• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Did I miss something ?

Darkone

Senior member
Or am I just paranoid when I get mails such as....

You, or the person at this address (198.240.212.25), has requested to send your Team AnandTech password.
Nickname: -> darkone_ <-,
Password: -> xxxxxxxx <-
To Edit your personal page, login with your nickname and password on this
page: http://www.teamanandtech.com/members/login.asp
or simply follow this link: http://www.teamanandtech.com/members/login.asp?user=darkone_&pw=xxxxxxxx

Now.. my IP address is not 198.240.212.25 which incidentally resolves to
Name: www-gw3.credit-suisse.com
Address: 198.240.212.25

Interesting that someone at a Credit Suisse bank should be taking an interest in my account 😉

Is someone just sendin me my password to remind me that i haven't been there in a while, or is this someone trying to get my account details ? I'm a little paranoid.. especially considering the password that was set (ive marked it out with xxxxxx now) was not the one I originally set and I dont remember changing it.

???

/confused...
 
Weird stuff.. safeguard that account! Don't want you showing up on Team PasswordThiefs. 😀

If you're really paranoid, you might consider an email notice to the Berkeley folks to be on the lookout for anything out of the ordinary coming from that address range.

If it were me though I'd probably interrogate my mischieveous friends first 🙂
 
I got one too,

The whois gives it as part of a block registered to:

Credit Suisse New York
1 Liberty Plaza
New York, NY 10006
US

It seems odd that a spider or such would be run out of CS, possibly a spoofed address.... hopefully nothing to worry about...
 
yeah me either... no password change link... and that definitely wasn't the password I set.... just in case anyone else whos been affected, my password that was sent in the email began with a d and ended with n.

wondering if anyone elses had the same password... or am i just a complete dick and this was a random password that was set when it setup the login... ???

 
I don't have any logs, but I'm willing to take a bet that an email spider from that company triggered the emails(remember, there's a "send me my password" link at the bottom of each member's page). Since we don't list the email addy you guys put in for your account, said email addy is still secure. As for your passwords, Mika has never built in the ability to change the password. I don't remember the exact reason, but I believe it was because it did nasty things to the member DB. And DarkOne, I've checked and the passwords are still the same; since they can't be changed, its not possible it's different from what its always been.
 
😉 then i'm a f*wit 😉 must have signed up when i was drunk 😉 hehehe

Thanks for the help virge 🙂

 
You, or the person at this address (198.240.212.25), has requested to send
your Team AnandTech password.


Got it, too! I rarely check that email address so I hadn't seen it. Came thru early this morning apparently.


Hmmm
 


<< You, or the person at this address (198.240.212.25), has requested to send
your Team AnandTech password.
Nickname: -> ConfusedBW <-,
Password: -> xxxxxxxx <-
To Edit your personal page, login with your nickname and password on this
page: http://www.teamanandtech.com/members/login.asp
or simply follow this link:
<a href="http://www.teamanandtech.com/members/login.asp?user=ConfusedBW&pw=xxxxxxxx[/q">http://www.teamanandtech.com/members/login.asp?user=ConfusedBW&pw=xxxxxxxx
</A>
>>



Same here, sent at 12:18am GMT

Tracert and Ping both time out.
 
I got the email too
rolleye.gif


So if I read this right there's nothing to worry about?
 


<< I got the email too
rolleye.gif


So if I read this right there's nothing to worry about?
>>


Correct. Team AnandTech.com does not publish its users email addresses; so even though their spider triggered an email to be sent(which is anoying, but not much more thank goodness), they didn't get the email address itself.
 
From alt.sci.seti:



resolving IP [198.240.212.25]:
www-gw3.credit-suisse.com [198.240.212.25]

whois -h whois.arin.net 198.240.212.25

CS Holding (NETBLK-CSH-C-BLK2)
Credit Suisse New York 1 Liberty
Plaza
New York, NY 10006
US

Netname: NETBLK-CSH-C-BLK2
Netblock: 198.240.131.0 - 198.240.255.255
Maintainer: CSH

Coordinator:
Credit-Suisse (ZC18-ARIN) dnsadmin.cs@CREDIT-SUISSE.CH
(212) 238-2538

ask credit suisse :
dnsadmin.cs@CREDIT-SUISSE.CH
postmaster@credit-suisse.com
postmaster@credit-suisse.ch
 
me 2! I assumed it was part of a new site as i had never seen it before and you nice people had signed me up!

I don't ever remember signing up for the teamanadtech page is the strange thing and it is definatly not a password i use for anything else, can only assume it is a randomly generated one.

Alex
 
I have not gotten one of these emails (yet) but I have attempted to figure our if there is a pattern based on the reports made in this thread.

I have looked for some link common to those who have received these password related messages.

Alphabetical - Nope
Country - Nope
DC Project - Nope
Profile - Nope
Shown on Map - Nope
ICQ - Nope
Membership Number - Nope

So all that leaves is UGLY! 😀
 
I got it also. But, I don't see where it is a problem as Virge indicated.

When you sign up for the TeAm site it generates the password, rather than asking you to enter one. So, it would not be something any of us would remember. I never sign in cause I can't remember it, unless I have it emailed to myself. Then it is forgotten the next time I visit the site. Its old age!
 
I got one too. Wed, 3 Apr 2002 11:12:04 -0000

Did this go out to everyone? Does our website keep track of messages sent? Perhaps we should. This is not the first time that I got an unsolicited message. The time before this was Thu, 27 Dec 2001 23:58:42 -0000 from (64.57.223.40). The time before that was 13 Mar 2001 21:15:30 -0000 from (24.4.215.181).
 
Joe, I don't believe that we keep logs, but that's something only Mika would know. However, for obvious reasons, he did build in the IP listing, so you know who brought it up. I have yet to hear of any major triggers like this one though, so for a case like yours, Joe, I'm willing to guess that it was someone pressing the wrong button. That said, it's always possible to get this stuff from time to time, but unless it causes a major problem(repeat spidering and so on), we just ask that you guys delete it. We'd hate to have to make the password recovery system more complex then it needs to be.
 
Back
Top