Christer

Joined: Aug 02, 2003
|
As you may have noticed, some avatars and forum signatures have been somewhat broken. This is because I have updated the forums to not allow external images to be used directly as either avatars or images.
This change has been made to make the site work better over SSL (feel free to switch to use https://fumbbl.com rather than the unencrypted version).
This is an effort I'm making to combat things like Firesheep, which I'm sure you've heard of by now (if not, google it and be amazed).
Thank you for understanding. |
|
|
shadow46x2

Joined: Nov 22, 2003
|
  Posted:
Nov 08, 2010 - 01:18 |
|
firesheep makes me cry
--j |
_________________
origami wrote: | There is no god but Nuffle, and Shadow is his prophet. |
  |
|
Mr_Foulscumm

Joined: Mar 05, 2005
|
  Posted:
Nov 08, 2010 - 01:35 |
|
Firepanda makes me laugh
--f |
_________________ Everybody's favorite coach on FUMBBL |
|
WhatBall

Joined: Aug 21, 2008
|
  Posted:
Nov 08, 2010 - 02:37 |
|
Not sure why, but I never seem to be able to upload an avatar image that works. I must be an idiot.. Any advice?
The LRB5/6 icons thread is hilarious now. Fifty-eight pages of people discussing invisible images!  |
|
|
pythrr

Joined: Mar 07, 2006
|
  Posted:
Nov 08, 2010 - 02:46 |
|
Mr_Foulscumm wrote: | Firepanda makes me laugh
--f |
Indeed. And cry. |
|
|
Were_M_Eye

Joined: Sep 24, 2007
|
  Posted:
Nov 08, 2010 - 03:16 |
|
|
Nightbird

Joined: Aug 02, 2003
|
  Posted:
Nov 08, 2010 - 07:31 |
|
<----PC noob
Ugh, I've swtiched to the secure site now, so how do we get our images and avatars to work now??? I've also noticed that my html code in my posts does not appear to work either???
~B |
_________________ "If most of us remain ignorant of ourselves, it's because self-knowledge is painful
& we prefer the pleasures of illusion." ~Aldous Huxley |
|
Garion

Joined: Aug 19, 2009
|
  Posted:
Nov 08, 2010 - 09:28 |
|
Wow, I hadn't heard of firesheep, that is pretty nasty stuff. So am I right in thinking this only effects people who access sites using wifi spots, or can this effect home users too?
Edit: Nevermind I get it now, ignore my question.  |
|
|
Christer

Joined: Aug 02, 2003
|
The underlying issue is exploitable by anyone who can eavesdrop your data traffic. This includes people on your LAN, your ISP, any router between you and the target site, the target site's ISP.
Unencrypted WiFi networks are the most likely attack vectors though. |
|
|
Rijssiej

Joined: Jan 04, 2005
|
  Posted:
Nov 08, 2010 - 14:24 |
|
At this time it is still possible to link external pictures on group, team and player pages and in news posts. On the https site this gives warnings about non-secure content.
Is that going to change aswell? |
|
|
RC

Joined: Sep 22, 2005
|
  Posted:
Nov 08, 2010 - 15:00 |
|
damned scary, saw that firefox has some add on thingy (force TLS) that is supose to protect you though. |
_________________ "Oh, you hate your job? Why didn't you say so? There's a support group for that. It's called EVERYBODY, and they meet at the bar." |
|
Woodstock

Joined: Dec 11, 2004
|
  Posted:
Nov 08, 2010 - 15:43 |
|
RC wrote: | damned scary, saw that firefox has some add on thingy (force TLS) that is supose to protect you though. |
Yeah, Im using FF with NoScript to force sites using https. |
|
|
On1

Joined: Jul 12, 2004
|
  Posted:
Nov 08, 2010 - 16:47 |
|
|
Christer

Joined: Aug 02, 2003
|
Rijssiej wrote: | At this time it is still possible to link external pictures on group, team and player pages and in news posts. On the https site this gives warnings about non-secure content.
Is that going to change aswell? |
Yes, this will change. |
|
|
shadow46x2

Joined: Nov 22, 2003
|
  Posted:
Nov 08, 2010 - 17:25 |
|
so am i getting the right feeling that, going forward, there won't be anymore external linking allowed?
while i get the security aspects, and that's fine, the picture linking is a fun part of the forum, and i think it'll be a sorely missed part of the community if it's gone...is there any method to implement the security, but still be allowed to link images, without having to upload them to the site and go through image approval processes?
--j |
_________________
origami wrote: | There is no god but Nuffle, and Shadow is his prophet. |
  |
|
|