1

OK Spiceworks What’s up? LOL

image
image953×839 39.9 KB

I use a password manager so I can say with 100% certainty that I did not forget my password, but something happened on your side… Wondering what happened and am I the only one?

Obviously I got back in via a password reset, but would still love to know what’s going on

5 Spice ups
2

You are not the only one. It has been mentioned in chat this morning also.

I also use a password manager and had the same questions.

3 Spice ups
3

I hadn’t seen that… Good to know I am not losing my mind today

Now I wonder if they suffered a breach and invalidated a bunch of passwords as a precaution.

2 Spice ups
4

Over here: Important Security Update: You'll Need to Re-login to Community it says that they are going to implement a feature where if you haven’t logged in for 90 days you have to change your password, but that’s the only thing I see about it.

3 Spice ups
5

Will people be able to see this helper if they cannot log in?

1 Spice up
6

Not sure what helper you mean, but if it is either of the posts, yes… neither of them are in a private group, so should be visible to all.

1 Spice up
7

Reading behind the scenes this is the kind of announcement one puts out if they were breached.

1 Spice up
8

Only if you know to go looking for them. Someone stuck at the logon screen isn’t likely to go searching. I know I didn’t.

2 Spice ups
9

Hopefully they will see the banner, but not sure. If not, they should still be able to reset their password if needed.

2 Spice ups
10

I was being a little silly as I had a flashback to the day I sent out an email to tell everyone that email was down. LOL

6 Spice ups
11

Hi all, I’m sorry for not posting the banner announcement when Lois posted the release notes for this change. I think I got it up about an hour later.

This is actually part of a larger initiative to make our underlying identification service more secure and robust. For those who use Cloud Help Desk (CHD), we started this back in January (ref). While spiceworks.com uses the same identification service across its subdomains (community, on, and www), that update was explicitly targeted at CHD.

Today’s update was specific to how the community platform uses the Spiceworks identification service, and Lois’s update goes over that in more detail. Suzanne posted a /incoming version of that earlier in the week that took on a life of its own ( :cookie: and :bacon:).

While the main focus of this update was security, it also gives us a refresh and baseline for when someone has logged in or returned to the site. This data can be helpful in various ways, such as win-back campaigns (aka, we miss you emails), account hygiene, and who knows what other popular security features may come Soon™ (I’m not saying anything more on that so that it won’t be taken as a promise!).

In conjunction with this, what was also supposed to happen was that people who had not been back to either the community platform or CHD in “X” months were supposed to get their password reset. While I have been sick this week, I’m pretty sure I’ve been to both the Community (you can see all the spam I post on my profile) and CHD lately. But my password also got reset. So, I will check with the team and see if something wasn’t done correctly on that front, and we may have reset more passwords than we meant.

5 Spice ups
12

Thanks Sean for the extra info. :slight_smile:

6 Spice ups
13

I just had to reset my password for the second time in about a month, also naturally using a password manager. So this issue isn’t gone yet.

2 Spice ups
14

That’s odd. I don’t think I have had to reset my password since this issue originally occurred. @Suzanne-Spiceworks @Sean-Spiceworks any idea why @johanl would have this happening? I haven’t heard of this issue since the original post in February.

1 Spice up
15

Not sure. Is this just logging into community, or is it related to CHD?

If CHD, best bet is to write to support@spiceworks.com.

If community, might be good to open a ticket at community@spiceworks.com so that we can get information about your specific setup, because this isn’t something we have been hearing from a lot of people, so at a guess is probably related to your specific account or setup somehow.

3 Spice ups