File Library being Hacked?

This is curious. I have a paid membership in the file library.
Several times over the past few months {and twice today) when I have tried logging in to the library
I get a message stating"User 'xxxxx' is in use on another node. Click here to force logout the user on the other node.."How is it that someone is using my login?
Today I simply changed back to my old password (previously hacked) just to see and sure enough just now I went to login and again found the login in use! (the slimy little hacker kept a record of the old password?)
I would love to know just whats going on here.
Password now has been changed again.

Regards,
Vince Cockeram
Author: NECv4 Route;
Now enjoyed by over 10,000 Train Simmers!

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

RE: File Library being Hacked?, derekmorton, Feb-01-05, 11:49 PM, (1) RE: File Library being Hacked?, Paul1953, Feb-02-05, 01:17 AM, (5) RE: File Library being Hacked?, geekman, Feb-01-05, 11:51 PM, (2) RE: File Library being Hacked?, CBF, Feb-02-05, 00:38 AM, (3) RE: File Library being Hacked?, trainmaster_1, Feb-02-05, 01:12 AM, (4) RE: File Library being Hacked?, Vince, Feb-02-05, 03:31 PM, (11) RE: File Library being Hacked?, NW_611, Feb-02-05, 04:14 PM, (13) RE: File Library being Hacked?, yellowdog, Feb-02-05, 04:46 PM, (14) RE: File Library being Hacked?, Nels_Anderson, Feb-02-05, 08:01 AM, (6) RE: File Library being Hacked?, Mimbrogno, Feb-02-05, 02:04 PM, (7) RE: File Library being Hacked?, CBF, Feb-02-05, 02:36 PM, (8) RE: File Library being Hacked?, Vince, Feb-02-05, 03:19 PM, (9) RE: File Library being Hacked?, buzzbenz, Feb-02-05, 03:30 PM, (10) RE: File Library being Hacked?, geekman, Feb-02-05, 04:11 PM, (12) RE: File Library being Hacked?, SD75i, Feb-02-05, 05:53 PM, (15) RE: File Library being Hacked?, Vince, Feb-02-05, 07:18 PM, (16) RE: File Library being Hacked?, NewEnglandRailFan, Feb-02-05, 07:38 PM, (17) RE: File Library being Hacked?, SD75i, Feb-02-05, 09:17 PM, (18) RE: File Library being Hacked?, buzzbenz, Feb-03-05, 11:51 AM, (19) RE: File Library being Hacked?, Grimace780, Feb-03-05, 05:20 PM, (20) RE: File Library being Hacked?, SD75i, Feb-03-05, 05:29 PM, (21)

Conferences | Topics | Previous Topic | Next Topic

How do you log out of the file library?

Derek
EngMod@sgrail.org
www.sgrail.org
EngMod forum
http://www.3dtrains.com/forums/index.php?s=3c21ea4e4882bb70177f35d82c51523b&act=SF&f=59

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

>How do you log out of the file library?
bottom of the page, theres a choice says logout, click on that and yer back to the homepage.

Paul Watson
Activity Development
Public Relations
Paint Shop

I hear my train a comin'--Jimi Hendrix

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

Hi Vince,Very interesting comment as the same thing has happened to me twice now. I go to log-in and it says I'm already there on another node.Wonder if we ought to notify Nels?Larry Steiner

I don't suffer from insanity; I enjoy every minute of it!

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

Hi; On Jan 20th I received an e-mail from the administrator of the Auran server that hosts Trainz, etc., that their data base for user names and passwords had been hacked. While this did not include accounts and credit card info, user names and passwords used on multiple site might be at jeopardy.Is there a change this is where the mis-used user names and passwords have come from?Cheers; Chuck F.

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

This sometimes happens to me, if you don't log out, you are still in the file library until you try to log in and find that you are still in, then it asks you to force the user which is you out, which boots your username out and you have to log in again to get into the file library. So the file library is not being hacked its just that you forgot to click the log out button at the button of the page to fully log out or you will get that same problem again and again. Mike, Foreperson of scrap the SD60F confederationFuture CPR Locomotive EngineerPontiac Grand Prix GTP - Built For Drivers"A proof is a proof. What kind of a proof? It's a proof. A proof is a proof. And when you have a good proof, it's because it's proven" - Jean Chretien

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

LAST EDITED ON Feb-02-05 AT 03:40 PM (EST)

>This sometimes happens to me, if you don't log out, you are
>still in the file library until you try to log in and find
>that you are still in, then it asks you to force the user
>which is you out, which boots your username out and you have
>to log in again to get into the file library. So the file
>library is not being hacked its just that you forgot to
>click the log out button at the button of the page to fully
>log out or you will get that same problem again and again.You are making a serious assumption here.
You ASSUME that I "forgot to click the log out button at the button of the page to fully log out". . . . yada yada yada.ASSUME NOTHING! Assumptions can make you look like a fool. If you had asked 'are you sure that you remembered to logout?' that would have been more to the point.
Please DO NOT assume just because you have problems following the correct protocall when using the library that others here are afflicted with your dysfunction.
You have a 'cute' quote in your signature line;
>>"A proof is a proof. What kind of a proof? It's a proof. A proof is a proof. And when you have a good proof, it's because it's proven" - Jean Chretien<<
I suggest you read AND understand just what that means.

Regards,
Vince Cockeram
Author: NECv4 Route;
Now enjoyed by over 10,000 Train Simmers!

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

The Chretien quip's got to be for sarcastic value, because it's probably an excellent example of circular (or maybe oblong) logic on its face.

____________________________________________________________________
Norfolk & Western’s Radford Division, Pulaski District: Who needs the Marias Pass?

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

LAST EDITED ON Feb-02-05 AT 04:47 PM (EST)

Education is simply a systematic organization of subjective experience. Forget all that "proof" nonsense. Edit: I forgot to add my smily, so Clayton

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

Usually the person who is already logged in is...you! If you were on previously and forgot to log off you may still be logged in. Worse, if this happens to you once your browser may cache the error message and keep displaying it (incorrectly) on future login attempts.The fix is to make sure you log off when leaving the site. If you get the message over and over then empty your browser's local cache contents.If you really think someone else is using your account, then change your password. There is a "Change Password" link on the bottom of the main file library page.

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

Is there any possibility that the Train-sim files have been hacked?
I have also experianced this problem, two days ago, infact, and it happened the first time I got in! If it's true, do you think that it is possibly slowing down the server so much (like I noticed about two weeks ago)? On another note, how busy is the server? Are there just so many users? what times are the nodes usually filled? I was just wondering about the health of the site, seeing that there has also been an increasing number of attacks that I have experianced myself all over the interenet.
Keeping Baldwins alive through the 21st century.
Matthew Imbrogno

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

Hi; Points made about not logging out properly are valid, but I understood that inactive logins are kicked out by the server in about 1/2 hour. If you log in sustancially later than that, and still find that you are logged in, I would be suspicious.Cheers; Chuck F.

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

LAST EDITED ON Feb-02-05 AT 03:42 PM (EST)

Nels, with over 30 years experience in the data processing field you can believe me when I say I NEVER fail to log out of either the forums or the file library.

As I stated in my post I did change the password back to an old previously hacked password and less than 4 hours later (after I had logged out BTW) my user name was again "IN USE ON ANOTHER NODE".I have since changed my password to a completly new password and will be checking in at various times every day to see if it happens again.
I just checked this morning and my username was clear and yes, I DID logout after I checked.
If the library is being hacked (and the fact that my password WAS hacked TWICE says that this is indeed the case ) then controls for ANY access to the password files need to be looked at.Nels, is it possible to allow me ( all users ) when confronted by the node in use message to find out the IP address of the lowlife who is logged in to the node?
Something along the line of "Username XXXX, IP 111.111.111.11, is logged in. Click here force off ect."Thats all we (the forum members) would need. Just add the IP address of the user who is using the node and we'll find out who it is.Then action could be taken against this cretin. Banning? Deportation, Burn at the Stake? This hacking just may be causing increased bandwidth fees for you by some little pissant that won't cough up the measly fee for first class membership.

Regards,
Vince Cockeram
Author: NECv4 Route;
Now enjoyed by over 10,000 Train Simmers!

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

> Something along the line of "Username XXXX, IP 111.111.111.11, is
> logged in. Click here force off ect."I'll second that idea!Shouldn't be any privacy issues either, because if you ARE still logged in, it's your own IP anyway, and if it's not, then whoever is pretending to be you is already doing something which is NOT legal (which, IMHO, would mean he's agreed to forfeit rights to keep his IP "secret" anyway).----------- BUZZ -----------

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

Yes, I have occassionally forgotten to log off, but most of the time I do, to give others a chance. Plus, as far as I know there is a specific time limit after which you are automatically disconnected anyway.Both times this happened to me I hadn't been on the site for at least 4-6 hours prior. I did change my pasword last night and while it's too early to be certain, I haven't seen it since.This pi$$es me off. Thirty dollars isn't that much money. For what you get it's like the bargain of the century. If some turd is hacking this site he has to be the cheapest SOB on earth.Larry Steiner

I don't suffer from insanity; I enjoy every minute of it!

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

I don't know if this was posted already but nothing is being hacked.If you leave the library without loggin out and then go back to the log in screen and re-login before your activated time expires, you are still active from before and now you are trying to log in, when you already are, so thats why it says ... force log out

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

LAST EDITED ON Feb-02-05 AT 07:28 PM (EST)

SD75i writes; >>"I don't know if this was posted already but nothing is being hacked"<<.

I'm quite curious, did you read through this thread? The reason I ask is that that there are eight replys posted with or dealing with this theory. Or perhaps your internet browser is corrupted and not displaying the entire thread?
If you in fact you did not see the thread you have a major malfunction and should get it checked asap.Please let us know if you find a problem as we all need to prevent corrupt internet browsers.

Regards,
Vince Cockeram
Author: NECv4 Route;
Now enjoyed by over 10,000 Train Simmers!

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

Haha Vince This has happened to me several times also.On another note, today I came to the forums where I check "keep logged in everytime I come back" or whatever it is, and today I had to login to post this. Odd.Oh well.Also, Clayton, I don't remember you being in NALW? Congrats if you just joined
-Dave, Secretary of the Scrap the SD60F federation!

Former ALCo Schenectady, NY shop switcher #5, in North Creek, NY

You can e-mail me at davej8010@aol.com -or- hrrc_7324@yahoo.com -or- feel free to aim me.

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

it happens to me ALL THE TIME
I AM ALWAYS in the library, i will leave then come back
without loggin out.when i log back in ... oops im already logged in, force the old login out, and re login i know im not gettin hacked, im just booting myself out and replaceing myself with myself

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

Yeah, but the timeout isn't 4-6 hours - more like 30 minutes? I know if i download a really big file and just sit there doing nothing while it's downloading, i'll have timed out before it's finished (the download will finish fine, but if i need to get another file i'll have to log back in).So, the "logoff" theory can really be shot down by BOTH sides. For Vince, he says he always logs off, yet this happens to him sometimes. For me, i'm the opposite - i do forget to log off sometimes, and i NEVER get that message (well, never UNEXPECTEDLY anyway).It could be some browser cache setting still - but the easy way to check that is to log off, clear memory and disk cache in the brower, reboot the computer just to be absolutely sure, and then try to log back on. If that message comes up, then someone else is obviously using your login.Of course, the IP idea is great - that would tell beyond a shadow of a doubt not only IF it's a stolen login, but also where it's coming from if it is...----------- BUZZ -----------

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

As a computer professional with 20 years experience, here are my thoughts. Apologies for anything that has been repeated.Occasionally I see the message that I am already logged in. For me, almost all of the time when I see this it is because my computer has crashed and I've had to reboot and thus did not log out properly. Or I have tried to log in from another computer in the house while forgetting I had a download happening on the first machine.Use Mozilla Firefox of any browser other than Internet Explorer or MSN Explorer. The Microsoft products have security issues and other bugs that may be at work here.ALWAYS LOG OUT PROPERLY. And make sure when you click "Logout" that the home page for train-sim.com appears.NEVER USE THE SAME PASSWORD ON MULTIPLE SITES. Especially if you use the same User ID everywhere. If just one dishonest sys admin knows your password for his/her site then he/she knows the password for all the other sites that use that password and User ID.I strongly urge Nels, if possible, to supply or at least log IP information when a user is forced off. That way hacker activity can be logged. IP logging in this case would also note if the IP address of the ID being forced and the one doing the forcing are from the same domain. That would track if a user keeps forcing himself off due to not logging out.REMEMBER: Your user ID and password are not encrypted as they are sent from your browser to train-sim.com. Though I suspect the chances of your account being hacked this way are slim.Cheers,
Gary Cameron
Grande Prairie "The last civilized stop before Alaska," AB
Canada

Alert | IP

Printer-friendly page | Edit | Reply | Reply With Quote | Top

LAST EDITED ON Feb-03-05 AT 05:31 PM (EST)

but does it really matter?
it not like its banking information .... all youcan do is download ... so really just force em to log out, and then if you get forced logeed out while you are on the site then you no

Alert | IP

[ Home | MSTS Forum | MSTS FAQ | How To... | File Library ] Copyright © 2004 by Nels Anderson. All Rights Reserved.