- +

Author Topic: Security Concerns  (Read 3552 times)

0 Members and 1 Guest are viewing this topic.

Offline boox909

  • Repeat Donor!
  • VIP
  • DCM Member
  • *****
  • Posts: 59
  • Karma: 30
  • Arch Comics Nerd
Security Concerns
« on: March 30, 2010, 09:58:35 AM »
My first post on DCM will be to address a few sleeping elephants. I do not apologize for its tone, because such a tone is needed to clearly address my concerns about user login/security details.

Having three forums that are near duplicates of each other is asking for security antics in my opinion, and I personally am not pleased that my info was harvested for this 'non-competing gac' site without being given clearly stated options to secure my info, which is being passed around like a party favor against my wishes. One can argue that it is not so, but accounts have essentially been created for myself and others without our expressed consent, which opens the door into disarray.

I have changed my passwords on John C's forum site, and on the DCM forum site, and will do so on GAC forum site (which annoys me that I even have to, because my info should technically only be with GAC).

I am now asking that I be given an option for changing my password on the DCM Download site. Currently I do not see the means to do so, but I hope that DCM admin will deal with this quickly. I understand that this site is a 'non-competing' response to the new GAC owner, however,  my user login/security details from that site (along with that of others) should not be duplicated per se because of that situation.

It is not about trust, it is about Murphy's Law. I hate Murphy.

B.
« Last Edit: March 30, 2010, 10:00:46 AM by boox909 »
Golly, what were the Last 100 uploads?
http://digitalcomicmuseum.com/stats2.php

Keltner's Golden Age Comic Book Index!
http://www.twomorrows.com/alterego/media/Golden%20Age%20Index.pdf

Digital Comic Museum

Security Concerns
« on: March 30, 2010, 09:58:35 AM »

Offline Captain DJ

  • Server Admin
  • Administrator
  • DCM Member
  • *****
  • Posts: 712
  • Karma: 13
Re: Security Concerns
« Reply #1 on: March 30, 2010, 10:14:28 AM »
You can change your password by:
1. Going to profile on forum: http://digitalcomicmuseum.com/forum/index.php?action=profile
2. Clicking Account Related Settings on left hand side.
3. Typing in a new password.

You also have the option to delete your account on the profile page if you wish to do so.

Your password on the forum is and always will be kept safe. Its encoded using md5 and salt so has never been viewable by anyone.

We do apologise for any problems caused but if you wish to remove your account or change your password please follow above.

Offline boox909

  • Repeat Donor!
  • VIP
  • DCM Member
  • *****
  • Posts: 59
  • Karma: 30
  • Arch Comics Nerd
Re: Security Concerns
« Reply #2 on: March 30, 2010, 10:21:27 AM »
I am not positive that you read my post for context before your reply.

I need to change my password on the DCM Download Site -- I have already changed my password for the DCM forum site.

I am aware of all other options, except for the above.

B.
Golly, what were the Last 100 uploads?
http://digitalcomicmuseum.com/stats2.php

Keltner's Golden Age Comic Book Index!
http://www.twomorrows.com/alterego/media/Golden%20Age%20Index.pdf

Offline Captain DJ

  • Server Admin
  • Administrator
  • DCM Member
  • *****
  • Posts: 712
  • Karma: 13
Re: Security Concerns
« Reply #3 on: March 30, 2010, 10:26:30 AM »
I did read your post.

Download script uses the forum database to get the user details.
Once you update your details on the forum those are the new details you use to log into the download script.

Your account is only stored in one place and only have to change these details once.

Offline boox909

  • Repeat Donor!
  • VIP
  • DCM Member
  • *****
  • Posts: 59
  • Karma: 30
  • Arch Comics Nerd
Re: Security Concerns
« Reply #4 on: March 30, 2010, 10:32:49 AM »
I did read your post.

Download script uses the forum database to get the user details.
Once you update your details on the forum those are the new details you use to log into the download script.

Your account is only stored in one place and only have to change these details once.


That is welcomed information. Thank you for pointing it out to me. You can understand that I would not have realized it without it being pointed out to me.

Now that I have awoken some of those elephants, please do understand that my concerns are strictly security oriented (I will follow Yoc where ever he lands) and are not personal. While user data may be encrypted, it definitely has been a bit portable lately.

B.
Golly, what were the Last 100 uploads?
http://digitalcomicmuseum.com/stats2.php

Keltner's Golden Age Comic Book Index!
http://www.twomorrows.com/alterego/media/Golden%20Age%20Index.pdf

Offline Captain DJ

  • Server Admin
  • Administrator
  • DCM Member
  • *****
  • Posts: 712
  • Karma: 13
Re: Security Concerns
« Reply #5 on: March 30, 2010, 10:42:03 AM »
I don't know the back story about portable data as I'm a new admin on the team but I will bring this matter up with other staff and I agree with you anything on our server/database should remain on our server and not be moved anywhere else in future.

Offline Yoc

  • S T A F F
  • Administrators
  • DCM Member
  • *****
  • Posts: 13012
  • Karma: 32
  • "Say cheese!"
Re: Security Concerns
« Reply #6 on: March 31, 2010, 12:45:33 AM »
Hi boox,
Gee sorry to have upset you here.  We thought we were doing members a service by not requiring them to re-register.
Note that not even the staff or admins can actually see or knowing share a members password individually as they appear blank when checking a members profile on our end.  But anyone worried like boox here should feel free to change their passwords.  It's very easy to update on your end.

We apologize to anyone not wishing to be a member on DCM and recommend you delete your account if that is the case.

Other than that I hope everyone enjoys the new site.
-Yoc