The following warnings occurred:
Warning [2] Undefined variable $search_thread - Line: 60 - File: showthread.php(1617) : eval()'d code PHP 8.1.28 (Linux)
File Line Function
/inc/class_error.php 153 errorHandler->error
/showthread.php(1617) : eval()'d code 60 errorHandler->error_callback
/showthread.php 1617 eval




Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Security
#7
It's always been insecure because as Tony mentions because the site is using HTTP not HTTPS. The difference between those two is when using HTTPS all the messages between the client (your computer) and the server are encrypted so no one can in theory eavesdrop on them. Does it matter on essentially a public forum like this? Probably not.

Different browsers will sometimes warn you in different ways so it sounds like some browsers have updated and are now more aggressively showing the warning. The reason is so that if someone sends you a fake email pretending to be from your bank say and you click on a link in it without checking the actual address they could send you to an insecure site.

These days it's best to consider nothing as being that safe online. Definitely for any site you're sending personal or important information (like banking) always use HTTPS. Also always use different passwords for the very important stuff because data is leaked all the time. Assume anything you put online, no matter how secure, will be breached at some point so think in terms of minimising any damage a breach will cause.

One trick if you use gmail for your email address is you can add a + sign into the first part of the address and all email still comes to you. So if your gmail address is name@gmail.com you can use name+austin7@gmail .com or name+anything@gmail.com and you'll get the mail. The beauty of that is you can use that to have a different email address to sign up for things. Then when they have a data leak you can tell which site leaked. 

You can check if your email is associated with any leak here: https://haveibeenpwned.com/ (yes, that site is safe to use, you only enter an email address).

Those data breaches are why you now get emails from people saying they hacked your computer and know your password (and they include it in the email). They bulk send those blackmail messages out hoping some percentage will reply and be scammed. If you get one, ignore it, never reply and make sure you're not using that password anywhere else. It's handy of them to tell you which password is compromised actually. 

For some sobering reading here is the list of data breaches. And that's KNOWN data breaches. Note there are some very big names in there.

https://en.wikipedia.org/wiki/List_of_data_breaches

Simon

Oh, and the reason it's not a silly thing for the browsers to do it is to prevent phishing type attacks through email. Someone can send you an email that looks exactly like it's from your bank say with an message asking you to log in via a link. Click that link and you get sent to a page. It looks just like your bank so you enter your details but if you don't check the actual URL you might not be logging into your bank. You've just given someone your details. The 'not secure' is just another check that the page isn't where you think it is.

Never click any sort of link like that in an email directly to be safe. If an email asks you to log in somewhere it's always safest to manually go to the site and do it there.

If you do see the not secure then definitely question it so yes, was definitely worth a mention Tim!

Simon
Reply


Messages In This Thread
Security - by Tiger - 06-04-2019, 05:48 PM
RE: Security - by Duncan Grimmond - 06-04-2019, 06:14 PM
RE: Security - by Tiger - 06-04-2019, 06:16 PM
RE: Security - by Tony Griffiths - 06-04-2019, 06:32 PM
RE: Security - by AllAlloyCup - 06-04-2019, 06:40 PM
RE: Security - by Howard Wright - 06-04-2019, 06:42 PM
RE: Security - by jansens - 06-04-2019, 09:31 PM
RE: Security - by Andy Bennett - 07-04-2019, 08:37 AM
RE: Security - by Tony Griffiths - 08-04-2019, 01:38 AM

Forum Jump:


Users browsing this thread: 1 Guest(s)