Hi,

2011/10/5 Chrissy McManus <chrissy.m...@hotmail.co.uk>
>
> i too have lost all my stuff which i had material in every catagory too. I 
> have had stuff on LSP since before and after
> the server crash a time ago. i prob have most of this stuff stored locally

Wow, that's really serious.. and I found some serious security issues
in LSP. One could hack an account by just creating a new account with
the same name and then login with it - how embarrassing.. I made
various changes to LSP

a) check against existing user when creating new one
b) limited the number of login tries to 6 per user, so brute force
attacks should not work anymore
c) added the possibility to change your user password in LSP
d) removed all duplicate users
e) removed all dead users which didn't submit content, rated content
or commented content

I strongly encourage everybody to change its password to a strong
password. If you can't login anymore, contact me in private.

Once more it's obvious that it's high time that LSP is rewritten e.g
using the Django framework - the codebase probably would reduce to
about 20% of the current size and it would be clean and safe
(regarding security). Anybody interested?


> with all the spam on the wiki and more so now the bug report page too.

The spam in the Wiki stopped right after I enabled the email
authentication + special captchas.


> feel free to remove my account nu2lmms

You should be able to login with your account and change the password
and re-upload content.


Best regards

Toby

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2dcopy1
_______________________________________________
Lmms-users mailing list
Lmms-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lmms-users

Reply via email to