wtf tumblr?

[ratcreature]

Tumblr forcibly logged me out, and refuses to let me log in via a webbrowser unless I change my password. Though it doesn't seem to have any problem to let me log into my account via the Android app.

Admittedly I haven't changed my password in a while, but still this is obnoxious behavior, in particular since they did not bother to sent me an email or such to explain or alert me to anything.

Comments

[lilacsigil]

Apparently they've had a security breach involving older accounts so they're making anyone affected change their passwords.

[ratcreature]

Urgh. Okay I've had mine since 2007, so I guess that counts as "older" in Tumblr time. I have no idea why they are still okay with me logging in via app though in this case, or why they couldn't bother to explain it with an email to me.

[lilacsigil]

Well, I can't speak as to their manners or user friendliness!

[ratcreature]

I guess that's typical Tumblr for you. I looked around a little bit and found posts by people who had been locked out because they forgot to keep the associated email current, and Tumblr didn't allow you to just log in and then demanded a password change, but forced you into the "forgotten password" reset via email. Those users were irritated quite a bit more than me.

Thankfully while I'm not good about frequently changing my passwords, I don't loose track which email I used where and removed old addresses in the few instances I changed email.

[domarzione]

I got the same thing and was greatly annoyed and ended up resetting my password to the same as the old one... then I saw a post about why and I changed it to a new one.

[ratcreature]

They really could have handled that better. Like with an email informing the affected users.

[ladyjanelly]

There has literally been nothing ever that Tumblr did that couldn't have been handled better.

[ratcreature]

Truth.

[astridv]

It hasn't happened to me yet but I keep hearing about it so they're probably doing them a bunch at a time.

[ratcreature]

Could also be that your account wasn't affected, either because you joined later or changed your password already since the security issue. (I hadn't changed mine in ages.) I've read somewhere it was something that happened in 2013 before Yahoo took over only they just noticed it now.

[astridv]

Ah, that's possible, I changed it only a few months ago.

[jimandblair.livejournal.com]

i run ghostery, restrict java and some scripts etc in firefox and tumblr effectively makes it impossible for me to use it. But again, if I log on through other routes, I can access the site. So, I assume that they tweaked things adn somethign in your linux set up and effecting log on.

[ratcreature]

No, I've since learned that they had some sort of security breach with emails/(hashed) passwords being compromised and they forced all affected users to reset their passwords, they just never communicated that directly via mail or in the password reset page they redirected you to, only via the staff tumblr, which I hadn't seen.

Also they forced the reset through the "forgotten password" reset via email, so apparently a bunch of people who failed keeping their mail address current now lost access to their blog (except via the apps but you can't change your password or your email by app).