Page 1 of 1

Logged in?

Posted: Tue Jun 03, 2008 12:20 pm
by Judge
Interesting :o

Although I wasn't actually logged in, the page said that I was :-?

Question - Does this mean that someone could be logged in as me, and also have access to my PM's?

Posted: Tue Jun 03, 2008 12:27 pm
by Judge
Just in case, would anyone wanting to contact me please do so by email (wDOThewlettATbtinternetDOTcom), or via the other board from now on.

Thanks.

Posted: Tue Jun 03, 2008 1:07 pm
by bpr81a
Quote from the Forum Index screen:
"This data is based on users active over the past five minutes"
So you may still show as logged in after you've logged out.

And why would anyone want to read your PMs?

Posted: Tue Jun 03, 2008 1:21 pm
by Judge
I believe it was longer than 5 minutes, but of course like anyone I could be wrong.
As for reading my PM's, I wonder :-? However I wasn't only thinking of mine.
But as I have said, I will stick to emails or PM's on the other site in the future.

Posted: Tue Jun 03, 2008 1:27 pm
by bpr81a
So why would this board be any less secure than any other?

Are you suggesting that someone is actually reading your PMs? If so give me the details and I'll investigate.

Posted: Tue Jun 03, 2008 1:38 pm
by Judge
I'm not suggesting anything. As you know, nothing is 100% secure over the internet.
Don't worry about it Jon, I am quite happy to use the other methods.

Posted: Tue Jun 03, 2008 1:53 pm
by Judge
With your 5 minute ruling in mind, I just tried an experiment.
I logged in for around 8 minutes, logged out and logged back in as a guest. My name didn't appear?

Maybe this is something you could look into this Jon.

Posted: Tue Jun 03, 2008 3:13 pm
by jonathon
You can log in as another Bill.
I mistakenly logged in on Onnes name ( it was still on my puta) Needless to say I shut it down as soon as I realised, so not sure if I could have read private information.

Posted: Tue Jun 03, 2008 3:22 pm
by Judge
If I still had administration rights I could check for myself, but unfortunately these were taken away.

However I will be investigating further, as I believe that this is in the best interests of all users.

Posted: Tue Jun 03, 2008 4:42 pm
by bpr81a
As Jonathon said, you can log in as another user if you are using a computer that they used, and they checked the 'remember me' box (or whatever its called).

The only other way is by using their password.

As for the other point about still appearing as logged in, I have no intention of trying to find out what the system considers to be 'active within the last 5 minutes' I know it certainly doesn't consider just being logged in as 'active'.

Posted: Tue Jun 03, 2008 5:07 pm
by Judge
As I said Jon, don't worry about it, I won't use this sites PM facility again.
However for the benefit of all other users, it would be appreciated if you would confirm that the system is secure and not accessible to anyone, including administration.

Thank you.

Posted: Tue Jun 03, 2008 6:00 pm
by bpr81a
The system is secure. Other than the cases mentioned above. no one can login as another user!

Posted: Tue Jun 03, 2008 6:09 pm
by Judge
Thank you.