Having users pick weak passwords is a worry for any admin, but it appears vBulletin (our forum software) doesn't prevent you from using the weakest password of all: having a password that is identical to your username. As other forum admins have found out there apparently is someone trying to actively exploit this issue on various boards and using it to send thousands of PM spam messages.
To prevent this issue I've scrambled the password of any account (roughly 150 in total) which had a password that matched it's username. Use the lost password feature if your account is affected and please: pick a better password next time.
To prevent this issue I've scrambled the password of any account (roughly 150 in total) which had a password that matched it's username. Use the lost password feature if your account is affected and please: pick a better password next time.
