Avatar
Avarus Okami
649b28006cbef9826ea100fd988e800987340872c4adb3ecbfaca3bfdd751649

Oi! 'ew got a loicense to take pictures, mate?

Replying to Avatar Alby

Overnight we have received notices of some unusual requests to our infrastructure.

Over a short period of time many password reset emails had been requested from various residential proxies around the world. Our rate limiting protects against spamming attacks but requests got through to request password reset emails.

Many of the requests are likely for emails that had been included in some data breach or have been publicly exposed by their owner.

Password request emails also have been requested for lightning addresses which falsely exposed the user's email address. This had been a feature deployed to help users keep easy access to their accounts. But as many users post their lightning address on profiles like nostr this should not be exposed and a fix has been deployed immediately. Generally there should be no way to display a user's email address. We have failed here. About 5500 password reset emails had been requested by the attacker.

**We have not seen any abnormal related login activity and accounts are safe. People who got a password reset email can ignore the email.**

As we have seen a general increase in attacks on user accounts trying to brute force logins with some emails from some data leaks we have fully disabled password logins and require all users to login with the one time token. This adds an another layer of security.

Additionally we also offer the option to login with Google.

If you have questions or feedback, please let us know: support.getalby.com

Websites really need to stop using email as an authentication method. There are better options that preserve privacy.

"If ye love wealth better than liberty, the tranquility of servitude better than the animating contest of freedom, go home from us in peace. We ask not your counsels or arms. Crouch down and lick the hands which feed you. May your chains set lightly upon you, and may posterity forget that ye were our countrymen."

-Samuel Adams

Replying to Avatar Uno

NO!

I have half a mind to go to steak and shake right now to spite you.

Replying to Avatar Ken Berry, MD

If only there was a term for eggs that started with a b

Honestly, the username and password idea is pretty archaic at this point.

You got it bro. Zap, like, repost, and comment. 🫡

I just learned what a labubu is and now I see them everywhere. This is not what I thought would happen when leaving the matrix.

That ad makes sense though, get young men with btc and young women with...well...