Access delay...

fuji

Banned
Jan 31, 2005
79,936
9
0
¯\_(ツ)_/¯
is.gd
There is too much paranoia on the boards these days !
Terb posting history made public by who? Terb posts are already public -anyone can read what you have posted here.
Your ISP is under no obligation to reveal who you're to anyone unless they are a police officer with a warrant.
Maybe Harper is trying to change that to make things easier for the cops, which is one more reason not to vote for him.
Even if a hacker were to post your ip publicly that info would not be of much use to anyone.
If someone sniffs your web traffic that will link your real life identity to your terb posting history. The fact that you think that is no big deal, that you don't understand it, is appalling. This has nothing to do with your ISP, the sniffer may be your spouse, a coworker, pretty much anyone you share the network with.

I am a member of terb and not the other boards because historically terb mods have been vigilant about protecting the privacy of members, that had always seemed to be one of Fred's priorities. I expect better of a mod here than what you are posting! Protection of real names is your job. This has NOTHING to do with c36.

But if you want paranoia: in a post snowden world where we know for a fact that traffic is crossing borders, yes, you can be sure that YOUR identity is being logged, that your profile includes your terb posting history, and US, and probably other, security services can access that information.
 

IM469

Well-known member
Jul 5, 2012
11,182
2,617
113
I From an admin standpoint and based on our data we already see the benefits of using Cloudfare that's why we have no intention of removing the software.
The only benefits seem to be customer complaints ... until today. If a customer wants to click on our website to find out about our product - suspending him for 10 seconds on a 'security' scan isn't the way to do it. How many commercial sites have you come across with this kind of delay? I've been on our distributor sites in just about every industrial country in the world and never seen that happen - not once. I actually had to type the previous posting twice because the first was lost by cloudfare hanging up the browser.

Anyways - no delays and everything seems to be working transparently on the downloads so I guess we all win now. When I first logged on I thought you had ditched cloudfare so whatever you did worked.
 
M

Moderator

If someone sniffs your web traffic that will link your real life identity to your terb posting history. The fact that you think that is no big deal, that you don't understand it, is appalling. This has nothing to do with your ISP, the sniffer may be your spouse, a coworker, pretty much anyone you share the network with.

I am a member of terb and not the other boards because historically terb mods have been vigilant about protecting the privacy of members, that had always seemed to be one of Fred's priorities. I expect better of a mod here than what you are posting! Protection of real names is your job. This has NOTHING to do with c36.
.
Of course we'll always do our part to protect people's private info but if your SO suspects
you're up to something she will more likely just hire a PI to follow you around or instal a keylogger on your computers.
Or use some other old fashioned method. We already installed https on MERB - we will instal it here too in due course.
 
M

Moderator

The only benefits seem to be customer complaints ... until today. If a customer wants to click on our website to find out about our product - suspending him for 10 seconds on a 'security' scan isn't the way to do it. How many commercial sites have you come across with this kind of delay? I've been on our distributor sites in just about every industrial country in the world and never seen that happen - not once. I actually had to type the previous posting twice because the first was lost by cloudfare hanging up the browser.

Anyways - no delays and everything seems to be working transparently on the downloads so I guess we all win now. When I first logged on I thought you had ditched cloudfare so whatever you did worked.
What are you trying to tell me ? I know of many commercial sites that take a long time to load. Many times I have gone to the Rogers portal : https://www.rogers.com/web/link/signin
and not been able to pay a bill because their system was too slow and I just didn't have the patience to wait for the site to load.
I already told you last night that we've no intention of removing Cloudfare and without the data I'm looking at you wouldn't know about the benefits I'm talking about.
If you do a speed test TERB loading speed is quite satisfactory.
 

Toronto Girlfriends

Senior Member
Supporting Member
If a hacker grabs and admin password they can bring down the site or at least change it dramatically. But if you want to be down again for several days undoing damage got for it. But I guess there are lots of forum sites that require password but are non https.

I just think this firewall can be more user friendly. I get on dozens of sites including those of financial institutions and this is the only site that has that issue.

Tons of controversy over cloudfare. Those interested might want to do some searching. Much of it does have to do with phishing which is more email related. Have not found anything on DOS and similar attacks which it seems to be used for here.
From reading your posts dude I gather you are not an average user, so how can you be complaining about the site being user friendly? I find your post very suspicious...
 

Jasmine Raine

Well-known member
Jul 28, 2014
4,009
51
48
If someone sniffs your web traffic that will link your real life identity to your terb posting history. The fact that you think that is no big deal, that you don't understand it, is appalling. This has nothing to do with your ISP, the sniffer may be your spouse, a coworker, pretty much anyone you share the network with.

I think that users of TERB have to take a certain amount of responsibility for themselves to ensure they use TERB from their own secure network. If that has to be away from the SO or work, then that is on the user, not on TERB. I do not see how an outside source can "sniff" through TERB's web traffic to obtain your real identity. What you are talking about is the other way around. Coming from your home or work. Not TERB.

I am a member of terb and not the other boards because historically terb mods have been vigilant about protecting the privacy of members, that had always seemed to be one of Fred's priorities. I expect better of a mod here than what you are posting! Protection of real names is your job. This has NOTHING to do with c36.

As far as I know, people here sign up on their own with their own chosen information. Again, TERB doesn't know your real name or job unless you allow it, post it, or share it. I don't see how it is their job to protect something on you can give out.

But if you want paranoia: in a post snowden world where we know for a fact that traffic is crossing borders, yes, you can be sure that YOUR identity is being logged, that your profile includes your terb posting history, and US, and probably other, security services can access that information.
Again, I don't see how that is TERB's responsibility. You choose to use this site, this site has the security set up that they do. Besides, the DOD gets hacked, SONY just got hacked. There is no 100% guaranteed way to prevent a hacker. I am Jessica Rain. The information I put here on TERB is what I put. You can track me back to my IP if you like, but you will see I am not the only one on this network so finding out my real ID is still going to be difficult and I personally don't see North Korea caring to much about lil' old me.

I have to say I feel you are placing the responsibility falsely at the hands of TERB when you should be looking to yourself.
 

lomotil

Well-known member
Mar 14, 2004
7,133
1,998
113
Oblivion
Last day or two I'm now being automatically redirected by cloudflare without having to retype the captcha. Basically, works fine now BUT:

1. Site is still not https, and

2. Forum runner still broken

So thanks for fixing cloud flare but can we at least get https back? Considering the contents of the site it would be nice to know it was secure.
Nothing is secure, everything is fair game. Everyone's neck or soft underbelly is exposed to some extent when online. In this case it is my testicles that are hypersensitive now.
 

fuji

Banned
Jan 31, 2005
79,936
9
0
¯\_(ツ)_/¯
is.gd
There is no 100% guaranteed way to prevent a hacker. I am Jessica Rain. The information I put here on TERB is what I put. You can track me back to my IP if you like, but you will see I am not the only one on this network so finding out my real ID is still going to be difficult
The first part is a silly, silly argument. "There is no way to guarantee you won't be in a car accident so no harm in driving drunk, not wearing a seatbelt, running red lights, and driving the wrong direction on the freeway". There are never any guarantees in life but it is stupid not to take basic steps that drastically improve your security.

The second part missed the point. Someone on your network who is sniffing your traffic knows exactly who you are. They find out you use terb and they get your terb account because it is child's play to get that from an unsecured connection. Intelligence agencies might be able to hack https (might) but your employer, SO, neighbor, etc, cannot.
 

Jasmine Raine

Well-known member
Jul 28, 2014
4,009
51
48
The first part is a silly, silly argument. "There is no way to guarantee you won't be in a car accident so no harm in driving drunk, not wearing a seatbelt, running red lights, and driving the wrong direction on the freeway". There are never any guarantees in life but it is stupid not to take basic steps that drastically improve your security.


Some people choose not to get into a car period because there is no guarantees. You have choices just like anyone else. You do not have to be here if you do not like the precautions that have been taken. You can also choose not the fly, not to go over seas to a war-ridden country, you can choose not to engage in sexual acts to ensure you don't catch an STD. I fail to see why TERB needs to give you a guarantee if you admit that nothing in life is guaranteed.

They have take the basic steps they see fit. I would never dream of coming into your house and tell you that you don't have enough bars on your windows, security cameras around your house, or the right size mean old guard dog. However, that is just me and we all different beings. Which is why is it great that we all have choice. You don't have to be here if you don't like it.



The second part missed the point. Someone on your network who is sniffing your traffic knows exactly who you are. They find out you use terb and they get your terb account because it is child's play to get that from an unsecured connection. Intelligence agencies might be able to hack https (might) but your employer, SO, neighbor, etc, cannot.
I did get your point. You missed mine. Who said you have to use TERB from work or home? And again, how is TERB responsible for people searching things from YOUR side of the network. It seems a fair bit of wrongful entitlement on your part in my humble opinion.
 

fuji

Banned
Jan 31, 2005
79,936
9
0
¯\_(ツ)_/¯
is.gd
I do feel entitled to ask that sites I use that carry sensitive data adopt very basic, industry standard security practices to protect me. I feel VERY entitled to ask for that. Most of us would suffer far more personal and financial harm from the contents of our terb accounts being made public than from our banking session being compromised by a hacker.

In my view it is simply crazy to call that wrongful entitlement. Lunacy.
 

Celticman

Into Ties and Tail
Aug 13, 2009
8,890
89
48
Durham & Toronto
I do feel entitled to ask that sites I use that carry sensitive data adopt very basic, industry standard security practices to protect me. I feel VERY entitled to ask for that. Most of us would suffer far more personal and financial harm from the contents of our terb accounts being made public than from our banking session being compromised by a hacker.

In my view it is simply crazy to call that wrongful entitlement. Lunacy.
The moderator has provided a clear alternative to anyone that is not happy with Terb's website and how it is managed.
 

fuji

Banned
Jan 31, 2005
79,936
9
0
¯\_(ツ)_/¯
is.gd
A couple of days ago I said cloud flare was working well, it was caching my session and redirecting after a short delay. That was fine.

Today it is back to asking me to reenter the captcha every few minutes, which just seems broken. That does not seem like the way it is supposed to work and something is probably misconfigured.
 

Perry Mason

Well-known member
Aug 20, 2001
4,673
209
63
Here
I don't know about others but it is working fine for me for the past couple of days... though it was a real pain in the ass before that.

But there is one thing I agree with that several others have said, namely, that we, the members, are what makes this site click. Without us, there would be no ads, no revenues, no posts, no nothing! So requests to please the "customers" are not unreasonable and telling us to leave if we don't like it are arrogant and insulting.

Perry
 

Jasmine Raine

Well-known member
Jul 28, 2014
4,009
51
48
I do feel entitled to ask that sites I use that carry sensitive data adopt very basic, industry standard security practices to protect me. I feel VERY entitled to ask for that. Most of us would suffer far more personal and financial harm from the contents of our terb accounts being made public than from our banking session being compromised by a hacker.

In my view it is simply crazy to call that wrongful entitlement. Lunacy.
Ok. I just feel that if I am asking for something from someone else in their house, that I take my own responsibilities first. Especially when they have done some of the things I am requesting in their own way. Everyone has different opinions of what needs to done and in what way. I would not tell people in their own house that their opinion of how to do that is wrong with the expectation of change. I would simply leave that house. You are definitely entitle to continue to complain so long as they allow to you keep your free membership. I would never take that right away from anyone, so please continue.

There is one last thing however. I think you also asked for a mobile app to be made available. I didn't realize that was for security reasons as well, so my bad.

Take care and here is hoping you have a great New Year Fuji.
 

Garrett

Hail to the king, baby.
Dec 18, 2001
2,063
26
48
Then it is fair to say that you are sufficiently content to stay.
.. or he is protecting himself in other ways. It is good he is making others aware of the exposure as security vulnerabilities are real and are exploited (even https has been exploited recently).
We also know that ISPs are watching traffic and are willing to hand over information to the authorities when requested.
 

Celticman

Into Ties and Tail
Aug 13, 2009
8,890
89
48
Durham & Toronto
.. or he is protecting himself in other ways. It is good he is making others aware of the exposure as security vulnerabilities are real and are exploited (even https has been exploited recently).
We also know that ISPs are watching traffic and are willing to hand over information to the authorities when requested.
To what extent is an ISP watching traffic, what type of traffic and why, and is there any provenance to support this? I thought a court order was required to hand over information. If this is so, not sure myself, then they are no different to anyone else when faced with a court order.
 
Toronto Escorts