Jump to content

Account Registration Errors

PappaDock

By PappaDock
in Illinois Concealed Carry Licensing Process

Recommended Posts

PappaDock Welcome New Member

PappaDock

Posted
Posted

So has Illinois just decided to stop allowing new account registrations?

 

When I attempted to sign up as a new user at ispfsb.com, it allowed me to complete registration, but on submittal it gives me sn internal server error. https://i.imgur.com/MkyCjL6.jpg

 

When I try to login I get the exact same error.

 

This was two days ago, I'm going to call to see what the deal is, but I feel it's going to be difficult to get a hold of someone since they don't answer emails.

 

Is there a paper application available I can send in, or would I still have to call for that too?

Link to comment
Share on other sites
PappaDock Welcome New Member

PappaDock

Posted
  • Author
Posted

I tried the contact info on the FSB website (ASK_FOID@isp.state.il.us) , but it bounced saying the mailbox doesn't exist. So I used the form found here: https://www.isp.state.il.us/foid/foidinquiry.cfm

 

Crossing my fingers that I can get through at lunch time. Just think it's weird for the website to be useless for new account registrations, especially since the only other option is to call. Kind of hard when you work most of the hours they're available.

Link to comment
Share on other sites
PappaDock Welcome New Member

PappaDock

Posted
  • Author
Posted

Oh wow, how silly and asinine. The system appears to have a password character limit, but it doesn't tell you what it is. It will just let you create the account, but won't let you login. I created my original password with 16 characters, changed it to another 16 character password via forgotten password option, but the account ignored it.

 

I then changed it to one with 9 characters and I'm able to login in. I don't understand why a government agency would sacrifice password entropy for a miniscule performance tradeoff.

 

So hopefully this thread helps anyone with the same issue dealing with this poorly designed web application.

 

Thanks Craig and Molly for responding and trying to help out. But unfortunately you two can't fix lack luster government IT systems.

Link to comment
Share on other sites
Euler Member

Euler

Posted
Posted

Oh wow, how silly and asinine. The system appears to have a password character limit, but it doesn't tell you what it is. It will just let you create the account, but won't let you login. I created my original password with 16 characters, changed it to another 16 character password via forgotten password option, but the account ignored it.

...

I encountered a similar error when I signed up (password length). I guess they haven't fixed it.

 

EDIT: Here it is.

When I made a new account a few years ago, I got that error with my brand new account. It took some debugging, because the ISP was no help (surprise).

 

If the password you try to set is longer than the maximum (which I think is 15 characters), the system won't warn you. (At least it didn't warn me at the time. Maybe they fixed it. Maybe they didn't.) Then when you later try to authenticate, obviously nothing you enter less than or equal to the maximum length will match.

 

If that's your problem, reset the password to something 15 characters (or less).

Link to comment
Share on other sites
PappaDock Welcome New Member

PappaDock

Posted
  • Author
Posted

 

Oh wow, how silly and asinine. The system appears to have a password character limit, but it doesn't tell you what it is. It will just let you create the account, but won't let you login. I created my original password with 16 characters, changed it to another 16 character password via forgotten password option, but the account ignored it....

I encountered a similar error when I signed up (password length). I guess they haven't fixed it.EDIT: Here it is.

When I made a new account a few years ago, I got that error with my brand new account. It took some debugging, because the ISP was no help (surprise).If the password you try to set is longer than the maximum (which I think is 15 characters), the system won't warn you. (At least it didn't warn me at the time. Maybe they fixed it. Maybe they didn't.) Then when you later try to authenticate, obviously nothing you enter less than or equal to the maximum length will match.If that's your problem, reset the password to something 15 characters (or less).

Yep that is what I had to do.

 

Certainly they have server/application log entries, but I've done enough computer security audits to realize IT doesn't even look at those.

 

But at least you would think Illinois could at least implement NIST guidelines for password policies which recommend passwords be between 8 and 64 characters and not arbitrarily restricting certain special characters.

 

But who am I kidding, they want all my sensitive data, then act shocked when they get hacked.

Link to comment
Share on other sites
PappaDock Welcome New Member

PappaDock

Posted
  • Author
Posted

They have multiple website and application vendors. I am not clear who does what, when, or why. Theres the state IT group (DOIT?), Appriss out of KY I think, and 1 or 2 more. Many things they should be fixing but arent. e.g. inability to use mobile devices.

Who should I complain to, or is it mostly futile due to "budget issues"?

Link to comment
Share on other sites
InterestedBystander Member

InterestedBystander

Posted
Posted

 

They have multiple website and application vendors. I am not clear who does what, when, or why. Theres the state IT group (DOIT?), Appriss out of KY I think, and 1 or 2 more. Many things they should be fixing but arent. e.g. inability to use mobile devices.

Who should I complain to, or is it mostly futile due to "budget issues"?
They dont answer phone calls usually, if you get a call pick up they put you on a 3 week call back which may or may not happen, it appears they dont respond to emails anymore, dont think Molly has the same contacts as pre-JBP...so it seems sadly futile. and I dont have an answer to your question. Not so sure that it is budget in spite of their claims. Do the math on what they have taken into the FSB fund unless they have swept that for other departments which the law establishing the fund says is not allowed.

 

edit: Tweets to the ISP account also appear to get no responses.

Link to comment
Share on other sites
PappaDock Welcome New Member

PappaDock

Posted
  • Author
Posted

 

 

They have multiple website and application vendors. I am not clear who does what, when, or why. Theres the state IT group (DOIT?), Appriss out of KY I think, and 1 or 2 more. Many things they should be fixing but arent. e.g. inability to use mobile devices.

Who should I complain to, or is it mostly futile due to "budget issues"?
Do the math on what they have taken into the FSB fund unless they have swept that for other departments which the law establishing the fund says is not allowed.

Does Pritzker's custom-made suits count as a department?

Link to comment
Share on other sites
BigJim Member

BigJim

Posted
Posted

They dont answer phone calls usually, if you get a call pick up they put you on a 3 week call back which may or may not happen, it appears they dont respond to emails anymore, dont think Molly has the same contacts as pre-JBP...so it seems sadly futile. and I dont have an answer to your question. Not so sure that it is budget in spite of their claims. Do the math on what they have taken into the FSB fund unless they have swept that for other departments which the law establishing the fund says is not allowed.

 

Money collected from gun owners is being used to push the anti-gun agenda. Nothing like spending your enemy's money against them.

 

Sent from my SM-G955U using Tapatalk

 

 

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...