No matter how many tries. Technically you'll remain logged in for as long as your IP remains the same though. |
DrsMadScientist said: This is why you always copy what you wrote so that even if you lose them, you can still paste them back in.I was logged out few minutes ago, and I just finished the review...all to waste. Thanks for all the hard works though. |
|
DrsMadScientist said: I was logged out few minutes ago, and I just finished the review...all to waste. Thanks for all the hard works though. If you backspaced to the last page the text should still be there. |
|
| Pls keep us safe. |
 |
| Just changed my pw, interestingly I got DC immediately after that. |
| Stop the sequels high-ranking stupidity. Group franchises in Top Anime page. Because Gintama is just "one" anime and not 5. |
| Thank you. How will I know if my user is hacked or not? |
 |
| Thank you for your extremely hard work. |
I ♥ Two Syaorans from Tsubasa RESERVoir CHRoNiCLE and TRC!!! |
| Can you name the other anime sites that got attacked? The only big anime site I'm active on is MAL, so now I dunno should I change my pw or not. Thanks for the great work tho. :) |
 |
| hopefully security will get better from now on :P |
 |
| Thank you! |
| Password changed and thanks. Also could you guys post a list of what other sites were hit so we know. |
 |
| Yey! Thank you sir!!! xD |
 |
| Hallelujah, I've gone 45 minutes without a forced log out! Hopefully that settles it then, changed my pw as well. Any news on when BBCodes will be up again? |
 |
| Thanks for the hardwork! Changed my password just now. Really great that the logging out issue is fixed. :D |
 |
| Thanks, thats great. Still it sux that changing IP = loging out. Are there any chances it will soon be back as it was? If yes - when? If no - why? |
| I logged out after 15 minutes... ok, that's a progress, at least isn't every 2 minutes xD! I really appreciate all your effort.... but the problem still remains :( |
 100% of all dead people have never complained about being dead. So I guess it isnt that bad. |
| AT LONG LAST |
 |
agaffe said: Urizithar said: Thanks, thats great. Still it sux that changing IP = loging out. Are there any chances it will soon be back as it was? If yes - when? If no - why? It probably won't be for a while. The TL;DR is that they went to to this system for security reasons. http://myanimelist.net/forum/?topicid=613857 That's old news. And not to mention the fact that site went down WITH ip changing thingy on. Are DDoS attacks made with created accounts? Is it viable to DDoS attack by creating accounts? How about protection for creating accounts? (captcha, questions, etc) If attacks made without creating accounts, then why log-in issues? If attacks made without creating accounts, then why ip-change sensivity thingy? There are lots of unanswered questions. |
| Open to chat about any storytelling related subject as long as it's clever and respectful. Myanimelist |
| Haven't been logged out in a while. |
an egomaniac and a fool |
| Yay I haven't been logged out for an hour or so. *happy dance* |
| So basically if someone doesn't Read this Site Update and does not change their password (Between Aug 22 - Sept 20)won't be able to have their profile Restored? Sorry If I sound unsure since there are 1M + Members that probably won't get the memo. |
 Behold of my awesomeness~ controversial and/or sensitive topics likely devolve into the same repetitive, derogatory, abusive, and harassing comments can no longer be posted. But my feels. |
| This was the most annoying bug ever in MAL, so glad its fixed. Although i do have a question, if you can't tick the box that enables you to stay logged in, doesn't that mean eventually when you go idle, it will log you out, or close your browser? Essentially i could tick that box on my computer and i could stay logged in forever. Also on another note, when is the BBcode going to be fixed for sigs and such? |
  |
koleare said: PrOxAnto said: It hasn't been working for some time nowBut the only thing that doesn't let me log in is when I check the "Stay logged in" box. No matter how many tries. That's not true, I've used it up until the hacking incidents and it never gave me a single problem. Saying it wasn't ever working perfectly would maybe be true (not for me), but saying it just hasn't been working 'for some time now' (implying more than just since the hacker) isn't accurate. |
 |
| Yay! Finally. Thx for your hard work though!!!! |
| I'm still getting forced log-out though. Or is it because I'm using dial-up? |
 Kickstarter for Rokujouma is fully funded. Good work everyone. Lets wait for the result of our hard work together. |
| It got fixed . Thank you for your hard work. |
Rapha_Lamperouge said: Just changed my pw, interestingly I got DC immediately after that. Same here but it hasn't happened again since then. |
| Thanks a lot ^_^ |
| Thank you! =) |
 |
| Thanks, logging off issue seems resolved so far. |
EratiKSep 13, 2013 9:04 AM
 |
| Thanks, now i'm can Stay Logged in. Great for your hardwork. |
| Signature removed. Please follow the signature rules, as defined in the Site & Forum Guidelines. |
| I'm glad I changed my password after the 2nd attack. |
| Changing my password now. |
Prequel said: No way.Are DDoS attacks made with created accounts? Prequel said: No.Is it viable to DDoS attack by creating accounts? Prequel said: There already is a captcha (the one from Google even).How about protection for creating accounts? (captcha, questions, etc) Prequel said: Incompatibilities.If attacks made without creating accounts, then why log-in issues? Prequel said: The same individual who attacked MAL now, attacked it two years ago as well. He could take accounts without any problem. Now he can't, because there's an ip block.If attacks made without creating accounts, then why ip-change sensivity thingy? There you go. TallonKarrde23 said: Well, since it hasn't been worked out for me at all, and all posts I read about it until now were having the same problem, I simply went on and thought it wasn't working for everyone.koleare said: PrOxAnto said: It hasn't been working for some time nowBut the only thing that doesn't let me log in is when I check the "Stay logged in" box. No matter how many tries. That's not true, I've used it up until the hacking incidents and it never gave me a single problem. Saying it wasn't ever working perfectly would maybe be true (not for me), but saying it just hasn't been working 'for some time now' (implying more than just since the hacker) isn't accurate. |
koleare said: Prequel said: The same individual who attacked MAL now, attacked it two years ago as well. He could take accounts without any problem. Now he can't, because there's an ip block.If attacks made without creating accounts, then why ip-change sensivity thingy? First of all, thanks for answering. Now, I don't understand how forced log-outs can be related to IP block to a malicious person. It must be possible to block an IP without applying IP sensivity to whole site. Why exactly do we have to re-login when we change our IPs? |
| Open to chat about any storytelling related subject as long as it's clever and respectful. Myanimelist |
Prequel said: The IP block isn't for the malicious person. Well, blocking isn't really the best word either. Mostly and in simpler terms, your IP is used in the authentication process and session, so when your IP changes, the previous session isn't valid anymore and you have to authenticate/log in again. This pretty much prevents your session from being hijacked (http://en.wikipedia.org/wiki/Session_hijacking) like it happened two years ago.Now, I don't understand how forced log-outs can be related to IP block to a malicious person. It must be possible to block an IP without applying IP sensivity to whole site. Why exactly do we have to re-login when we change our IPs? Ah, and the forced log outs aren't related to the IPs. As I said, those were incompatibilities with the new security updates which fight DDoSes. |
koleareSep 13, 2013 2:36 AM
More topics from this board
» [Challenge] You Should Read This Manga 2024 ( 1 2 3 4 5 )Kineta - Feb 23 |
201 |
by EverySportsAnime
»»
5 hours ago |
|
» New Site Update: Peak Anime đź—» ( 1 2 3 4 5 )Kineta - Mar 31 |
213 |
by Destinesia
»»
8 hours ago |
|
» Heavenly Easter Delusion: Devil and Dolce ( 1 2 3 4 5 ... Last Page )Kineta - Mar 27 |
3340 |
by Terra_strong
»»
Apr 17, 8:26 PM |
|
» MAL Game "Fantasy Anime League" Opens for Spring 2024 ( 1 2 3 )Kineta - Mar 17 |
144 |
by The_real_maomao
»»
Apr 9, 4:26 PM |
|
» English Titles Added to Desktop; Moving Towards a Romanized/English Toggle ( 1 2 3 )Kineta - Feb 12, 2020 |
121 |
by Vaturna
»»
Apr 4, 5:31 AM |