JeffreyBob Hax

Seems to me if you lost your login settings, you just send message to LL with a different email and they reset pw for you. A friend tried it say he forgot his pw and secret question and LL did reset his PW. Seems to me LL doesn't know anything about security at all. It's pretty easy to building safety feature like sending confirm email with attached link Where the changed settings will be final. Forums act like that for years. Changes can only be made when logged in and new pw, email or any other changes in the account info will be final AFTER confirmation sended to the Email that was related to the account before changes are made. WAKE UP LL What to do if your account is compromised Your account may have been compromised if: You can't access your account. You suddenly notice a reduced available balance on the payment source you have on file. If this happens, contact us immediately! Here's what to do: Go to the Second LIfe Help page and log in if you can. If you can't access your account, use the Forgot your login information?link on the right to recover your username and reset your password. Then log in. On the Second LIfe Help page page, click the Contact Supportlink on the right. On the next page, click Submit a a Support Case form. Under What type of problem are you having?, select Account Issue. A second dropdown appears. Under Account Issue, select I believe my account has been compromised. Fill in the rest of the fields as directed. Click Submit. Check your email for your case number. Call our fraud number: 800-860-6990. So all it takes is getting somebody's username you wanna hack, request password reset WITHOUT confirming it's REALY yours and you have control over the account. How about sending confirm email to the accounts registed email BEFORE changes takes place? To my acknowledge (excuse me if I'm wrong, I'm just a noob who's been playing with computers and software for the time when dinosaur ruled the planet) 99% of all forums, acount related programs, etc. do work with a confirmation system BEFORE changes are applied to an account.

Seems to me if you lost your login settings, you just send message to LL with a different email and they reset pw for you. A friend tried it say he forgot his pw and secret question and LL did reset his PW. Seems to me LL doesn't know anything about security at all. It's pretty easy to building safety feature like sending confirm email with attached link Where the changed settings will be final. Forums act like that for years. Changes can only be made when logged in and new pw, email or any other changes in the account info will be final AFTER confirmation sended to the Email that was related to the account before changes are made. WAKE UP LL

Seems to me if you lost your login settings, you just send message to LL with a different email and they reset pw for you. A friend tried it say he forgot his pw and secret question and LL did reset his PW. Seems to me LL doesn't know anything about security at all. It's pretty easy to building safety feature like sending confirm email with attached link Where the changed settings will be final. Forums act like that for years. Changes can only be made when logged in and new pw, email or any other changes in the account info will be final AFTER confirmation sended to the Email that was related to the account before changes are made. WAKE UP LL