SAAC Forum

SAAC Forum => SAAC Forum Requests => Topic started by: crossboss on September 15, 2022, 04:57:47 PM

Title: How come the SAAC site is still not secure?
Post by: crossboss on September 15, 2022, 04:57:47 PM
Didn't you guys not learn from the last hack? Lost most material...
Not being sarcastic, just wondering.
Title: Re: How come the SAAC site is still not secure?
Post by: JD on September 15, 2022, 05:08:55 PM
Thought it was... yes or no?
Title: Re: How come the SAAC site is still not secure?
Post by: crossboss on September 15, 2022, 05:17:40 PM
On all my browsers/computers it says in bold letters: '! Not Secure'
Title: Re: How come the SAAC site is still not secure?
Post by: Rodster-500 on September 15, 2022, 07:58:37 PM
Quote from: crossboss on September 15, 2022, 04:57:47 PM
Didn't you guys not learn from the last hack? Lost most material...
Not being sarcastic, just wondering.

It doesn't matter. The valuable information was lost in the first 'crash' and you are just living in the ruins now.
Title: Re: How come the SAAC site is still not secure?
Post by: computerworks on September 15, 2022, 09:59:57 PM
The site HAS been running with SSL/TLS for security.

However, if you accessed the Forum as "http://www.saacforum.com", current browsers would flag it as "Insecure"
If you accessed it as "https://www.saacforum.com"...it would be 'padlocked' and show as secure.

Thanks for this feedback... we had neglected to "throw the switch" that forces all addresses to become "https:".. even just using "saacforum.com" will now show as secure.

Let me know details if you encounter anything different... Ron
Title: Re: How come the SAAC site is still not secure?
Post by: CharlesTurner on September 15, 2022, 11:44:32 PM
+1, change your bookmark to https
Title: Re: How come the SAAC site is still not secure?
Post by: crossboss on September 16, 2022, 01:25:46 AM
Thanks guys. What ever you just did, It now is secure on my end.
Title: Re: How come the SAAC site is still not secure?
Post by: FL SAAC on September 16, 2022, 08:38:31 AM
Thank you Ron for the speedy reply

Quote from: computerworks on September 15, 2022, 09:59:57 PM
The site HAS been running with SSL/TLS for security.

However, if you accessed the Forum as "http://www.saacforum.com", current browsers would flag it as "Insecure"
If you accessed it as "https://www.saacforum.com"...it would be 'padlocked' and show as secure.

Thanks for this feedback... we had neglected to "throw the switch" that forces all addresses to become "https:".. even just using "saacforum.com" will now show as secure.

Let me know details if you encounter anything different... Ron
Title: Re: How come the SAAC site is still not secure?
Post by: kjspeed on September 16, 2022, 12:28:42 PM
The SSL/TLS security is enabled. However, the Simple Machines version SMF 2.0.15 which was released in November 2017 is several software revisions out of date. The current version is SFM 2.1.2


It's only a matter of time before Forum 2.0 crashes. Hopefully there is a database backup now.