https login

  • Thread starter Thread starter Dagless
  • Start date Start date
  • Replies Replies 31
  • Views Views 4K
Dagless

Dagless

Getting a Wimpy...
Messages
1,738
Reaction score
479
Gender
Male
Religion
Islam
I put forward a suggestion for a secure login system. I know the site doesn't hold any major info, but there is a brothers section etc. and I'm sure many users on here access the site from internet cafes, work, and other such insecure environments.
Rashad, you're always looking for ways to break the si... er... I mean "embrace new technology". This could be one step into the future ;)
 
Last edited:
before we implement a secure HTTP...i will need all the active users bank account details...its a research im doing....you know...i put things into database and see the correlation and stuff....
 
Last edited:
Sounds interesting. How would it exactly work though?
 
Yanal said:
Sounds interesting. How would it exactly work though?
Click to expand...

Normally only the login page has https rather than http. The user would see no real difference. However, I just checked and vbulletin don't support this so the whole site would have to be https. I guess forget it since it doesn't seem to be a common thing on vbulletin forums :(
 
That's not gonna happen. It is worthless to to have a secure login page on this forum, even Facebook doesn't use secure login even though you share your personal information there. So forget it! :)
 
Yes,although a suggestion that could be inmplented into the future:).
 
abdulmājid;1391784 said:
That's not gonna happen. It is worthless to to have a secure login page on this forum, even Facebook doesn't use secure login even though you share your personal information there. So forget it! :)
Click to expand...

Facebook does have a secure login page if you type https. Calling something worthless because you thought Facebook didn't have it isn't worth responding to :p
 
Last edited:
Aisha said:
What's the difference between http and https? :><:
Click to expand...

When you are on public networks your username and password is sent via plain text, so it's possible for anyone on that network to read. If it's https it's encrypted/secure.
 
How about if you use KeyScrambler? Doesn't that jumble all the letters up anyway?
 
Aisha said:
How about if you use KeyScrambler? Doesn't that jumble all the letters up anyway?
Click to expand...

That's only to protect against keyloggers which are locally on the computer. I am talking about the connection from your pc to islamicboard.com.
 
As you said brother Dagless, there are some sections which need more protection, I rather see it the other way, I believe there is nothing in brother's section for us to feel the need to conceal it if any admin's or user's account is compromised.

Moreover, it requires more $$$ for this, an it's not worth it.
 
Last edited:
abdulmājid;1391984 said:
As you said brother Dagless, there are some sections which need more protection, I rather see it the other way, I believe there is nothing in brother's section for us to feel the need to conceal it if any admin's or user's account is compromised. Moreover, it requires more $$$ for this, I guess.
Click to expand...

Thanks bro, that's pretty much the kind of answer I was looking for. I agree, there is nothing to hide (pm or forum). I suppose the reason for restriction is more to stop the trolling which goes on out here than to hide any information.
Not too much $$$. Certs can be bought quite reasonably these days, ~£10.
 
Last edited:
:sl:

Logging in involves comparing password hashes; one which is generated when a password is created or changed, with the one generated when the user enters his or her password. The old string comparison system is almost non-existent in the 21st century, although there are cases where its still used. https isn't about using cyphertext; thats a common misconception. https actually uses SSL certification, which is a system of authencitating the connection, not the inputted string. As a standard, SSL uses 128 bit security, which is designed to make it more difficult for a "hacker" to "listen" into the connection.

Can SSL be bypassed? Yes.
Is it easy to bypass? Generally speaking, no.

vBulletin uses MD5 hashes by default, which are reasonably secure for any forum standard. As long as a user doesn't use the password "qwerty", or anything short, simple and "guessable", including dictionary words, then its OK.

:wa:
 
:sl:

Dagless said:
When you are on public networks your username and password is sent via plain text, so it's possible for anyone on that network to read. If it's https it's encrypted/secure.
Click to expand...

SSL uses public IP verification; I don't think anymore needs to be discussed on this matter.

:wa:
 
أحمد;1392027 said:
:sl:



SSL uses public IP verification; I don't think anymore needs to be discussed on this matter.

:wa:
Click to expand...

I don't know what you mean by this.
 
أحمد;1392036 said:
:sl:



In other terms, the forum is secure enough.

:wa:
Click to expand...

That doesn't explain "SSL uses public IP verification".
 

Similar Threads

Back
Top