[Search]

If a user has 2FA enabled and has their online activity public, you can actually see them actively entering in their 2FA code.
Why is this enabled?

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Self-Ban

[0x27]

Wait, what fr?

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Scamming | https://doxbin.com/upload/0x27Doxxed | https://ibb.co/nqtc4prn

[Search]

Wait, what fr?

Yes. I saw it when I was viewing @ANE's profile today.

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Self-Ban

[0x27]

Damm, What the admins doing...

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Scamming | https://doxbin.com/upload/0x27Doxxed | https://ibb.co/nqtc4prn

[Baphomet]

Can you elaborate?

Are you asking us to remove account activation for new accounts, or is there something for users current activity that show someone entering their 2FA to login? This shouldn't pose any security thread but happy if you can elaborate more.

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.

[chud]

Can you elaborate?

or is there something for users current activity that show someone entering their 2FA to login?

Yes, but I don't think this is a security issue.

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Requested.

[Baphomet]

This is just something built into mybb, but I don't believe has any known security issues from my research on it. If someone is able to provide credible proof this is a security risk or requires further action please reach out to me.

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.