51 coaches online • Server time: 00:02
Forum Chat
Log in
Recent Forum Topics goto Post Creating a custom to...goto Post ramchop takes on the...goto Post NBFL Season 32: The ...
SearchSearch 
Post new topic   Reply to topic
View previous topic Log in to check your private messages View next topic
Christer



Joined: Aug 02, 2003

Post   Posted: Nov 08, 2010 - 00:43
FUMBBL Staff
Reply with quote Back to top

As you may have noticed, some avatars and forum signatures have been somewhat broken. This is because I have updated the forums to not allow external images to be used directly as either avatars or images.

This change has been made to make the site work better over SSL (feel free to switch to use https://fumbbl.com rather than the unencrypted version).

This is an effort I'm making to combat things like Firesheep, which I'm sure you've heard of by now (if not, google it and be amazed).

Thank you for understanding.
shadow46x2



Joined: Nov 22, 2003

Post   Posted: Nov 08, 2010 - 01:18 Reply with quote Back to top

firesheep makes me cry Sad

--j

_________________
origami wrote:
There is no god but Nuffle, and Shadow is his prophet.

ImageImage
Mr_Foulscumm



Joined: Mar 05, 2005

Post   Posted: Nov 08, 2010 - 01:35 Reply with quote Back to top

Firepanda makes me laugh Very Happy

--f

_________________
Everybody's favorite coach on FUMBBL
WhatBall



Joined: Aug 21, 2008

Post   Posted: Nov 08, 2010 - 02:37 Reply with quote Back to top

Not sure why, but I never seem to be able to upload an avatar image that works. I must be an idiot.. Any advice?

The LRB5/6 icons thread is hilarious now. Fifty-eight pages of people discussing invisible images! Very Happy
pythrr



Joined: Mar 07, 2006

Post   Posted: Nov 08, 2010 - 02:46 Reply with quote Back to top

Mr_Foulscumm wrote:
Firepanda makes me laugh Very Happy

--f


Indeed. And cry.
Were_M_Eye



Joined: Sep 24, 2007

Post   Posted: Nov 08, 2010 - 03:16 Reply with quote Back to top

So now i have to delete "wwww." in all my liks to FUMBBL and add a "s" after http and i will be safe from the firesheep?

_________________
Zlurpcast, the third best blood bowl podcast in the world.
Nightbird



Joined: Aug 02, 2003

Post   Posted: Nov 08, 2010 - 07:31 Reply with quote Back to top

<----PC noob

Ugh, I've swtiched to the secure site now, so how do we get our images and avatars to work now??? I've also noticed that my html code in my posts does not appear to work either???

~B

_________________
"If most of us remain ignorant of ourselves, it's because self-knowledge is painful
& we prefer the pleasures of illusion." ~Aldous Huxley
Garion



Joined: Aug 19, 2009

Post   Posted: Nov 08, 2010 - 09:28 Reply with quote Back to top

Wow, I hadn't heard of firesheep, that is pretty nasty stuff. So am I right in thinking this only effects people who access sites using wifi spots, or can this effect home users too?

Edit: Nevermind I get it now, ignore my question. Embarassed
Christer



Joined: Aug 02, 2003

Post   Posted: Nov 08, 2010 - 10:20
FUMBBL Staff
Reply with quote Back to top

The underlying issue is exploitable by anyone who can eavesdrop your data traffic. This includes people on your LAN, your ISP, any router between you and the target site, the target site's ISP.

Unencrypted WiFi networks are the most likely attack vectors though.
Rijssiej



Joined: Jan 04, 2005

Post   Posted: Nov 08, 2010 - 14:24 Reply with quote Back to top

At this time it is still possible to link external pictures on group, team and player pages and in news posts. On the https site this gives warnings about non-secure content.
Is that going to change aswell?
RC



Joined: Sep 22, 2005

Post   Posted: Nov 08, 2010 - 15:00 Reply with quote Back to top

damned scary, saw that firefox has some add on thingy (force TLS) that is supose to protect you though.

_________________
"Oh, you hate your job? Why didn't you say so? There's a support group for that. It's called EVERYBODY, and they meet at the bar."
Woodstock



Joined: Dec 11, 2004

Post   Posted: Nov 08, 2010 - 15:43 Reply with quote Back to top

RC wrote:
damned scary, saw that firefox has some add on thingy (force TLS) that is supose to protect you though.

Yeah, Im using FF with NoScript to force sites using https.
On1



Joined: Jul 12, 2004

Post   Posted: Nov 08, 2010 - 16:47 Reply with quote Back to top

test
Christer



Joined: Aug 02, 2003

Post   Posted: Nov 08, 2010 - 16:51
FUMBBL Staff
Reply with quote Back to top

Rijssiej wrote:
At this time it is still possible to link external pictures on group, team and player pages and in news posts. On the https site this gives warnings about non-secure content.
Is that going to change aswell?


Yes, this will change.
shadow46x2



Joined: Nov 22, 2003

Post   Posted: Nov 08, 2010 - 17:25 Reply with quote Back to top

so am i getting the right feeling that, going forward, there won't be anymore external linking allowed?

while i get the security aspects, and that's fine, the picture linking is a fun part of the forum, and i think it'll be a sorely missed part of the community if it's gone...is there any method to implement the security, but still be allowed to link images, without having to upload them to the site and go through image approval processes?

--j

_________________
origami wrote:
There is no god but Nuffle, and Shadow is his prophet.

ImageImage
Display posts from previous:     
 Jump to:   
All times are GMT + 1 Hour
Post new topic   Reply to topic
View previous topic Log in to check your private messages View next topic