LumberJocks Woodworking Forum banner
Status
Not open for further replies.

any HTTPS in the future for LJ site?

Tags
http https
6.4K views 52 replies 17 participants last post by  Admin  
#1 · (Edited by Moderator)
I'm no IT network guy but everyone is going towards the HTTPS for security reasons, instead of the 'ol fashioned unsecured HTTP. Not sure if LJ site needs to be secured as it's more so a community, not a banking site or retail site. Unless I'm missing something in between the lines of HTTPS vs HTTP for general webpage stuff?
 
Save
#4 ·
+1

You should not enter any personal information on a site without SLL certificates. So if you do not see HTTPS:// then assume everything you enter is public. Which for this site is not a big deal because you are not sharing your locations and payment information. I guess you IP gives your location, but you neighbor knows that too.
 
Save
#5 ·
Admins: Please upgrade the site to a secure one. I keep getting funky messages when I log in about how unsafe this site is. I'm not typing in my credit card number, but there is no reason today to NOT have a secure site.
 
#7 ·
The day-to-day information we pass to LJs is no big deal. But, I suggest that you do not use the same password on this site as you use on any other site.

- ChuckV
That is the truth! There is no chance that the passwords have not all been scraped from this site. That is pretty easy to do for a site with no SSL, even those that do have it.
 
Save
#8 · (Edited by Moderator)
IMHO There is no chance this site will go HTTPS! It's also been dealt with in the Recent Past.

Admins: Please upgrade the site to a secure one. I keep getting funky messages when I log in about how unsafe this site is. I m not typing in my credit card number, but there is no reason today to NOT have a secure site.

- PCDub
I don't get any "Funky" Messages and I'd bet that not many others if anyone else does either. In fact when I click on a section in my Title Block, my Avast, Anti Virus tells me "This Site Is Safe" and has 0 Tracking Systems operating on here. I have them set for "0" Tracking. It doesn't affect the system NOT having Tracking turned on. I have "TrackCookies" turned on to prevent any from "recording" on here There are presently Twenty One …trying Hard ..lol..

Image


Avast also automatically stores My Sign In Information. I just click LJ's "SIGN IN" and I'm in.

Perhaps YOUR Browser is causing the Problem. Who are the "Funky" messages from? I use Chrome with Carefully set Extensions to avoid False-Positive Notices.

Lumberjocks is NOT causing YOUR Problem.

Rick
 

Attachments

#12 · (Edited by Moderator)
Quote: "Effective July 2018, Google's Chrome browser (ver. 68) will mark non-HTTPS sites as 'not secure'"

Image


- torus
That's what it's doing on this Site right now ( Chrome browser (ver. 68) will mark non-HTTPS sites as 'not secure'" It presently is saing Warning! Your Connection to this Site is Not Secure.

Good luck getting this site changed to SECURE with an added "S".
 
#15 ·
LJ's is ran via Canada? Hmm… :) Lived in Erie, Pa as a kid. Went to Toronto science center. Was a cool city
 
Save
#16 ·
LJ s is ran via Canada? Hmm… :) Lived in Erie, Pa as a kid. Went to Toronto science center. Was a cool city

- Holbs
Yes it is a Canadian Based Site. I know exactly where Peter Street is in Downtown Toronto. I presently live a few miles north of Toronto. The Owner of this Company lives about a mile from where I was Born & Raised.

At least My I.P. Site Finder Info got us ANOTHER commitment on the HTTPS , But NO Time has been set.

I wouldn't hold my breath if I was You Hoibs. Actually it doesn't matter to me. I have other Security Measures on here that would be VERY HARD to break through.

Have a nice Day: Rick S.
 
#17 ·
For the admins, https://letsencrypt.org/ is what you want to use. Easy to get going, free (feel free to donate) and very reliable. I ve used paid certificates and they can be a hassle - Let s Encrypt is exceptionally easy.

This is literally a ten minute exercise to implement for whoever has administrative shell access to the web server.

- dca
I checked it out. Yes! It's Very Easy. Why they haven't done it….. only They know. ;-{ However THEY Say….....

" on the list to be converted to https, but I do not yet have a date for when that will be happening."

What List? Why can't you just DO IT?

Okay. Whatever.
 
#19 ·
Rick I have had 2 instances where I got a big red flash here out of my AVS. I use 360 Total, and really like it. Anyhow if I ever have something like that I get outta Dodge fast as I can, just in case. Both times I went through the series of Cleaned my cache, it was uneventful, Checked and update my 360, and ran a test, also uneventful.

Went to Winblows Update, and though they were calling them NON Critical updates, they made the bad Man go away. I lack the understanding to know why, but I do know sometimes your own computer can, and will hold you hostage until you do it's bidding. Usually it's bidding is just doing what you should take the time to do once a week = maintenance. It's important in this online experience we are engaged in.

Now why it flashed here, I've no idea, but if in fact the problem was here, it would do so every time I came, not just once and a while.
 
#21 · (Edited by Moderator)
Image


- Smitty_Cabinetshop
Is that your Opinion as to what's going on here Smitty?

We've been trying to get this Site Secured for a long time now and we always get the same answer "Were working on it but No Deadline Or Time as of yet."

I think it's Important that we get it SECURED! I don't see that as* "Flogging A Dead Horse" However Right Or Wrong you're entitled to YOUR Opinion.

Rick S.
 

Attachments

#22 · (Edited by Moderator)
Okay You Got Me Smitty! ..LOL..

I just had to look up the Definition of "anthropomorphize" Hundreds of them? It all depends on the Concept it's used in and what it's being compared to/with.

"One example of anthropomorphism would be to believe that your PC is angry at you because you insulted it; another would be to believe that an intelligent robot would naturally find a woman sexy and be driven to mate with her. Scholars sometimes disagree with each other about whether a particular prediction about an artificial intelligence's behavior is logical, or whether the prediction constitutes illogical anthropomorphism.[56] An example that might initially be considered anthropomorphism, but is in fact a logical statement about an artificial intelligence's behavior, would be the Dario Floreano experiments where certain robots spontaneously evolved a crude capacity for "deception", and tricked other robots into eating "poison" and dying: here a trait, "deception", ordinarily associated with people rather than with machines, spontaneously evolves in a type of convergent evolution.[57] The conscious use of anthropomorphic metaphor is not intrinsically unwise; ascribing mental processes to the computer, under the proper circumstances, may serve the same purpose as it does when we do it to other people: it may help us to understand what the computer will do, how our actions will affect the computer, how to compare computers with ourselves, and conceivably how to design computer programs. However, inappropriate use of anthropomorphic metaphors can result in false beliefs about the behavior of computers, for example by causing people to overestimate how "flexible" computers are.[58] According to Paul R. Cohen and Edward Feigenbaum, in order to differentiate between anthropomorphization and logical prediction of AI behavior, "the trick is to know enough about how humans and computers think to say exactly what they have in common, and, when we lack this knowledge, to use the comparison to suggest theories of human thinking or computer thinking."[

There You Go! That's a somewhat "Thick" Example But It's Completely Understandable even when applied to Woodworking Tools, or Human Beliefs and their Behaviour due to that Belief.

So. What you are saying is that Handplanes don't like being compared to Anything Else! YES/NO?

Rick S.
 
#25 ·
We ve been trying to get this Site Secured for a long time now and we always get the same answer "Were working on it but No Deadline Or Time as of yet."

- Rick S.
"We…", a first-person pronoun that's misused quite often on this site. As in, "we've been trying to…" and "we've got your back." I'll be the odd one out and state that I really don't care if the site goes HTTPS or not. Seems to be overkill for a site that is about woodworking. Instead of HTTPS, I'd rather (not "we," mind you) see the instructions to use PhotoBucket removed from LJs. That was asked by me over a year ago now.

Somebody wants to hack my LJ account? Whatever. Seems like a pretty low value target. And I'm not counting on LJs to protect my stuff.

But you're right, Rick S., I'm entitled to an opinion.

Glad you enjoy the tag line, I do too! :)
 
Save
#26 · (Edited by Moderator)
Thanks for your Reply Smitty.

English Grammar is not my thing nor is it for probably at least 80% of the members on here. If you choose to focus on that, Be My Guest!

I'd rather have a SECURED Site than A NON-Secured Site.

If You don't care "Somebody wants to hack my LJ account? Whatever. Seems like a pretty low value target. And I'm not counting on LJs to protect my stuff." That's up to YOU!

Rick S.
 
Status
Not open for further replies.
You have insufficient privileges to reply here.