IM NOT MAAAAAAALLE CRIES

using ip addresses for authentication is extremely risky, even if switch users may not be able to easily access email. ill label a few reasons.
(1.) often, residential ip addresses are dynamic, so theyll change often. this can prevent someone from authenticating.
(2.) when a user requests a password change via email and doesnt receive an email, they are encouraged to contact bdns and submit their ip address. what if an attacker ip logs a user to take over their account? will the sender email address be verified, and what if the user registered with an email address they can no longer access? how will any of this be verified?
(3.) user accounts could be stolen if an attacker on a local network impersonates them.
while the attack scenarios can be considered edge cases, they still need to be considered, especially in a forum this large. someone is bound to run into one of these issues eventually.

instead of ip authentication, i suggest any of the following:

• knowledge based authentication. such as having multiple security questions that the user creates upon registration.
• access based authentication. force users to register with email addresses. for switch users, provide suggestions on email providers that are minimal and work with low resource consumption.

i dont mean to complain or whine about this password reset policy, im just concerned it could backfire and cause future issues.

@SweetLikeTarmac ofc, im glad its helpful!! tysm for the support<333 it truly means a lot and encourages me to keep it running and develop more tools

hallo friends!!!

given the lack of options for switch capable email providers, i have been working on making my own for the community to use. these are the features i already added and plan to add soon.

• lightweight with minimal resources needed, no more "Reload the page" prompts or ads slowing things down.
• minimum 1gb storage for every user (more storage if requested)
• modern but simple user interface
• for added security, a paid bug bounty program will be implemented (up to $500), as well as transparency on our security measures.
• emails dont land in spam folder (atm sending isnt set up yet, but receiving is working)

(for the most part, everything is already developed already and nearly production ready)

eventually i intend on also developing other switch-centered tools so the entire community has access to resources regardless of technical capability.

if you have any suggestions for this email provider, please let me know!!! i want this to be a community-driven project and i want to make sure everyone's needs and wants are met.

love, maple <3

@IM_N0T_ØKAY i wouldve offered help but i kinda got the vibe you wanted someone else to do the harder work and you can be the staff, this kinda confirms it

@Eggyz999 ikr fuck clankers they can go clank their little metal parts together away from us

go back to the factory where you came from clanker kys

regarding id verification, particularly for discord, there used to be a bypass to automatically verify your account without providing an id. discord's id verification platform had some vulnerabilities so really you just had to craft a special url, click it, boom id verified. i dont know if its been patched tho its been a few months since the exploit research was published (and to comply with rules - i am not encouraging or enabling bypassing rules or laws, just sharing what ive learned)

@Snoopy LMAOAOOAFNFJ I DID . he urged me to ethically disclose the exploit so i reluctantly did (and got paid $128 for it!!!)

@Yanderemenhera MWAH

@Aries idk it was some random person haha...... i would NEVER hack someone wink wink

@YourAriesBestie you just take your job too srsly, youve done this before with other joke posts i made

pawthetic? more like.. loserthetic hahahaha ..

maple says trans rights

uhhh opinion on my male?

tell

i jus remembered im pretty sure i made this exact post before im reusing old content

holy schmoly that was fast. i love you