|
03-09-2017, 02:55 PM | #1 |
Join Date: Jul 2007
Location: Peoples Republic of New York State
Posts: 15,154
|
connection not secure
Anyone else get a message when signing in to this site that says the connection is not secure?
I just started getting it yesterday.
__________________
Tim "TC" Conley VBA #9 2011 Victory Kingpin mine 2013 Victory Boardwalk -hers [LEFT][COLOR=#000000] [SIZE=4] Login or Register to Remove Ads |
|
03-09-2017, 03:17 PM | #2 |
Top Contributor
Join Date: Feb 2008
Location: Ontario
Posts: 6,984
|
no message here
|
|
03-09-2017, 03:23 PM | #3 |
Advanced Member
Join Date: Sep 2015
Location: Grand Prairie, TX
Posts: 654
|
If you're using FireFox, it's a new feature they started using. Been getting in on my computer so I clicked on it to see what it was.
__________________
2011 Vaquero V&H slip ons Roaring Toyz intake PCV (removed) Ivan's ECU flash |
|
03-09-2017, 05:17 PM | #4 |
Advanced Member
Join Date: Dec 2009
Location: Cleveland Ohio
Posts: 714
|
Wow, after all these years and I never noticed. We log in with a password but the site does not use SSL.
|
|
03-09-2017, 05:40 PM | #5 | |
Join Date: Jul 2007
Location: Peoples Republic of New York State
Posts: 15,154
|
Quote:
It said it on the VOG forum also. Soooooooo, this is not a secure sit? If you use the same password on other sites it could be hacked. Who knew, been on here since 2007 and now find out we are not secure
__________________
Tim "TC" Conley VBA #9 2011 Victory Kingpin mine 2013 Victory Boardwalk -hers [LEFT][COLOR=#000000] [SIZE=4] Login or Register to Remove Ads |
|
|
03-09-2017, 07:14 PM | #6 |
Advanced Member
Join Date: Dec 2009
Location: Cleveland Ohio
Posts: 714
|
I am embarrassed as heck for not noticing. I do IT and IT Security for a living. I do use unique passwords for anything remotely important.
FWIW, it would be a reasonably sophisticated attack to grab our passwords from the site via the opening we have with no SSL. Someone would have to sniff the wire between us and the site, or pull of a pretty sophisticated man in the middle attack where they pretended to be the site. Since the site isn't much of a target, I wouldn't freak out over it. But it should be fixed, not everyone realizes they should no reuse passwords. |
|
03-09-2017, 10:35 PM | #7 |
Join Date: Jul 2007
Location: Peoples Republic of New York State
Posts: 15,154
|
Dave is contacting Administration to see what needs to be done to fix the security of the site.
__________________
Tim "TC" Conley VBA #9 2011 Victory Kingpin mine 2013 Victory Boardwalk -hers [LEFT][COLOR=#000000] [SIZE=4] |
|
03-10-2017, 05:15 AM | #8 |
Administrator
Join Date: Sep 2011
Location: NY
Posts: 421
|
It's pretty common for forums, and any site that doesn't transfer sensitive info, to be 'unsecured.' We don't require credit card info or any other private material, and thus, like said earlier, aren't exactly a big target. Not to mention, it slows the site speed down. I rarely see the forums I visit (and there's quite a lot of them) with an SSL cert. You see secure connections more on banking sites and such.
Now with that said, we may actually implement this in the near future for other reasons, but that's still up in the air.. I'll keep you posted. For now, you really have nothing to worry about. By the way, I would hope everyone would know not to use the same password on sites they exchange sensitive info on, with any other sites. ;) |
|
03-10-2017, 10:01 AM | #9 | |
Join Date: Jul 2007
Location: Peoples Republic of New York State
Posts: 15,154
|
Quote:
Thanks for the info Mike .
__________________
Tim "TC" Conley VBA #9 2011 Victory Kingpin mine 2013 Victory Boardwalk -hers [LEFT][COLOR=#000000] [SIZE=4]
Last edited by Top Cat; 03-10-2017 at 10:11 AM.
|
|
|
03-10-2017, 02:08 PM | #10 |
Administrator
Join Date: Sep 2011
Location: NY
Posts: 421
|
No problem. :)
|
|
03-10-2017, 06:50 PM | #11 |
Sr. Member
Join Date: Apr 2009
Location: Hot Springs, SD and other warm and dry places
Posts: 1,043
|
This is one of several bike forums I go to and with the "new" Firefox they all show the same "unsecure" message.
|
|