Cruizin Posted March 26, 2017 Share Posted March 26, 2017 Folks, Im in process of converting our entire forum over to HTTPS/SSL encryption. Our registration and login pages have always been ssl, but no the entire forum will be SSL encrypted for security reasons. So, that means I dont want to be serving unprotected HTTP pics over our HTTPS network. It doesn't make any sense to do so and leaves holes in security. Yes, Im aware that some forums, hell, many forums are http still and allow http pics. And this is how motorcycle. com forums all got hacked last year. Photobucket and Imgur both are http, and their pics are unprotected. So, pretty soon, I will be blocking them from the forum If you have pics that disappear, simply go to those posts, and click "add image to post" button, and re-upload those pics from your computer. And while we are on the subject, please take a minute and change your PASSWORDS. Try using a unique password that is at least 13 digits long and does not resemble a real word. Do not use the same password for your other sites here. I don't want your unsecure passwords on this forum. Want to know if your personal info has ever been hacked ? Visit this link and enter your emails one at a time https://haveibeenpwned.com/ It will tell you if any of your websites have been breached and your info leaked. Be prepared to be shocked. And, to go to those sites and change your passwords. it's 2017. If you are the type to use the same password everywhere, please delete you account here. Yamaha MT-10 ForumYamaha Tracer 900 Forum Yamaha Ténéré 700 Forum Link to comment Share on other sites More sharing options...
pineappleunderthesea Posted March 26, 2017 Share Posted March 26, 2017 So will you be hosting all the pics uploaded from now on, how will that work? How do you like password managers like LastPass? (especially when protected with 2-factor authentication?) You don't realize how many websites you visit until you use a password manager and change every single password... Link to comment Share on other sites More sharing options...
vroomvroom Posted March 26, 2017 Share Posted March 26, 2017 Folks, Im in process of converting our entire forum over to HTTPS/SSL encryption. Our registration and login pages have always been ssl, but no the entire forum will be SSL encrypted for security reasons. So, that means I dont want to be serving unprotected HTTP pics over our HTTPS network. It doesn't make any sense to do so and leaves holes in security. Yes, Im aware that some forums, hell, many forums are http still and allow http pics. And this is how motorcycle. com forums all got hacked last year. Photobucket and Imgur both are http, and their pics are unprotected. So, pretty soon, I will be blocking them from the forum If you have pics that disappear, simply go to those posts, and click "add image to post" button, and re-upload those pics from your computer. And while we are on the subject, please take a minute and change your PASSWORDS. Try using a unique password that is at least 13 digits long and does not resemble a real word. Do not use the same password for your other sites here. I don't want your unsecure passwords on this forum. Want to know if your personal info has ever been hacked ? Visit this link and enter your passwords one at a time https://haveibeenpwned.com/ It will tell you if any of your websites have been breached and your info leaked. Be prepared to be shocked. And, to go to those sites and change your passwrods. it's 2017. If you are the type to use the same password everywhere, please delete you account here. ++ for mentioning haveibeenpwned.com. Troy Hunt has done an excellent job with that site. Link to comment Share on other sites More sharing options...
Cruizin Posted March 26, 2017 Author Share Posted March 26, 2017 So will you be hosting all the pics uploaded from now on, how will that work? How do you like password managers like LastPass? (especially when protected with 2-factor authentication?) You don't realize how many websites you visit until you use a password manager and change every single password... Good questions, Ill answer it in a way to address everyone in a helpful way. And yes, lastpass is very good, so is onepass and others. click "add image to post" , and then when you get to the pic hosting site, click "browse your computer" , choose the pic you want to upload, and then click 'upoad" . Yamaha MT-10 ForumYamaha Tracer 900 Forum Yamaha Ténéré 700 Forum Link to comment Share on other sites More sharing options...
ddog Posted March 29, 2017 Share Posted March 29, 2017 @admin when is the rollout of the app expected? I know you mentioned it before but I can't find where. Link to comment Share on other sites More sharing options...
Cruizin Posted March 29, 2017 Author Share Posted March 29, 2017 The new theme/format is a little behind schedule but alot of really talented people are working on it. Then, when finished I will customize it to work for us, and then ill announce the launch. The ssl/conversion from http to https occurred yesterday, so the entire site is now encrypted and private. Now im just running down all of the old http plugins and images because serving unsecured http intances over a secure https domain is kinda like wearng the best protective helmet and jacket, but riding barefoot with shorts on. When it is all said and done, we wont need a phone app. The new theme/software will be 100% mobile friendly. No more "mobile" mode when connecting from a phone. All the features of the forum while on pc, will be available on phones too! Then nobody will have an excuse to be posting on the squid facebook groups instead of here, lol. Yamaha MT-10 ForumYamaha Tracer 900 Forum Yamaha Ténéré 700 Forum Link to comment Share on other sites More sharing options...
Cruizin Posted March 29, 2017 Author Share Posted March 29, 2017 *Notice* those of you who created your avatar with an imgur or photobucket link, instead of uploading it to the forum, your avatar will be going away soon in the next month or so. No fear, just upload it in "profile" instead of pasting in an http link. Just cleaning the forum up and ensuring that we are as safe as possible. And again, never log into a forum or website that says "http" in the address bar. Only enter your info into sites that say HTTPS in the browser address bar. This will become more and more important over the next few years, trust me. Or, trust edward snowden for warning us. Yamaha MT-10 ForumYamaha Tracer 900 Forum Yamaha Ténéré 700 Forum Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.