Page 1 of 1

Getting E-mails saying I requested PW reset-but didn't

Posted: Thu Jan 17, 2019 4:01 pm
by bjallred
I am getting multiple e-mails saying I requested a password reset. In the e-mail is a code needed for a password reset. I did not, however, request a password reset. The times of each e-mail seem to be correlated to times that I logged in to my account or synced my LDS tools.

Is there a bug in sending these things out, or is someone trying to hack my account?

B

Re: Getting E-mails saying I requested PW reset-but didn't

Posted: Thu Jan 17, 2019 4:25 pm
by russellhltn
bjallred wrote:I am getting multiple e-mails saying I requested a password reset. In the e-mail is a code needed for a password reset. I did not, however, request a password reset.
Sometimes a person mis-remembers their user name and they end up trying to reset someone else's account. However,
bjallred wrote:The times of each e-mail seem to be correlated to times that I logged in to my account or synced my LDS tools.
That's a strange one.

By chance are you a church employee or someone who has to regularly change their password? If it really is in response to your logins, it sounds like a bug.

Re: Getting E-mails saying I requested PW reset-but didn't

Posted: Thu Jan 17, 2019 4:29 pm
by bjallred
Not a church employee, don't change this password often at all.

Re: Getting E-mails saying I requested PW reset-but didn't

Posted: Thu Jan 17, 2019 4:47 pm
by russellhltn
Without others reporting the same thing, I'm going to guess it's a case of someone mis-remembering their ID who just so happens to have the same login pattern as you.

Re: Getting E-mails saying I requested PW reset-but didn't

Posted: Thu Jan 17, 2019 7:10 pm
by lajackson
I would send feedback through LDS Tools and ask them if the app may be attempting to sign in (it probably is) and whether or not that may be triggering the email from LDS Account.

Re: Getting E-mails saying I requested PW reset-but didn't

Posted: Thu Aug 05, 2021 11:52 pm
by B_Seegmiller
It means that someone has stepped into a back door that sysadmins aren’t interested in solving (see above response by an admin). I’ve tried to call and report this, but wasn’t elevated even though I asked to speak to a supervisor — amateurs answering the phones? Seriously?

I’ve thought and debated with myself about publishing the method on-line to force admins at the church to take it seriously, but if they won’t care, how can a fairly random (and very concerned) member make them? It can’t happen.

Maybe the Dark Web minions can motivate them.

Re: Getting E-mails saying I requested PW reset-but didn't

Posted: Fri Aug 06, 2021 11:30 am
by lajackson
cheerioboy wrote:I’ve thought and debated with myself about publishing the method on-line to force admins at the church to take it seriously, . . .
Rather than do that, I would suggest that you contact them directly at this security link.

Re: Getting E-mails saying I requested PW reset-but didn't

Posted: Fri Aug 06, 2021 7:22 pm
by B_Seegmiller
Thanks. A tedious effort to get some progress going on it, but thanks.