Pottermore v7

[MerryLore]

Originally Posted by ccollinsmith

Hey everyone, I just received a password reset request in my email - which I did not initiate.

Well, I reset my password 3 times, and not once did I receive a confirmation email.

I don't think there's an issue with security - I think pottermore has enough information about me to know that I created my account from this computer.

I'm really hoping people who created more than one account won't lose them, because people in more than one household may very well have their own pottermore account. But I bet if an account is created in one state and then accessed in another, or there's a different email address associated with the account and the person using the account can't access it.....

Just throwing some ideas out there.

ETA

And I just made sure I'm set for email notifications. I am.

[ccollinsmith]

I did not reset my password. I did as the Pottermore email suggested and simply ignored the reset request, since I did not initiate it (it was apparently initiated by a third party). I'm still able to login so I'm not terribly worried.

[MerryLore]

Originally Posted by ccollinsmith

I did not reset my password. I did as the Pottermore email suggested and simply ignored the reset request, since I did not initiate it (it was apparently initiated by a third party). I'm still able to login so I'm not terribly worried.

You believe someone tried to reset your password, right?

I never got a reset request. It simply changed the password.

[ccollinsmith]

Originally Posted by MerryLore

You believe someone tried to reset your password, right?

I never got a reset request. It simply changed the password.

That's correct. Someone tried to reset my password... and failed because Pottermore won't allow a "lost my password" request without emailing the address on the account.

If you successfully changed your password and are able to login, I don't see anything to be worried about.

[MerryLore]

Originally Posted by ccollinsmith

That's correct. Someone tried to reset my password... and failed because Pottermore won't allow a "lost my password" request without emailing the address on the account.

"lost my password" - no. But you can change it without email verification.

Perhaps I'm being overly cautious.

[ccollinsmith]

Originally Posted by MerryLore

"lost my password" - no. But you can change it without email verification.

Perhaps I'm being overly cautious.

Yes, my assumption is that you can change the password yourself without email verification.

But somebody requested a reset on my "behalf." I think the blogging might have made my username an amusing target for the amateur hacking type.

[jallen]

I got in on the Day 4 clue. If anyone's wondering, my username's "LeviosaMahogany106."

Does anyone know the time frame for the "Welcome" emails? When should I be expecting it?

[NumberEight]

Originally Posted by jallen

I got in on the Day 4 clue. If anyone's wondering, my username's "LeviosaMahogany106."

Does anyone know the time frame for the "Welcome" emails? When should I be expecting it?

From next week until the end of September. It's probably random.

[Rohan95]

Originally Posted by MerryLore

Thanks for the heads up!

Here's something unrelated which I noticed when I logged into the pottermore site. I remember seeing only one owl on the right hand side. I just noticed a second one on the left, and I can see part of the wing of another one behind the center banner.

I wonder if more owls will be gathering, like they did with the Youtube page?

Nothing changed as far as I can tell when comparing the site now to the screenshot I took of it when I first registered (day 1). Only the text changed from something along the lines of "You might have a chance" to "You are one of the million." Funnily enough, this change only exists in the English version. The French version still has a "maybe," and is a translation of the first message I had.

[pottermorefreak]

Maybe I should have registered in another language so that i might have had a better chance at getting my welcome email earlier. I did register on the first day, however.

[ID824]

I registered on the first and last day, but I've since deleted the second account because I like the first name I got better.

[Tenshi]

Originally Posted by ccollinsmith

I also did finally remove the numbers from my Pottermore username when it appears in public places.

Where can you change it? I see no option for changing your name.


As for who gets access. I pretty much have the same idea like SusanBones, that people who know different languages get access earlier so that they can help with the other versions.

[BrianTung]

Originally Posted by ccollinsmith

Hey everyone, I just received a password reset request in my email - which I did not initiate.

Someone apparently did try to access my Pottermore account, but they couldn't get around the Pottermore system, which is going to ask the person at the registered address to do the reset. The Pottermore message told me to ignore the reset request if I did not initiate it.

I deleted the email in case someone had compromised my email address. But I don't think that has happened. Just be sure to have a strong Pottermore password, with numbers and characters in addition to letters.

I also did finally remove the numbers from my Pottermore username when it appears in public places.

I see that you've deleted this e-mail. But in case someone else receives something like this, take care that it actually comes from Pottermore. This sounds to me very phishy, if you know what I mean (and I think you do).

This is exactly the sort of thing I'd expect an attacker to do. "We've detected an unauthorized attempt at access on your Pottermore account. Please click here to reset your password for increased security. Enter your old password for verification, then enter your new password twice." And lickety-split, they've got your password.

Originally Posted by Tenshi

Where can you change it? I see no option for changing your name.

She meant that she won't post her entire username (with trailing digits) in messages here, or on blogs, or the like. Like you, I also cannot see a place (yet) for changing your full name. And we know, from Pottermore itself, that you cannot change your username.

[MISSsnake]

Originally Posted by Rohan95

Nothing changed as far as I can tell when comparing the site now to the screenshot I took of it when I first registered (day 1). Only the text changed from something along the lines of "You might have a chance" to "You are one of the million." Funnily enough, this change only exists in the English version. The French version still has a "maybe," and is a translation of the first message I had.

Yeah, that is actually the same that happens to me in Italian... The English version is completely sure of me being one of the milion, the Italian version on the other hand has doubts about it I think that is just due to an inaccurate translation.

[silver ink pot]

Originally Posted by Tenshi

Where can you change it? I see no option for changing your name.

You can't. I think she meant that when she posts her name in a public place (like this forum) she leaves off the numbers so no one will try to hack her account.

[ccollinsmith]

Originally Posted by Tenshi

Where can you change it? I see no option for changing your name.

I removed numbers from public uses of my username outside of Pottermore. I didn't actually change my name.

ETA:

Originally Posted by BrianTung

I see that you've deleted this e-mail. But in case someone else receives something like this, take care that it actually comes from Pottermore. This sounds to me very phishy, if you know what I mean (and I think you do).

This is exactly the sort of thing I'd expect an attacker to do. "We've detected an unauthorized attempt at access on your Pottermore account. Please click here to reset your password for increased security. Enter your old password for verification, then enter your new password twice." And lickety-split, they've got your password.

Excellent point! And yes, after thinking about it, I did consider that the email itself may have been a phishing attack.

But that still doesn't answer how a phishing scheme might have found out my email address. That account has not been used for any other purpose than to sign up for Pottermore. And the username on the account has not been used anywhere else.

At any rate, the fact that the message told me to disregard it if I did not initiate the password reset indicates to me that it might really have been Pottermore contacting me and not a phisher.

BUT regardless of where it came from your point is still an excellent one. We need to be careful about spoof emails that look like they come from Pottermore and sound like they come from Pottermore.

If I remember Anti-Phishing 101, you need to look at the address that the email comes from - not just where it purports to come from.

I'm a bit tired at the moment, so... what are some other tips for battling phishing?

[Tenshi]

Ah ok. Sorry, must have misread it.

[ccollinsmith]

Originally Posted by Tenshi

Ah ok. Sorry, must have misread it.

No worries. It was a relevant question, and if you were confused by what I posted, then probably some other people were too. So it's good that you raised the question because we don't want people to think they can actually login to Pottermore and change their usernames.

[fawkes79]

So, do we think anything is going to happen on Pottermore at midnight BST?

[ThePatronusFox]

Originally Posted by fawkes79

So, do we think anything is going to happen on Pottermore at midnight BST?

I'm thinking that they'll start sending out the welcome emails going by UK's time. So when it turns midnight in the UK, we might start hearing that people have received their welcome emails already.

It's almost midnight in the UK, so we'll see! Hopefully they do go by UK's time.