Ducati Sporting Club UK

Ducati Sporting Club UK (/msgboard.php)
-   General Motorcycles only (/forumdisplay.php?f=90)
-   -   Security of PM's (/showthread.php?t=36274)

webteam 14-Sep-2006 21:36

In a minute, I'm on the phone at the moment......

doogalman 14-Sep-2006 21:37

Data protection etc etc.

domski 14-Sep-2006 21:56

Quote:

Originally Posted by doogalman
So who would have access.


There is no option for Admins or anyone else to read other people's PMs in vB. However anyone with access to the database could read them directly in the db.

Also there are several 'hacks' which can be used by admins (and anyone else they give details to) to access every part of the forum to read whatever they want.

Basically, nothing is safe on ANY forum!!

So if you have anything private to send somebody, do it in an email - or speak to them on the phone!!

antonye 14-Sep-2006 21:58

I think (although I may be wrong) that vb actually uses a simple form of encryption on PMs, but don't hold me to that. That's not to say that it can't be decrypted by someone with the knowledge or will to do it.

domski 14-Sep-2006 22:00

Quote:

Originally Posted by antonye
I think (although I may be wrong) that vb actually uses a simple form of encryption on PMs, but don't hold me to that. That's not to say that it can't be decrypted by someone with the knowledge or will to do it.


Yes, I believe that is an option available, but not a default setting (unless v3.5.4 is different?)

I've just been reading up on it on the vB forums.

There is also a way for admins to log in as 'any' user too, so basically - nothing is safe.

Not saying that DSC peeps are untrustworthy, just that nothing on any forum is safe. This is the internet afterall!!!

antonye 14-Sep-2006 22:02

Quote:

Originally Posted by domski
There is also a way for admins to log in as 'any' user too, so basically - nothing is safe.


Very true - simply set the password to blank through the database and you're in. Reset it to the original (MD5 hashed) value and you're back to normal.

Not that I know these things ;)

crust 14-Sep-2006 22:04

easy enough to do


link here


:)Crust

webteam 14-Sep-2006 22:06

Finished on the phone now!

The answer is pretty much as Domski says above - only webadmin people (myself, Flanks and Frank) have the necessary database passwords to be able to 'hack' into the database should the need arise. I doubt that either Flanks or Frank have the required software though to access the database direct!

The PM's (and anything else on the web) is as secure as an email - i.e. unsecure !!! Emails do not always go to the people they were intended to go to (that's why so many companies put disclaimers at the end of their emails these days) and you should never send complete credit card info on an email. I've seen some people who send the main numbers on one email and the expiry date info on a second - then only if both emails go astray can anyone make use of the information. Having said that I would personally never transmit financial info via an email - much more secure to use a phone !

As for any of the webteam reading peoples PMs... why would we, there's enough stuff to read on the main website ! Anyway we do have other things to do with our lives as well :D :D

Eamonn.

domski 14-Sep-2006 22:10

Quote:

Originally Posted by webteam
only webadmin people (myself, Flanks and Frank) have the necessary database passwords to be able to 'hack' into the database should the need arise.


...and anyone you gave the details to ;)

Quote:

As for any of the webteam reading peoples PMs... why would we

Why wouldn't you? I bet it's very interesting! :)

Quote:

Anyway we do have other things to do with our lives as well :D :D

Not everyone has such full and varied lives though Eamonn, but I get your point!

I don't think the integrity of the webteam would ever be in question.

There are other people within the club that I wouldn't trust further than I could bounce off my bonnet!

Fordie 14-Sep-2006 22:10

I think to anwser you original question can PM be accessed Yes

I believe so,but only under exceptional sucumstances. In this modern world nothing is secret. If we are to protect people from the horror's of slander access is available Im sure 4D

( Looks like Im a little late on this one must type faster )


All times are GMT +1. The time now is 06:23.

Powered by vBulletin 3.5.4 - Copyright © 2000 - 2025, Jelsoft Enterprises Ltd.
© Ducati Sporting Club UK