View Issue Details

IDProjectCategoryView StatusLast Update
1269Composrcorepublic2017-03-25 13:55
ReporterChris Graham Assigned ToGuest  
PrioritynormalSeverityfeature 
Status newResolutionopen 
Summary1269: Password-sharing prevention
DescriptionGather details of what systems a user logs in from, and if they log in with something wildly different (e.g. different browser, and country), block it. Give the staff an option to override.
TagsType: Security
Attach Tags
Time estimation (hours)20
Sponsorship open

Sponsor

Date Added Member Amount Sponsored

Relationships

related to 1276 Not AssignedGuest Show login history 
related to 3155 ResolvedPDStig E-mails upon login/change password/change email address 

Activities

Chris Graham

2013-06-07 14:59

administrator   ~1487

There are a couple of ways this feature might serve.

1) Stopping hackers

2) Stopping sharing of access to paid sites

For case '1', we'd probably want to allow the user themselves to unlock the new access.

For case '2', it is more of a case of the user being given the option to dispute the block, and the staff an ability to grant a login extension.

Chris Graham

2017-03-25 13:54

administrator   ~4898

If you last had session activity within a few minutes before, we can detect if the IP address geolocation is more than 50 miles away of that, and then block it.

Add Note

View Status
Note
Upload Files
Maximum size: 32,768 KiB

Attach files by dragging & dropping, selecting or pasting them.
You are not logged in You are not logged in. This means you will not get any e-mail notifications. And if you reply, we will not know for sure you are the original poster of the issue.

Issue History

Date Modified Username Field Change
2017-03-25 13:54 Chris Graham Note Added: 0004898
2017-03-25 13:55 Chris Graham Relationship added related to 3155
2017-03-25 13:55 Chris Graham Relationship added related to 1276