Sign In

Close
Forgot your password? No account yet?

wtf? (this is 22mg) by 22mg

my husband forgot his account name and asked for it to be recovered but instead the staff just changed my account name/email/password and gave it to him?? uhhh security breach much? i had to send them an email from his email ... hopefully they answer soon because i don't like not having my real username. wtfwtfwtf.

can i please have my name back >: /

-22mg

wtf? (this is 22mg)

22mg

Journal Information

Views:
578
Comments:
11
Favorites:
0
Rating:
General

Comments

  • Link

    Crazy

  • Link

    That's bizarre.

  • Link

    Weiiird. I had never heard about this happening.

  • Link

    Whoa what

  • Link

    Make sure to post this on their forums, tweet it and mention them, post it to their FB etc. etc. Shit like this is SO NOT OKAY. Like insanely not okay. It's nice knowing that some random person can just get access to any account like this. Whoever did this needs to be removed from the admin team.

  • Link

    We're trying to track down how exactly that happened! Apologies for the mix-up there. Staff is actively looking at it now.

    • Link

      thanks for the quick response, once i read his email i understood more of why the mix-up occurred.

  • Link

    Sounds like they misunderstood you. Probably thought you were your husband just under a new account. Just send a detailed message to the staff. They should sort it out and change your name back.

  • Link

    wtf???
    looks like it's all sorted out now. but wow.

  • Link

    Okay! So we got it sorted out with kihari as to what happened!

    TLDR Version:
    Apollopennae e-mailed in to reset his forgotten username.
    22mg had Apollopennae's e-mail set, so her account got renamed instead.
    22mg then updated the e-mail field to her own so we lost the association.
    No passwords or e-mails were changed or given out by staff, and no userIDs were changed.

    Long Version:
    It looks like your husband sent in an e-mail stating he had forgotten his account, but to change its username to Apollopennae. The e-mail he sent from was actually linked to your account (22mg), so without any other indications of anything amiss, Kihari thought that this was the account to be recovered/renamed and mistakenly changed the username.

    It looks like you then updated the e-mail address associated with your account, so it was no longer on Apollo's, which was good but it initially confused me on how Kihari had connected his e-mail with your account. Once we had made the connection, the rest made sense.

    Of note, everything security-wise on Weasyl is handled by UserID, not Username. This has the benefit that we can change usernames easily, and any security, such as ignores an suspensions, can not be bypassed by changing your username. I suspect you were still logged in from earlier, which is how you ended up logged in but with a changed username.

    Staff can also NOT change a user's e-mail address or password. This is intentional, to protect users from the potential of staff abuse. I would like to think our staff here generally acts in a professional and helpful manor, but security is important, and people do make mistakes.

    There has been some discussion on how we can improve the security of username changes, so more on that later, but right now it looks like everything is fixed. The only remaining question is where Apollopennae's account is. We've been unable to locate any registration from him!

    • Link

      I don't even think he really signed up. he swears he did but i don't remember him signing up. he doesn't draw often, so i don't know why he would've. i have no idea though why my email was his email? i swear i signed up on my own email. not sure how that could've happened but if that's what it says on your end then that's completely my bad.

      like i said, i had asked my husband to sign up last week and he said he had an account and i was quite confused. i think he's just straight up wrong and i accidentally used his email due to chrome's auto-fill feature. sorry for the mix up but thank you so much for fixing my problem immediately and coming back to explain exactly what happened. i really appreciate that, that's awesome administration and amazing PR as far as i'm concerned. thank you again.