Security

[kwatt]

I just logged out and tried this forum again and cannot see it or gain access, nor can I gain access to the Network one either if I’m logged out.

So, I have an account set up as a Demo (listed user) just to demo the forums etc., but it has the same permissions as any normal user, same results except I can get into the trade forums.

So in an effort to finally answer the question I turned to some friends of mine, one hacker/web monkey and one security expert and asked them to have a crack at it. The answer is that they might gain access but it was tough to do so and not worth the trouble but on asking if it were possible to do they told me yes. However to look for a hidden forum was pointless they would spend days cracking it and may well find that there is nothing there. And even after that it’s encrypted!

So my conclusion is that if anyone mentions it they’re fishing, they’ve heard something and latched onto it. Thus far I have seen no intrusions into any of the forums and even Dave, with admin privilages (not forum admin) could not see the Network forum.

K.

[kwatt]

Okay, update on this.

After spending all morning in a blind panic due to Ted’s call this morning I had three people trying to hack this, it was a non-starter! They got nowhere!

I also checked the phpBB bulletin boards etc and there are no known security holes in this version, period, worldwide and there are rather a few sites that use this board software so we’d find out. There are even some that are used for sensitive purposes and it is reccommended as secure.

So that brings me back to the earlier conclusion, someone was evesdropping, heard it mentioned, put 2 and 2 together and went fishing. I think to an extent that Dave Parker is frightened that he’s missing out on something TBH.

K.

[Flipper]

kwatt wrote:I think to an extent that Dave Parker is frightened that he’s missing out on something TBH.

K.

Or Experts man (Paul Greenberg) or Ted Hogan could have said something to someone. (Old tie ups with Lux there) or even Chris ? It will be very difficult to keep a lid on this, especially as it effects a lot of manufacturers, insurance companies and work providers.

I have a regional meeting tommorrow with Lux I’ll see if any questions are asked .

I did have a phone call from Lux on Friday asking if anythng was said at the DASA meeting.

[admin]

dp

Spoken to DP and assured him he has not and can not see what is not there and that no record exists of entry from his place.Also mentioned he should present to the team a 5 min chat on how connect fit in to “network- dasa” situation.

Ted

[Author]

Posts