Thread | Plain Text Nostr

thread · root ebd381df…c51f · depth 3 · · selected 93ad57ab…e3d5

thread

root ebd381df…c51f · depth 3 · · selected 93ad57ab…e3d5

Alby -- 187d

Overnight we have received notices of some unusual requests to our infrastructure.Over a short period of time many password reset emails had been requested from various residential proxiesaround the world. Our rate limiting protects against spamming attacks but requests got through to requestpassword reset emails.Many of the requests are likely for emails that had been included in some data breach or have been publiclyexposed by their owner.Password request emails also have been requested for lightning addresses which falsely exposed the user's emailaddress. This had been a feature deployed to help users keep easy access to their accounts. But as many userspost their lightning address on profiles like nostr this should not be exposed and a fix has been deployedimmediately. Generally there should be no way to display a user's email address. We have failed here. About 5500password reset emails had been requested by the attacker.**We have not seen any abnormal related login activity and accounts are safe. People who got a password resetemail can ignore the email.**As we have seen a general increase in attacks on user accounts trying to brute force logins with some emailsfrom some data leaks we have fully disabled password logins and require all users to login with the one timetoken. This adds an another layer of security.Additionally we also offer the option to login with Google.If you have questions or feedback, please let us know: support.getalby.com

04387dde…7605 -- 187d

If the service wasn't already shitty enough. Charging way too much money and the service is crap. Can't eventalk to a person without paying. Now they leaked my personal data. Great. Thanks for nothing

Moritz -- 186d

If you really want you can get in touch with Alby anytime using the chat widget on support.getalby.com and I betyou'll receive a reply within 12 hours from a human, not a bot.

04387dde…7605 -- 187d [parent] 
|    If the service wasn't already shitty enough. Charging way too much money and the service is crap. Can't even
|    talk to a person without paying. Now they leaked my personal data. Great. Thanks for nothing
|    reply [1 reply]

Moritz -- 186d
If you really want you can get in touch with Alby anytime using the chat widget on support.getalby.com and I bet
you'll receive a reply within 12 hours from a human, not a bot.
reply