Home | Community | Message Board
You are not signed in.
Sign In New Account
Forum Index Search Posts Trusted Vendors Highlights Galleries FAQ User List Chat Store Random Growery


This site includes paid links. Please support our sponsors.

Feedback and Administration > Website Announcements and Feature Feedback
Threaded Mode Threaded  Previous topic Previous  View all topics Index  Next topic Next 

Welcome to the Shroomery Message Board! You are experiencing a small sample of what the site has to offer. Please login or register to post messages and view our exclusive members-only content. You'll gain access to additional forums, file attachments, board customizations, encrypted private messages, and much more!

Shop: Sporeworks.EU Spores for European Microscopy   North Spore North Spore Mushroom Grow Kits & Cultivation Supplies

Jump to first unread post Pages: 1
this is kinda weird....and potentially very bad
    #3399006 -

the avatars link to remote sites, and if the remote site is password protected, it requests a password... this can be bad if used badly.... i came across this by accident when i was fucking with my apache server.

the following user is me, i needed to create it so that it only shows u what i mean within this thread, and not in every post i have.

Extras: Filter Print Post Top
Re: this is kinda weird....and potentially very bad [Re: thisisfortesting]
    #3399019 -

just asked me for a password and user n. :lol:


--------------------

Extras: Filter Print Post Top
Re: this is kinda weird....and potentially very bad [Re: thisisfortesting]
    #3399024 -

as you can see it requests for a password, although it says where its coming from and all that jazz its really simple for stupid people to give me their passwords.... what can be done to fix this without fucking up the cool avatars?

i can only think of requiring the avatars to be on the shroomery server, but this would increase bandwidth use alot im sure, and not to mention make it more difficult for people to have avatars =\

Extras: Filter Print Post Top
Re: this is kinda weird....and potentially very bad [Re: thisisfortesting]
    #3399032 -

thisisfortesting = me.... btw.

i think its a pretty major security risk even if it seems stupid to people who are computer literate...


--------------------
"A human being is part of a whole, called by us the Universe, a part limited in time and space. He experiences himself, his thoughts and feelings, as something separated from the rest--a kind of optical delusion of his consciousness. This delusion is a kind of prison for us, restricting us to our personal desires and to affection for a few persons nearest us. Our task must be to free ourselves from this prison by widening our circles of compassion to embrace all living creatures and the whole of nature in its beauty."
-Al Einstein

Extras: Filter Print Post Top
Re: this is kinda weird....and potentially very bad [Re: thisisfortesting]
    #3399047 -

and as i thought people who dot know what they are doing are giving me their passwords, well when i had it under amyloid by accident i got a couple, but i had to make apache print the failed pw in plaintext to the error.log


edit: well if you need another example ill turn it back on but i need to get back to fucking with apache.


--------------------
"A human being is part of a whole, called by us the Universe, a part limited in time and space. He experiences himself, his thoughts and feelings, as something separated from the rest--a kind of optical delusion of his consciousness. This delusion is a kind of prison for us, restricting us to our personal desires and to affection for a few persons nearest us. Our task must be to free ourselves from this prison by widening our circles of compassion to embrace all living creatures and the whole of nature in its beauty."
-Al Einstein

Edited by amyloid (11/23/04 05:02 PM)

Extras: Filter Print Post Top
Re: this is kinda weird....and potentially very bad [Re: amyloid]
    #3399110 -

This is the problem with every external image, not only avatars.
Images in posts, images in signatures.....
Yes, it is a security risk, but so is posting on a mushroom board.....
We are taking these concerns seriously though and are discussing the issue.


--------------------
Grow Mushrooms from Spores - PF-Tek for Simple Minds

Extras: Filter Print Post Top
Re: this is kinda weird....and potentially very bad [Re: amyloid]
    #3399111 -

why don't you upload your avatar to shroomery forum servers instead phoo?


--------------------

Extras: Filter Print Post Top
Re: this is kinda weird....and potentially very bad [Re: Super_Blunt]
    #3399467 -

i dont think you understand the problem. pm me if u want me to clarify.


--------------------
"A human being is part of a whole, called by us the Universe, a part limited in time and space. He experiences himself, his thoughts and feelings, as something separated from the rest--a kind of optical delusion of his consciousness. This delusion is a kind of prison for us, restricting us to our personal desires and to affection for a few persons nearest us. Our task must be to free ourselves from this prison by widening our circles of compassion to embrace all living creatures and the whole of nature in its beauty."
-Al Einstein

Extras: Filter Print Post Top
Jump to top Pages: 1

Shop: Sporeworks.EU Spores for European Microscopy   North Spore North Spore Mushroom Grow Kits & Cultivation Supplies

Feedback and Administration > Website Announcements and Feature Feedback
Threaded Mode Threaded  Previous topic Previous  View all topics Index  Next topic Next 

Similar ThreadsPosterViewsRepliesLast post
* Incorrect Password for Login? Murex 1,515 5 03/12/03 05:59 PM
by Murex
* Passwords CherryBomM 1,989 6 11/06/01 05:42 PM
by CherryBom
* password changes every time i go in prefs RedNucleus 1,234 5 07/10/03 10:25 PM
by matts
* whats wrong with the password e-mailing system? Crobih 1,634 5 04/07/02 04:27 PM
by Crobih
* Passwords LearyfanS 1,396 3 02/02/02 04:12 PM
by mariasabina
* i cant change my password ZippoZM 636 1 08/16/04 02:00 PM
by ZippoZ
* need temp password TheFear 1,586 3 07/22/02 05:20 AM
by Anno
* Anybody else getting requests for their password? lateralus 1,186 2 02/21/03 11:49 AM
by RemiMartin

Extra information
You cannot start new topics / You cannot reply to topics
HTML is disabled / BBCode is enabled
Moderator: Ythan, Thor, Seuss, geokills
767 topic views. 0 members, 2 guests and 8 web crawlers are browsing this forum.
[ Show Images Only | Sort by Score | Print Topic ]
Search this thread:

Copyright 1997-2026 Mind Media. Some rights reserved.

Generated in 0.026 seconds spending 0.007 seconds on 16 queries.