It would certainly be a quick fix until a better solution is found if the issue is still able to affect new members.
-
The forum software that supports hummy.tv has been upgraded to XenForo 2.3!
Please bear with us as we continue to tweak things, and feel free to post any questions, issues or suggestions in the upgrade thread.
Password Leaks
- Thread starter MickO
- Start date
I have just done this.
That may have not pleased BH if he has not used his new account yet but is for the best I think
Black Hole
May contain traces of nut
No that was fine, it was after I registered. FWIW I had no problems with it:
It is a shame to lose the Location field as "required", because it provides context if the user sets it up properly (which, obviously, I didn't!). However, if it is the forum causing it to malfunction, I agree it's not worth it.
@Brian: you can kill that account now if you like, it is of no use now and I'm not sure I even remember what password I set.
It is a shame to lose the Location field as "required", because it provides context if the user sets it up properly (which, obviously, I didn't!). However, if it is the forum causing it to malfunction, I agree it's not worth it.
@Brian: you can kill that account now if you like, it is of no use now and I'm not sure I even remember what password I set.
Would you like me to ban this account, then you can try to log in again to see if you can access anything on the forum, or whether you keep getting any error messages?
Black Hole
May contain traces of nut
Good idea (now, what was that password?...)
Done, see what you can do now, and report back with any screenshots if relevant.
Luke
Well-Knwοn Мember
A recent change (some where from May 2025 to August 2025) was that the location became mandatory.
I tried a second registration this afternoon. Miss the location out (when it was mandatory) and try to proceed and it comes up with an error message that a field is mandatory. Although the field is highlighted the error message does not include the field name I.e. "Location". It is quite easy to presume that as the highlighted entry field is immediately below the password, that it is just a common registry screen that asks for the password twice and not check what that field is really for.
Last edited:
Black Hole
May contain traces of nut
2FA isn't a replacement for passwords! Do you mean biometric? I see there is now a biometric login available on the forum, I didn't know about that.
Anyway, as a banned user I wasn't able to do or see anything at all. In fact, I couldn't even access the menu required to log out!
Are you sure? How have you managed to put a date on it?
Last edited:
prpr
Well-Known Member
Well obviously I know that. But it saves somebody who's had their password leaked from having their account compromised.
Not necessarily. I use an authenticator app. where possible (with backup codes). Other organisations only do the SMS thing for generating the number, which is itself open to SIM swap abuse and takeover.
Luke
Well-Knwοn Мember
getawaycar registered on the 9th May 2025 and does not have a location. I've also seen a couple dated April 2025 with a blank location.
August is an educated guess. There weren't many registrations that I came across during June and July, but after that all later registrations in 2025 I came across had a location. That would be a bit unusual compared to pre-2025 registrations if location was not mandatory. Plus the earliest member that I came across with what appeared to be a password in the location was 15th September 2025 (now updated to have a blank location).
antipodean
Active Member
I don't like 2FA because I don't want my phone buzzing with something I need to enter to continue entry to the site every time I want to access it. I can understand using 2FA for initial confirmation as a new user, and to establish a backup channel for contact, but provided the password is "strong enough" then from then on 2FA shouldn't be needed.
EEPhil
Number 28
You'd really love GOV.UK One Login. Every flippin' time I need to enter the ruddy code sent to my phone to access the webshite on my computer.
Owen Smith
Well-Known Member
Yes it is rather annoying.You'd really love GOV.UK One Login. Every flippin' time I need to enter the ruddy code sent to my phone to access the webshite on my computer.
Owen Smith
Well-Known Member
gov.uk is every time I change to a different page within the gov web site. It can take a dozen text messages to do my tax return in one session of a few hours. That's way too much.