Skyscript website insecure 1 by zoidsoft I noticed that my password was submitted unencrypted in the last login. The browser says that https is not enabled. If anyone notices strange behavior from this account, please contact me at astrology-x-files.com. Curtis Manwaring Zoidiasoft Technologies, LLC Quote Sat Jan 12, 2019 12:40 am
2 by james_m thanks curtis, there seem to be some flaws in the website.. i have noticed some of them, but not sure how much it jeopardizes the site.. are you able to offer skyscript website any assistance? thanks james Quote Sat Jan 12, 2019 2:29 am
3 by zoidsoft James, Generally, https is offered by the server the site is hosted on so it might be that the security certificate has expired, but inspection of the URL source isn't showing anything. For now, I'm using a VPN, but this only prevents MITM spying. I tried to change the password, but it's apparently not working either. Curtis Manwaring Zoidiasoft Technologies, LLC Quote Sat Jan 12, 2019 8:11 pm
Re: Skyscript website insecure 4 by Paul zoidsoft wrote:I noticed that my password was submitted unencrypted in the last login. The browser says that https is not enabled. If anyone notices strange behavior from this account, please contact me at astrology-x-files.com. As far as I know the site has never run on https, I'll contact the server guy and see what's involved with changing it over. "The only true wisdom is in knowing you know nothing" - Socrates https://heavenlysphere.com/ Quote Sat Jan 12, 2019 8:12 pm
5 by Ouranos Also noticed that a year later. Any login and password page has to be put in the 'Secure" folder of the website so that it times out if you try to go back to the previous page or it opens up a separate 'secure' page like when you do a CC or banking transaction. But it is a forum where people 'transact' ideas. Blessings! Quote Fri May 08, 2020 4:12 pm
6 by jac A post of mine disappeared yesterday. That's never happened to me before. Quote Sun May 10, 2020 7:12 am
7 by zoidsoft The main consequence of this would be that someone can impersonate you and secondarily if you're one of those people who uses the same password on other sites, you can be compromised there as well. Curtis Manwaring Zoidiasoft Technologies, LLC Quote Mon May 11, 2020 1:25 am