I know when I go into the full admin section the things I cannot see are passwords and private messages as these are , I think, encrypted. perhaps Nick can confirm this. I suppose the rest like posts are fair game out there and if anyone wanted to hack it would be fairly easy as BB boards are very wide spread and on general supply so easy to get the main data to go through the system and work out.
We have had the info on names and location for years and never had any problem that I know about. Are we all getting a bit paranoid about the net and what hackers want to know - they could probably get more from my driving licence than what they would get off Moyboyz.
Profiles - What do Members want?
Re: Profiles - What do Members want?
I understand that (somewhere) there is a toggle for making PMs readable by site management. (I'm unsure at what level this 'privilege' kicks in.) However, if that setting is turned on, the site generates a warning for all members that PMs are not 100% private.
For the avoidance of any doubt, VBD PMs are private.
For the avoidance of any doubt, VBD PMs are private.
Re: Profiles - What do Members want?
Never seen that toggle and as I own and publish the site like NICK, have full access to all. If it is there then a new one on me. Maybe something in the SQL files is possible I suppose but I tend not to mess around to much with them.
Re: Profiles - What do Members want?
I think there are two different issues here:
- are the websites secure?
- is information exchanged with the websites securely?
The websites are secure and encrypt passwords. But information sent to and from the websites isn’t, because they use the http transfer protocol and not https. That means that someone could intercept and read passwords and user names as they pass over WiFi networks. Does it matter? It’s unlikely - but not impossible - that someone would deliberately attack VBD or Moyboyz (though didn’t it happen before?) but hackers often do things just because they can. It’s low but not zero risk. If it’s not expensive, I’d move to https anyway, but it’s got to be your call.
- are the websites secure?
- is information exchanged with the websites securely?
The websites are secure and encrypt passwords. But information sent to and from the websites isn’t, because they use the http transfer protocol and not https. That means that someone could intercept and read passwords and user names as they pass over WiFi networks. Does it matter? It’s unlikely - but not impossible - that someone would deliberately attack VBD or Moyboyz (though didn’t it happen before?) but hackers often do things just because they can. It’s low but not zero risk. If it’s not expensive, I’d move to https anyway, but it’s got to be your call.
Re: Profiles - What do Members want?
Christian name and region/country are enough detail without exposing ones self too much, should more be needed there's the pm's
reg
-
GHOSTHUNTER
- Moderator
- Posts: 12249
- Joined: Sun Sep 15, 2013 4:12 pm
Re: Profiles - What do Members want?
As with most things technical or internet based SSL certificates range in price from £10 to over £100 depending on the level of certificate needed which for this site would only require a low to medium level certificate so something in the order of £30 to £50.
What should happen first is to check with this sites host to see if they do offer their own certificate which may be a stand alone or part of a package purchase.
Installing the SSL certificate can be done by the sites admin who has some experience with such matters or otherwise it would need installing by an internet sourced installer which will have to be paid for.
I don't think we would have too many objections to members donating a small fee to the site for obtaining a certificate, maybe put that out there and see what responce we get!
Ghosthunter.
What should happen first is to check with this sites host to see if they do offer their own certificate which may be a stand alone or part of a package purchase.
Installing the SSL certificate can be done by the sites admin who has some experience with such matters or otherwise it would need installing by an internet sourced installer which will have to be paid for.
I don't think we would have too many objections to members donating a small fee to the site for obtaining a certificate, maybe put that out there and see what responce we get!
Ghosthunter.
Re: Profiles - What do Members want?
You are right Kevin but the host site installs the cert. The cost is a wee bit higher for just the basic and Nick covers his costs of running it but adding advertising which I do not as some of these ads place a cookie on your comp without even clicking on them as they come up for NIck as clicks per view.. So for all the security these ads can track where you have been - this is how facebook operates and then targets you with other ads.