Simviation Forum - IMPORTANT-Security issue

May 29^th, 2004 at 10:12am

GWSimulations Offline
Colonel
I am a developer, if you
want an addon, just ask*
UK

Posts: 746

I think that Simviation needs a more secure "Change password" form. At the moment, you can change the password, whenever you are logged in, even if you don't know the old one. Say someone logged on in an internet cafe, and then went to the toilet. While they were gone, a hacker coluld have changed their password and e-mail. I think you should have to put in the old password to change the password or e-mail address. Sad

GW_Simulations&&http://www.freewebtown.com/gwsimulations&&Founder & President, Advanced UK Scenery Project (AUKSP)&&http://www.ukscenerydesign.co.uk/auksp&&Classic Aviation&&http://classicaviation.12.forumer.com/index.php&&&&*See the GW_Simulations Website for more details.

Back to top

IP Logged

Reply #1 - May 29^th, 2004 at 10:46am

pete Offline
Admin
'That would be a network
issue'
Cloud Cuckoo Land

Posts: 8500

If this is a security issue & out of 2 years use I have never heard of this on this forum - it is a YABB security issue & the only way to get around it is to have a new forum.

There is supposed to be a new version of YABB out soon (which may or may not have this built in) & at this stage the plan is to upgrade accordingly.

Think Global. It's the world we live in.

Back to top

IP Logged

Reply #2 - May 29^th, 2004 at 11:14am

Scottler Offline
Colonel
Albany, New York USA

Gender:
Posts: 5989

Quote:

Say someone logged on in an internet cafe, and then went to the toilet.

All due respect, but he who does this deserves what they get. Wink

Great edit, Bob.&&&&&&Google it. &&&&www.google.com

Back to top

IP Logged

Reply #3 - May 29^th, 2004 at 11:17am

GWSimulations Offline
Colonel
I am a developer, if you
want an addon, just ask*
UK

Posts: 746

Quote:

All due respect, but he who does this deserves what they get. Wink

It's just an example.

GW_Simulations&&http://www.freewebtown.com/gwsimulations&&Founder & President, Advanced UK Scenery Project (AUKSP)&&http://www.ukscenerydesign.co.uk/auksp&&Classic Aviation&&http://classicaviation.12.forumer.com/index.php&&&&*See the GW_Simulations Website for more details.

Back to top

IP Logged

Reply #4 - May 29^th, 2004 at 11:32am

Scottler Offline
Colonel
Albany, New York USA

Gender:
Posts: 5989

Oh I know, but if someone isn't going to take basic security precautions, there isn't much Pete or anyone else can do to protect them.

It would be like asking Visa to not print the number of your credit card account on the card itself because someone could leave it sitting unattended on the check out counter of Macy's and the number could be copied.

If you do it, you're an idiot (don't mean you Graham), and it's been my experience that you can go out of your way to protect the idiots of the world and they'll still find a way to get in trouble. Wink

Great edit, Bob.&&&&&&Google it. &&&&www.google.com

Back to top

IP Logged

Reply #5 - May 29^th, 2004 at 12:13pm

Saitek Offline
Colonel
UK

Gender:
Posts: 7555

Yep definately. I think we just generally need common sense. I would be always very careful leaving my password or showing/typing my password for anything in any public place.
There are to many people out there who want to cause trouble, just for the sheer 'fun' of it. I suggest that improving security on a website is only half the problem solved. I think if we are on lookout and are careful then thats 99% of the problem solved. Roll Eyes

Ben

Windows 7 Pro 64bit
Intel Core 2 Duo E2180 2GHz
GA-P35-DS3L Intel P35
Kingston HyperX 4GB (2x2) DDR2 6400C4 800Mhz
GeForce 8800 GT 512MB
2 x 22" monitors
200GB Sata
Be Quiet! Straight Power 650W

Flying FSX with Saitek's pro flight range:
Radio
Switch panel
Auto-pilot
Yoke and throttle quad
Pedals

Back to top

IP Logged

Reply #6 - May 29^th, 2004 at 12:28pm

Fozzer Offline
Colonel
An elderly FS 2004 addict!
Hereford. England. EGBS.

Posts: 24861

....and I ALWAYS wash my hands after leaving the toilet and returning to the Cafe... Roll Eyes

...!
...trust me... Wink

...!
LOL...LOL...LOL..!

Cheers all... Grin

...!

Paul.

Dell Dimension 5000 BTX Tower. Win7 Home Edition, 32 Bit. Intel Pentium 4, dual 2.8 GHz. 2.5GB RAM, nVidia GF 9500GT 1GB. SATA 500GB + 80GB. Philips 17" LCD Monitor. Micronet ADSL Modem only. Saitek Cyborg Evo Force. FS 2004 + FSX. Briggs and Stratton Petrol Lawn Mower...Motor Bikes. Gas Cooker... and lots of musical instruments!.... ...!
Yamaha MO6,MM6,DX7,DX11,DX21,DX100,MK100,EMT10,PSR400,PSS780,Roland GW-8L v2,TR505,Casio MT-205,Korg CX3v2 dual manual,+ Leslie 760,M-Audio Prokeys88,KeyRig,Cubase,Keyfax4,Guitars,Orchestral,Baroque,Renaissance,Medieval Instruments.

Back to top

IP Logged

Reply #7 - May 29^th, 2004 at 12:36pm

Scottler Offline
Colonel
Albany, New York USA

Gender:
Posts: 5989

That's just because the second you get back you start cooking, Paul.

Great edit, Bob.&&&&&&Google it. &&&&www.google.com

Back to top

IP Logged

Reply #8 - May 29^th, 2004 at 1:06pm

Fozzer Offline
Colonel
An elderly FS 2004 addict!
Hereford. England. EGBS.

Posts: 24861

Quote:

That's just because the second you get back you start cooking, Paul.

Hi Scott...!
Definately...!
...Just got a very nice cauliflower cheese dinner down my neck, after locking the doors and windows, to prevent the dead-beat, hangers-on, hoping for some left-overs... Wink

...!
It's all part of the security thing... Wink

...!
LOL...!

Cheers Scott.. Grin

..!

Paul.

Dell Dimension 5000 BTX Tower. Win7 Home Edition, 32 Bit. Intel Pentium 4, dual 2.8 GHz. 2.5GB RAM, nVidia GF 9500GT 1GB. SATA 500GB + 80GB. Philips 17" LCD Monitor. Micronet ADSL Modem only. Saitek Cyborg Evo Force. FS 2004 + FSX. Briggs and Stratton Petrol Lawn Mower...Motor Bikes. Gas Cooker... and lots of musical instruments!.... ...!
Yamaha MO6,MM6,DX7,DX11,DX21,DX100,MK100,EMT10,PSR400,PSS780,Roland GW-8L v2,TR505,Casio MT-205,Korg CX3v2 dual manual,+ Leslie 760,M-Audio Prokeys88,KeyRig,Cubase,Keyfax4,Guitars,Orchestral,Baroque,Renaissance,Medieval Instruments.

Back to top

IP Logged

Reply #9 - May 30^th, 2004 at 12:14am