PLEASE READ: Forced logout and password reset

[SarahMumsnet]

Hello everyone,

Our apologies again for the stress and upset of the last week, and in particular the last 24 hours - and thanks for your patience and support in helping us deal with it.

Thanks to everyone who’s raised concerns about the strength of passwords on Mumsnet. We’ve now built new code which will oblige anyone logging in to create a new, complex password that conforms to higher security standards.

In the next hour, we’re going to force all users to be logged out. Then we'll change all users' passwords so they MUST reset their password to log back in. To make absolutely certain that everyone has a new, secure password, you’ll be logged out even if you’ve already changed your password in the last two days.

We’re sorry that this is the second mass password-reset in the space of a couple of days, but now we have code in place to strengthen security, we want to implement it as soon as possible.

Please don’t worry when you’re logged out: it’s MNHQ, not the hacker, behind it.

Thanks again
MNHQ

I guess the icon is hiding somewhere along with the prosecco one :) BeccaMumsnet - tech team are problem too busy to ask at the moment

@magimedi

I've done a reset by asking for the email link. And have logged in with new password.

There is no longer the yellow triangle warning on the log in page, but the yrl was OK

Hi magimedi - we've let Tech know about this and they're having a look, but they do think this is fine.

Thank you becca - sending loads of virtual gin your way.

It's still logging me in, only via FB, with an old user name. All my history is gone! Despite me resetting the password about twice, it doesn't recognise it.

just wanted to say I got everything sorted this afternoon , password and email both working fine - Kat you are ace, thank you for all the help!

I hope everything gets sorted soon.It must be a tremendous headache, I can't even imagine the implications...

anyway, keep up the good work, bug hugs and gin on the way

@Pullingpants

It's still logging me in, only via FB, with an old user name. All my history is gone! Despite me resetting the password about twice, it doesn't recognise it.

Hullo Pulling - what do you mean by all your history is gone? Do you mean your past posts?

nooooooo, not bug hugs!
BIG hugs!!!!

@ZingDramaQueenOfSheeba

nooooooo, not bug hugs! BIG hugs!!!!

No bug hugs?

ok, I might hug a ladybug. but that's it.

Glad to see folks back on form

On the other thread (hackergate 4) we are fretting about being unready for the uniformed visitors. Someone is having a worry about her hair dye, we need help.

and you missed the fact that I'm sending you gin.
ummm, well, what is a few extra bottles if you are already swimming in it, eh?!

Can anyone tell me why the bottom right of this page says "hosted by DSC"

Helllo everyone,
I've just reset my password :)
I thought I'd been kicked off when I tried logging in!

DSC apparently provide the content management system that MN use, OverScented (and host the site on their servers I think). Gawd, what with them and GoDaddy MN have made some unfortunately-named technology choices whilst we're in this hyper-jumpy phase haven't they?!

Yes, I'm being paranoid. But thank you tribpot

Namechanged and everything now. Miss my old name.

Don't worry, I accused BeccaMumsnet of being a troll earlier on the grounds she wasn't RebeccaMumsnet. She took it well

Oh dear. It's all a bit much isn't it.

Totally off topic, but I was just looking at a map of SE France & there is a place called Fanjeaux - which childishly amused me & might help you with a name change, overscented!

Fanjeaux is henceforth the spiritual home of MN.

It is the home of St Dominic!

en.wikipedia.org/wiki/Fanjeaux

Actually, if you google it, it looks bloody lovely.

Should we stock it with gin & all retire there?

Our lady of fanjeaux. The sacred shrine of fanjeaux. Wonderful.

Everything seems to be working fine here now although I hope that I don't come to regret saying that. Many thanks to poor Tech for all their efforts.

I got bored of waiting for the forced re-set, so I have just logged in on a completely new pc, via my bog-standard 9 letter no number/character password, and changed it myself. Logged out and back in again fine. I assume I can expect a forced re-set in my very near future, just because I gave up waiting... Didn't see any instructions on what the password should be during that process though (although I have read them on the threads).

I'm not overly concerned for my account, but am mildly perturbed that there may still be people whose passwords were on the published list that did not change their passwords, and have not had a forced re-set either... is someone at mnhq checking that this loophole has been checked?

And still curious as to why the promised forced re-set didn't materialize?.. any clues?

tribpot @ the accusation you made
arf lol and hahahaha