This message is normal? It goes to an unsecure page. I don't want to try forward .. Please see attachments.

That's odd, I'm curious what Shutterstock has to say about this.

I've got the same message. Wondering, if it could be really necessary to confirm the email address after almost 7 years (in my case).  So I think, this must be phishing!

I've got the same message. Wondering, if it could be really necessary to confirm the email address after almost 7 years (in my case).  So I think, this must be phishing!

Well, if it's a phishing scam, I just fell for it.  And I got a "confirm your email" link back that appears to be entirely legitimate.

Who knows why they might do this after so many years of accepting a certain email (like mine or yours), but IMHO it does appear to be legit.

Hi everyone,

We apologize for the confusion - we want to ensure that all users on our site are safe and secure and are taking an extra step to ensure that your data is safe. We have fixed the unsecure link now and would greatly appreciate if those that see the message can verify their email address. Thank you!

Vincent

Vincent, as long as you're here� can you possible change the ridiculous captcha routine that makes us jump through repetitive photo-identifying hoops whenever we try to log into our own accounts?

That's a fairly new wrinkle at SS, and it's not especially appealing.

Thanks!

I'm not sure anyone has ever gotten a Captcha right on their first try anywhere in the world.

Vincent, as long as you're here� can you possible change the ridiculous captcha routine that makes us jump through repetitive photo-identifying hoops whenever we try to log into our own accounts?

That's a fairly new wrinkle at SS, and it's not especially appealing.

Thanks!
[/quote]

+10 . i hate those capcha the first time. now the pictures are even more ridiculous.
yknow, even banks do not use capcha, so how necessary is this for stock agency. no one uses capcha   because they are hopelessly illegible.
not one financial site uses this capcha thing. if it is that safe, banks , financial business,etc would use them.

There is actually a bigger problem. The default log in page is not encrypted, it uses http rather than https. Chrome says the identity of the web site cannot be confirmed. The http site should automatically route users to the https site to ensure encryption is used to protect the data entered during log in by the user. This is web security 101.

Additionally when you manually enter the https vs http Chrome says the site uses weak security (SHA-1). Again Web Security 101. This was not the case previously. I suggest whoever is in charge needs to take a look at what is going on very carefully and users be very cautious.

Hi everyone,

We apologize for the confusion - we want to ensure that all users on our site are safe and secure and are taking an extra step to ensure that your data is safe. We have fixed the unsecure link now and would greatly appreciate if those that see the message can verify their email address. Thank you!

Vincent

The way it's worded reminds me a lot of regular spam e-mails. What if I don't want to click it? What happens then?

I verified my e-mail address as Vincent requested - and I too think that getting a "welcome" screen telling me I'm on the way to becoming a contributor is just amateur hour stuff. Harmless but indicates no one was paying attention to the details when doing this.

I did change my password, just as a precaution.

I also added my e-mail address for PayPal - which had become blank.

The first attempt gave me an error message saying the e-mail address wasn't properly formatted (it was). I did the same thing a second time and it succeeded and then I got this genius e-mail (I've changed the actual e-mail address):

Hi,
This email is to inform you that your account information below has recently been changed:

"Paypal/Moneybookers Email Address" was changed from "" to "[email protected]"

If you did not make these changes, please contact Shutterstock Support immediately.

Regards,
Shutterstock Support

It's possible that when the PayPal address is blank it will use your main e-mail address (which would be fine in my case), but it doesn't say that and I'd rather avoid payment problems next month.

Sad that they take so little precautions with our security. Strange to see a site being thanked for exposing our accounts to theft.

I also just noticed that my Paypal email address has been removed from my details on Shutterstock. This getting more concerning.

There is actually a bigger problem. The default log in page is not encrypted, it uses http rather than https. Chrome says the identity of the web site cannot be confirmed. The http site should automatically route users to the https site to ensure encryption is used to protect the data entered during log in by the user. This is web security 101.

Additionally when you manually enter the https vs http Chrome says the site uses weak security (SHA-1). Again Web Security 101. This was not the case previously. I suggest whoever is in charge needs to take a look at what is going on very carefully and users be very cautious.