Account login Security change - Escape Trailer Owners Community

Go Back   Escape Trailer Owners Community > Escape Community > Forum Help | Announcements | Suggestion Box
Click Here to Login
Reply
 
Thread Tools Display Modes
 
Old 01-03-2017, 06:48 PM   #1
Site Team
 
Janet H's Avatar
 
Join Date: Sep 2012
Location: Pacific NW, Washington
Trailer: 1964 Globetrotter
Posts: 430
Account login Security change

I wanted to let you know that in the next day or so you may see a small change to the site login screen. This is being done as we add an extra layer of security to usernames and passwords. The login pages, registration page and pages where you might update your account login info will be behind an https url rather than the usual http url.

This change is being made to stay current with recommended security practices and not in response to any problem with the site or accounts.

HTTPS adds security in several ways; verifying that the site is the one a server is supposed to be talking to and by preventing tampering by 3rd parties. It stops Man-in-the-middle attacks, improving security for both the site and for those logging in.

This should not impact your usual browsing experience. You will still login, still tick the remember me box, etc. The location of the login button has changed however and the page looks a bit different.
__________________

__________________
.
You have brains in your head. You have feet in your shoes.
You can steer yourself any direction you choose | Dr. Seuss


Escape Forum Custom Google Search
Janet H is offline   Reply With Quote
Old 01-04-2017, 12:04 AM   #2
Senior Member
 
Join Date: Dec 2012
Location: Edmonton, Alberta
Trailer: 1979 Boler B1700
Posts: 8,834
I noticed that the login page change has already occurred - I thought it was yesterday, but perhaps just this morning.

I think it's a little bizarre that any web site ever collected login credentials through an unencrypted connection in this century... and this forum still operates unencrypted for everything other than select pages. (The HTTPS transport means that information is encrypted.) At least the change is in the right direction.

The password change page is still not encrypted, so presumably that change is still coming...
__________________

Brian B-P is offline   Reply With Quote
Old 01-04-2017, 12:50 AM   #3
Senior Member
 
Join Date: Dec 2012
Location: Edmonton, Alberta
Trailer: 1979 Boler B1700
Posts: 8,834
Hmmm... the new secure login page is gone again, so maybe what I was seeing was a trial before the full deployment.
Brian B-P is offline   Reply With Quote
Old 01-04-2017, 09:59 AM   #4
Senior Member
 
J Mac's Avatar
 
Join Date: Sep 2010
Location: Kelowna, British Columbia
Trailer: 2008 Escape 17b
Posts: 1,871
what kind of cryptic information is being protected? Is/has there been some form of secret or private information collected on this site I only want the administration to be privy to?
J Mac is offline   Reply With Quote
Old 01-04-2017, 10:06 AM   #5
Site Team
 
Donna D.'s Avatar
 
Join Date: Nov 2008
Location: Portland, Oregon
Trailer: 2014 Escape 5.0 TA
Posts: 6,721
Quote:
Originally Posted by J Mac View Post
what kind of cryptic information is being protected? Is/has there been some form of secret or private information collected on this site I only want the administration to be privy to?
You must not have been around when FiberglassRV was hacked. We lost over 100,000 posts and ALL the pictures. It WASN'T pretty. Four of us spent almost three days straight trying to get back as much as we could. No there wasn't any process in place to backup the system (hindsight), but anything that's done to increase the security of a website such as this, is worth whatever inconvenience I may have momentarily.
__________________
Donna D.
Ten Forward
2014 Escape 5.0TA
Donna D. is online now   Reply With Quote
Old 01-04-2017, 10:12 AM   #6
Senior Member
 
J Mac's Avatar
 
Join Date: Sep 2010
Location: Kelowna, British Columbia
Trailer: 2008 Escape 17b
Posts: 1,871
Quote:
Originally Posted by Donna D. View Post
You must not have been around when FiberglassRV was hacked. We lost over 100,000 posts and ALL the pictures. It WASN'T pretty. Four of us spent almost three days straight trying to get back as much as we could. No there wasn't any process in place to backup the system (hindsight), but anything that's done to increase the security of a website such as this, is worth whatever inconvenience I may have momentarily.
Someone or something hacked into FiberglassRV and stole photos? It wasn't just a glitch in the system? What did the authorities (Police) say? This is very interesting!
J Mac is offline   Reply With Quote
Old 01-04-2017, 10:22 AM   #7
Senior Member
 
escape artist's Avatar
 
Join Date: Oct 2008
Location: St. Thomas not BVI., Ontario
Trailer: 2014 Escape 5.0TA
Posts: 5,193
Quote:
Originally Posted by J Mac View Post
Someone or something hacked into FiberglassRV and stole photos? It wasn't just a glitch in the system? What did the authorities (Police) say? This is very interesting!
Hi: J Mac... Prolly they said "Yes" MFRV was hacked& "No" there wasn't anything they could do about it IMHO!!! Alf
escape artist N.S. of Lake Erie
__________________
Quote Bugs Bunny..."Don't take life too seriously, none of us get out of it ALIVE"!!!
'10 Frontier CC. S.E. 4X4 Lng. Bed V6 '14 Escape 5.0TA
St.Thomas Ont.( Not the Virgin Islands)
escape artist is offline   Reply With Quote
Old 01-04-2017, 10:29 AM   #8
Senior Member
 
J Mac's Avatar
 
Join Date: Sep 2010
Location: Kelowna, British Columbia
Trailer: 2008 Escape 17b
Posts: 1,871
Quote:
Originally Posted by escape artist View Post
Hi: J Mac... Prolly they said "Yes" MFRV was hacked& "No" there wasn't anything they could do about it IMHO!!! Alf
escape artist N.S. of Lake Erie
Oh I see. Escape Forum assumes it was hacked.
J Mac is offline   Reply With Quote
Old 01-04-2017, 10:46 AM   #9
Site Team
 
Janet H's Avatar
 
Join Date: Sep 2012
Location: Pacific NW, Washington
Trailer: 1964 Globetrotter
Posts: 430
Quote:
Originally Posted by J Mac View Post
what kind of cryptic information is being protected? Is/has there been some form of secret or private information collected on this site I only want the administration to be privy to?
Your username and password are the issue here. When you transmit them to the server to log in there is some possibility they could be intercepted along the way and "repurposed". While the site itself doesn't have much sensitive info many folks use the same login info at many sites and so if that info fell into the wrong hands in theory it could be used in harmful ways. This is the reason for the change - to increase security of this info.
__________________
.
You have brains in your head. You have feet in your shoes.
You can steer yourself any direction you choose | Dr. Seuss


Escape Forum Custom Google Search
Janet H is offline   Reply With Quote
Old 01-04-2017, 10:49 AM   #10
Site Team
 
Donna D.'s Avatar
 
Join Date: Nov 2008
Location: Portland, Oregon
Trailer: 2014 Escape 5.0 TA
Posts: 6,721
Quote:
Originally Posted by J Mac View Post
Someone or something hacked into FiberglassRV and stole photos? It wasn't just a glitch in the system? What did the authorities (Police) say? This is very interesting!
Yes, someone did hack in and the FBI was involved. They found out a general area (a university!), but no one was ever prosecuted, nor were we able to get back the data or pictures. The hackers weren't stealing anything, just deleting everything. MEAN!

Mary F. and I were both administrators on FiberglassRV when this happened. Never, ever want to go through that again...
__________________

__________________
Donna D.
Ten Forward
2014 Escape 5.0TA
Donna D. is online now   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off






» Virginia Campgrounds

Reviews provided by



All times are GMT -5. The time now is 09:13 PM.


Powered by vBulletin® Version 3.8.8 Beta 4
Copyright ©2000 - 2017, vBulletin Solutions, Inc.
Copyright 2012 Social Knowledge, LLC All Rights Reserved.