A Forum run by Enthusiasts of MidNite Solar

General Category => General FAQ'S => Topic started by: SolarRV on September 15, 2022, 02:39:44 PM

Title: Why does this website have no security?
Post by: SolarRV on September 15, 2022, 02:39:44 PM
Hello!
I have noticed that there is no SSL on the forum and that my previous account was hacked. What is going on with Midnight Solar? Going out of business??? Something does not seem right....
Title: Re: Why does this website have no security?
Post by: ClassicCrazy on September 15, 2022, 06:52:21 PM
What do you mean hacked ? Someone guessed your password and made posts under your account ?
Larry
Title: Re: Why does this website have no security?
Post by: SolarRV on September 15, 2022, 07:20:54 PM
No I got a notification in my Google account that logins were compromised for Midnight Solar.
Title: Re: Why does this website have no security?
Post by: Vic on September 15, 2022, 07:39:17 PM
SolarRV, welcome to the Forum (I think).

At least in the olden days,  Security Certificates (probably have a different name, now),  were very expensive ($10-20 K).  It was said that this cost was the primary security that was provided  --  bad persons would not want to invest that amount to be able to steal from site-goers, and so on.  I do not know the state of these matters, today.

This site does do direct commerce (ie, members do not do financial transactions here), so for the first-order, the risks of being a member here, does not seem large (to me).

This Forum has been active for more than a decade.  It seems very far-fetched to equate this site structure, to any impending business failure,  kind of Snarky, really,  IMO.

But, if you feel insecure, would suggest that you not venture here.  I have had no issues with Security of this site, and this is the first I've heard mention of it.

C U Later,  Vic
Title: Re: Why does this website have no security?
Post by: SolarRV on September 15, 2022, 09:11:01 PM
You mean snarky like "Welcome to the Forum (I think)" >:( . My questions are more than reasonable. Why no SSL? Expensive? Ya, so what?

I looked. Outback, Schneider, and Victron all have SSL. Cost cutting measure by MS?
Title: Re: Why does this website have no security?
Post by: ClassicCrazy on September 15, 2022, 09:21:47 PM
Quote from: SolarRV on September 15, 2022, 09:11:01 PM
You mean snarky like "Welcome to the Forum (I think)" >:( . My questions are more than reasonable. Why no SSL? Expensive? Ya, so what?

I looked. Outback, Schneider, and Victron all have SSL. Cost cutting measure by MS?
Probably more like an older version of forums that just hasn't been kept up to date.
Like Vic , I don't think it is a big deal , just use a good password and anonymous ID and don't post anything you don't want to share. It is a public page anyway .
Maybe use a vpn and have an email just for things you don't trust. 
I just looked up on a website that checks if emails have been breached , and I don't see the midnite forums listed under my emails.
Larry
Title: Re: Why does this website have no security?
Post by: boB on September 16, 2022, 11:08:36 PM

You are right about no SSL here.  It  SHOULD be https.   Not sure why it hasn't been ?

No, MidNite is not going out of business.   Probably just short of resources for the site ?

It is hard to find good help these days for sure.   Non SSL doesn't personally bother me but it should definitely be encrypted like everything else these days.

boB

Title: Re: Why does this website have no security?
Post by: FNG on September 17, 2022, 08:43:57 AM
This is on me, I have about 100 irons in the fire one of them being forum maintenance. I am out of hours in the day and just havent gotten to update SMF or work on a certificate. I will discuss with Managment today and see who else has copius free time and is qualified. Stay tuned
Title: Re: Why does this website have no security?
Post by: boB on September 17, 2022, 05:09:47 PM

As I was thinking; Not really much time and resources available.  I know it's not THAT expensive though.

Doesn't bother me too much personally as I think that web browser writers worry too much about my safety and security when I can usually take care of myself.

boB
Title: Re: Why does this website have no security?
Post by: Robin on December 26, 2022, 04:24:38 PM
Sorry, I just heard about this. I have contacted our graphic artist who took care of an SSL issue a few years back. We will see what can be done about it ASAP.
Thanks,
Robin
Title: Re: Why does this website have no security?
Post by: FNG on December 28, 2022, 04:41:51 PM
Our IT dept deployed the certificate today so you should see the redirect to HTTPS now.