8mm Forum: site not secure

This is topic site not secure in forum General Yak at 8mm Forum.

To visit this topic, use this URL:
https://8mmforum.film-tech.com/cgi-bin/ubb/ultimatebb.cgi?ubb=get_topic;f=8;t=005187

Posted by Jim Schrader (Member # 9) on April 12, 2019, 09:51 AM:

I just noticed this my browser says this site is not secure is Doug and Brad aware of this?

Posted by Jim Schrader (Member # 9) on April 15, 2019, 06:31 PM:

Apparently not

Posted by Michael Lattavo (Member # 4280) on April 15, 2019, 08:51 PM:

The way our company's website designer explained it is that it is just a new way for the major search engines to get more hosting revenue. We will probably end up paying the annual fee for our company, but it is really just for appearances.

Posted by Mathew James (Member # 4581) on April 15, 2019, 09:49 PM:

Jim,
1. You are correct that this site is not using encryption.
So...When you log into this site, your username and password is not encrypted currently under the site setup using the http: protocol, meaning if someone 'rogue' were using exploitation tools, they can see/capture data and decrypt it thus revealing your username or password, which they could then use to log into the site.
Once in the site, they could look at your PM, change things in your profile, etc...
On many many forums, for many many years, their was no SSL secure protocol one could use to encrypt the site data as it was transferred...we 'admins' dealt with the 'rogues' in the same way we do now...We kick them off once discovered. You can normally discover and ban IP addresses etc.. Trust me, these guys want banking info type sites, not film forums!
On our end(as users), some rules can be followed to help alleviate any heart palpitations occurring from this revelation of fact... Such as, Do not send PERSONAL BANKING info using PM, or delete PM's as a practice so if someone were to log in, they wouldn't see anything. Really, we shouldn't have any super sensitive info online anyways!

Now, the next question may be, why do our admins not just secure the site? Well, I can tell you from my own experience as a forum admin, for many years i didn't because a) i didn't have any issue or reason to, and b)the ripoff cost to pay for an SSL is stupid and unnecessarily expensive. What i did rather is moved my forums to a host that includes this(SSL) at their expense automatically in the package, not mine. For example hostpapa is one that includes, so my forums are now https:// automatically now.
I hope this helps explain a bit and gives some level of comfort. Cheers.

[ April 16, 2019, 09:30 AM: Message edited by: Mathew James ]

Posted by Douglas Meltzer (Member # 28) on April 15, 2019, 10:06 PM:

Thank you Jim, Michael and Mathew. I've brought this to Brad's attention.

Doug

Posted by Brad Miller (Member # 2) on April 16, 2019, 01:34 AM:

Matthew explained it pretty well. Unless you guys are using the same password here that you do for your online banking, you seriously have nothing to worry about.

Posted by Brian Stearns (Member # 3792) on April 16, 2019, 02:08 AM:

Anybody can read this forum and view what you say without signing in. So not really secure. That means any posted info on our private gathering Cinesea can be read. Need to implement a way to allow visitors to sign in to view the site like most sites.

Posted by Steve Klare (Member # 12) on April 16, 2019, 05:53 AM:

Brian,

I disagree: I think it's better for both this Forum and Cinesea if people can see what's going on.

Many of us were lurkers here and many at CineSea aren't Forum members either.

I wrote two immense photo essays about the weekend and part of the reason was I wanted to bring in new people.

Posted by Dominique De Bast (Member # 3798) on April 16, 2019, 06:12 AM:

Brian, what would you hyde what's happening at Cinesea ? Most of non American will never get the chance to attend this event, so it's great to see pictures and read reviews 😀

Posted by Paul Adsett (Member # 25) on April 16, 2019, 02:13 PM:

I agree with Steve and Dom, keep the forum open. You can't argue with success, this forum has been around for about 20 years, much longer than the others that have either folded or reverted to a state of suspended animation. In those 20 years no one has ever complained of their computer being hacked as a result of this forum activity.

Posted by Brian Stearns (Member # 3792) on April 16, 2019, 09:09 PM:

I was told from the horses mouth that Cinesea is a private gathering. So if it's an open site and anyone can read what's posted. There's a contradiction here. If it is a said private gathering then why post on an open site. You guys missed my point.

Posted by Lee Mannering (Member # 728) on April 16, 2019, 09:59 PM:

I agree its great to have a open space to share information about something we enjoy however the world has become a very different place now as we can all see eyes wide open.

Off topic but I have always thought it a great shame so many just sit back and read these forums but contribute zero. In a way it takes a great deal out of the film movement excuse the pun.

Take care all.

Posted by Steve Klare (Member # 12) on April 16, 2019, 10:31 PM:

I don't know about that, Lee!

Maybe we should be grateful all 6257 don't post on a daily basis: it would be bedlam!

Brian, I am going to have to talk to the Horses: I've been going to CineSea for nine years now and I've never gotten the impression it's private. It's certainly not by invitation and it's been talked about on multiple film forums.

We've never made it a goal to keep people out, to the contrary what bothers us a little is the people we are aware of that are within day trip range that won't give it a shot.

-it's like what my Mom used to say about Asparagus: "How can you say you don't like it until you've tried it once?"

(For the record: I tried it and don't like it anyway...Bleahhh!)

If CineSea is a secret it's one of the worst kept on the planet. One of the Horses has actually secured a Web domain for it. There are literally hours of YouTube videos and easily 10 photo essays about the goings-on.

-all we need is a Bat-Signal out by the pool!

Posted by Douglas Meltzer (Member # 28) on April 16, 2019, 10:49 PM:

Brian,

The "horse" you spoke with was legally correct. The difference between a public gathering and CineSea is that CineSea takes place on private property. Yes, we do ask people to attend the event however the public does not have "free or lawful access" to the space.

Doug

Posted by Steve Klare (Member # 12) on April 16, 2019, 10:58 PM:

-and at the same time if some interested party walked in without us personally inviting them we wouldn’t call for the bouncer!

-but they’ll never become interested if they don’t know about it.

Posted by Douglas Meltzer (Member # 28) on April 16, 2019, 11:05 PM:

....unless said party insisted that we screen the 400' digest of The Rose. We would then have to call the proper authorities.

Doug

Posted by Steve Klare (Member # 12) on April 16, 2019, 11:12 PM:

AGREED!

(There have to be limits!)

What’s fun is when somebody comes through that was really only in town for the beach! We become amazing to them!

(One young couple left with a projector and a couple of films!)

Posted by Douglas Meltzer (Member # 28) on April 16, 2019, 11:14 PM:

Now that we've said that, I'm sure some rapscallion will bring that print for the Saturday screening.

Posted by Steve Klare (Member # 12) on April 16, 2019, 11:42 PM:

I've been to the Corral: the Horse is right! The issue was my interpretation of "Private". In this case "Private" does not also mean "Secret".

All in favor, say "Nayyyy"!

Posted by Brian Stearns (Member # 3792) on April 17, 2019, 12:25 AM:

neigh [Smile]

Posted by Lee Mannering (Member # 728) on April 18, 2019, 01:37 AM:

Someone could turn up with a 17.5 Sound film along and throw a reel spanner in the works. [Eek!]

A Steve the Horse cartoon would be ideal!

Have a great time all.

Posted by Patrick Walsh (Member # 637) on April 18, 2019, 01:38 AM:

naww I like THE ROSE [Big Grin]

UBB.classic^TM 6.3.1.2