Possible Security Issue

Syobon · **Joined:** Mon Jan 24, 2011 10:34 am **Posts:** 15027

My school network has been banned from BBboard forums for some reason. That's not the point of this post however, I noticed something interesting in the resulting error message. I've edited it out but my password was displayed in plain text.

This seems to indicate to me that user passwords get passed to the server in plain text (as opposed to encrypted), which would be a huge security risk. I would therefore advise all users to not use the password you use for this forum for anything else (you should use different passwords for everything in the first place, but I know few people do that). I'll send Katie a PM to let her know about this.

iamthelordhitman · **Posted:** Mon Apr 20, 2015 7:40 am

wow thats

thats like playstation "keep the info in a bin outside" security issue right there

AngelicSongx · **Posted:** Mon Apr 20, 2015 10:43 am

People using the same passwords for everything? Whaaat? Who does that? No way do I do that.

Really though, thanks for the heads up, Syobon.

Syobon · **Joined:** Mon Jan 24, 2011 10:34 am **Posts:** 15027

If this isn't just me being paranoid, I'd suggest the proletariats make an announcement about it so people in the other subforums (le comic etc.) see this too. Because again, this would be a huge security issue.

[Citation Needed] · **Posted:** Mon Apr 20, 2015 3:08 pm

Thanks for the heads up, Syobon! I think my php class actually covered this sort of security issue just the other day, oddly enough.

SaintCrazy · **Posted:** Mon Apr 20, 2015 4:53 pm

Thanks for the warning dude.

Now to come up with a new password....

Shad · **Joined:** Tue Apr 14, 2009 9:43 pm **Posts:** 15289

Syobon wrote:

If this isn't just me being paranoid, I'd suggest the proletariats make an announcement about it so people in the other subforums (le comic etc.) see this too. Because again, this would be a huge security issue.

We can't do that, because we still haven't gotten the mod powers required to sticky and unsticky threads back.

Rinoko · **Posted:** Mon Apr 20, 2015 6:30 pm

Thanks for the warning Syo.

Changed my password and now I'm going to panic tomorrow until I remember that I changed it.

[Citation Needed] · **Posted:** Mon Apr 20, 2015 8:27 pm

Le Great Handsome Oppressor wrote:

We can't do that, because we still haven't gotten the mod powers required to sticky and unsticky threads back.

Wait what? When did this happen?

Turbro · **Joined:** Fri Apr 29, 2011 9:11 am **Posts:** 5475

There's a lot of issues with the mod panel at the moment, actually.

Exeres · **Posted:** Mon Apr 20, 2015 9:15 pm

Shit, now anybody could find out my password is ghostpenis!

AquaBat · **Joined:** Tue Jul 15, 2014 9:26 pm **Posts:** 2373

Oh no! If anyone finds out my password is "youarenowbreathingandblinkingmanually", I'm doomed!

[Insert Fail] · **Posted:** Tue Apr 21, 2015 11:32 pm

[Citation Needed] wrote:

Le Great Handsome Oppressor wrote:

We can't do that, because we still haven't gotten the mod powers required to sticky and unsticky threads back.

Wait what? When did this happen?

I accidentally removed the usergroup that gave us the ability to sticky topics. This was about a year or more back.

[Citation Needed] · **Posted:** Tue Apr 21, 2015 11:51 pm

Oh dear. Really lived up to your username, eh?
I am 100% certain I am a year or more late on that joke.

Syobon · **Joined:** Mon Jan 24, 2011 10:34 am **Posts:** 15027

Hey guys, I haven't had a response from Katie yet, so I figure she probably doesn't read forum PMs any more. Does any one, perhaps the proletariats, have a better way of contacting her?

As I said, this is kind of a big deal!

AWKWARD ZOMBIE

Possible Security Issue

Who is online