EB Login page "not safe"?

Share your thoughts or ask all your questions about ExpressoBeans here.

Postby murdock on Tue Apr 24, 2018 2:09 am

In the last few days, I noticed that the EB login page is marked as "not safe" by my browser. This goes across devices and OS (phone/desktop), so it has me worried... Anyone else notice this?
User avatar
murdock
Art Expert
 
Status: Active
Posts: 4163
Joined: Wed Dec 15, 2010 6:57 am
Location: Germany
Image Image Image Image

Postby fallstaff on Tue Apr 24, 2018 2:51 am

I had the same issues. I added the prefix https:// to the address for a secure connection.
User avatar
fallstaff
Art Connoisseur
 
Status: Active
Posts: 366
Joined: Sun Jun 28, 2015 3:18 pm
Location: Oakland, CA

Postby murdock on Tue Apr 24, 2018 3:20 pm

Huh... what do you know... that actually makes a difference. Will keep an eye on this. Definitely churn heavy if that manual addition is needed every time. Especially since every second time I visit the site, I find myself logged out and need to log in again to post etc.
User avatar
murdock
Art Expert
 
Status: Active
Posts: 4163
Joined: Wed Dec 15, 2010 6:57 am
Location: Germany
Image Image Image Image

Postby chevyav53 on Tue Apr 24, 2018 3:32 pm

Best thing to do is add the https:// to the beginning of the URL to ensure there is a secure connection.... and inform the site hostmaster as it appears this will do. If there isn't a secure connection at the log in you are at risk. Many sites will say you are redirected to a or through a secure log in page but if you don't see it upfront always be cautious and don't use the same log in and password across sites.
User avatar
chevyav53
Art Connoisseur
 
Status: Active
Posts: 810
Joined: Thu Jan 26, 2017 4:11 pm

Postby jjttdw on Tue Apr 24, 2018 3:34 pm

don't worry murdock, the EU privacy laws will protect you.
User avatar
jjttdw
Art Expert
 
Status: Active
Posts: 4910
Joined: Thu Feb 25, 2010 11:45 pm
NEWPORTS69 wrote:ive kept journal for very long time and ranked public restrooms because i srs hate using them, was working on an app but im not very smart

Postby murdock on Tue Apr 24, 2018 3:42 pm

:P
User avatar
murdock
Art Expert
 
Status: Active
Posts: 4163
Joined: Wed Dec 15, 2010 6:57 am
Location: Germany
Image Image Image Image

Postby GreenMt on Tue Apr 24, 2018 4:52 pm

chevyav53 wrote:Best thing to do is add the https:// to the beginning of the URL to ensure there is a secure connection.... and inform the site hostmaster as it appears this will do. If there isn't a secure connection at the log in you are at risk. Many sites will say you are redirected to a or through a secure log in page but if you don't see it upfront always be cautious and don't use the same log in and password across sites.


As a person pretty ignorant about computers, how serious an issue is this here, and at other sites?
User avatar
GreenMt
Art Expert
 
Status: Active
Posts: 1250
Joined: Thu May 17, 2007 12:00 am
Location: New Jersey

Postby chevyav53 on Tue Apr 24, 2018 5:32 pm

GreenMt wrote:
chevyav53 wrote:Best thing to do is add the https:// to the beginning of the URL to ensure there is a secure connection.... and inform the site hostmaster as it appears this will do. If there isn't a secure connection at the log in you are at risk. Many sites will say you are redirected to a or through a secure log in page but if you don't see it upfront always be cautious and don't use the same log in and password across sites.


As a person pretty ignorant about computers, how serious an issue is this here, and at other sites?


I'm not an engineer or coder just work in security so have some knowledge. The moderators could comment more on their setup and security to ensure their code is safe from XSS (Cross-site scripting), SQL injections etc.... the worry when you don't see https:// at a login page is that it may indicate other vulnerabilities or lax in security. That could mean logins, credit card information could be insecure. Always look for https:// don't store your credit card unless you 100% trust a site, don't use the same login across sites especially with your bank, email and other sensitive accounts and change your passwords often.

Another more likely attempt to seal your info is man in the middle attacks i.e. if you use free wifi networks at Starbucks etc.. you are very vulnerable or you could just give your information up through a Phishing scam. Have to be careful and read up on current methods and ways to stay protected.
User avatar
chevyav53
Art Connoisseur
 
Status: Active
Posts: 810
Joined: Thu Jan 26, 2017 4:11 pm

Postby Codeblue on Tue Apr 24, 2018 6:58 pm

GreenMt wrote:how serious an issue is this here

On a site like this, 0.1 out of 10.
User avatar
Codeblue
Art God
 
Status: Active
Posts: 49595
Joined: Sun Nov 07, 2004 1:00 am
Location: Expresso Beans
RupertPupkin wrote:I live by this rule and this rule alone: people are drymounting idiots.

Postby bryndavies on Tue Apr 24, 2018 8:25 pm

Staying protected sounds like a lot of work. I prefer to through caution to the wind and let the universe decide when, where and how to drymount me.
User avatar
bryndavies
Art Expert
 
Status: Active
Posts: 9804
Joined: Tue Dec 29, 2009 6:44 pm
Location: The Last Frontier
ImageT.K.C.

Postby comountaingolf on Tue Apr 24, 2018 8:30 pm

Einstein called that The Glory Hole conundrum :pint:
User avatar
comountaingolf
Art Expert
 
Status: Active
Posts: 9786
Joined: Mon Nov 10, 2008 6:36 pm
Location: The 19th Hole
Jim Carr wrote:The fans are standing up to them! The security guards are standing up to them! The peanut vendors are standing up to them!


Image THC X 8


Return to Help and Suggestions



Who is online

Users browsing this forum: tdimatt and 11 guests