Logged in?

Post by **Judge** » Tue Jun 03, 2008 12:20 pm

Interesting

Although I wasn't actually logged in, the page said that I was

Question - Does this mean that someone could be logged in as me, and also have access to my PM's?

Post by **Judge** » Tue Jun 03, 2008 12:27 pm

Just in case, would anyone wanting to contact me please do so by email (wDOThewlettATbtinternetDOTcom), or via the other board from now on.

Thanks.

Post by **bpr81a** » Tue Jun 03, 2008 1:07 pm

Quote from the Forum Index screen:
"This data is based on users active over the past five minutes"
So you may still show as logged in after you've logged out.

And why would anyone want to read your PMs?

Post by **Judge** » Tue Jun 03, 2008 1:21 pm

I believe it was longer than 5 minutes, but of course like anyone I could be wrong.
As for reading my PM's, I wonder

However I wasn't only thinking of mine.
But as I have said, I will stick to emails or PM's on the other site in the future.

Post by **bpr81a** » Tue Jun 03, 2008 1:27 pm

So why would this board be any less secure than any other?

Are you suggesting that someone is actually reading your PMs? If so give me the details and I'll investigate.

Post by **Judge** » Tue Jun 03, 2008 1:38 pm

I'm not suggesting anything. As you know, nothing is 100% secure over the internet.
Don't worry about it Jon, I am quite happy to use the other methods.

Post by **Judge** » Tue Jun 03, 2008 1:53 pm

With your 5 minute ruling in mind, I just tried an experiment.
I logged in for around 8 minutes, logged out and logged back in as a guest. My name didn't appear?

Maybe this is something you could look into this Jon.

Post by **jonathon** » Tue Jun 03, 2008 3:13 pm

You can log in as another Bill.
I mistakenly logged in on Onnes name ( it was still on my puta) Needless to say I shut it down as soon as I realised, so not sure if I could have read private information.

Post by **Judge** » Tue Jun 03, 2008 3:22 pm

If I still had administration rights I could check for myself, but unfortunately these were taken away.

However I will be investigating further, as I believe that this is in the best interests of all users.

Post by **bpr81a** » Tue Jun 03, 2008 4:42 pm

As Jonathon said, you can log in as another user if you are using a computer that they used, and they checked the 'remember me' box (or whatever its called).

The only other way is by using their password.

As for the other point about still appearing as logged in, I have no intention of trying to find out what the system considers to be 'active within the last 5 minutes' I know it certainly doesn't consider just being logged in as 'active'.

Post by **Judge** » Tue Jun 03, 2008 5:07 pm

As I said Jon, don't worry about it, I won't use this sites PM facility again.
However for the benefit of all other users, it would be appreciated if you would confirm that the system is secure and not accessible to anyone, including administration.

Thank you.

Post by **bpr81a** » Tue Jun 03, 2008 6:00 pm

The system is secure. Other than the cases mentioned above. no one can login as another user!

Post by **Judge** » Tue Jun 03, 2008 6:09 pm

Thank you.