(Aug 6, 2014 03:03 AM)Darkwin Wrote: Its been suggested before, This was Omniscient's response https://hackforums.net/showthread.php?ti...id40229808
Apparently nobody saw Darkwin's response. Omni has made his stance clear on this issue.
Why isn't https://hackforums.net mandatory? |
(Aug 6, 2014 03:03 AM)Darkwin Wrote: Its been suggested before, This was Omniscient's response https://hackforums.net/showthread.php?ti...id40229808 Apparently nobody saw Darkwin's response. Omni has made his stance clear on this issue.
1. That's because we're a forum with member placed content.
2. MITM attacks are extremely rare and the main concern for those are financial sites while in a public location. 3. I've never seen one account stolen by a MITM attack. Not one in 7 years. Almost all stolen accounts are based on RATS from members who are idiots that download crap or are tricked into visiting a malicious site that installs malware. 4. Yes, a DNS poison is possible. Again..never once seen this actually happen. And btw...we do run HTTPS if you want to use it. However it still won't be safe because you'll have to tell your browser to allow non-https items if you want to see content like embeded images, signatures, avatars, and oh..load the javascript and css from the CDN. This has been discussed again and again...you guys are fucking MORONS. Sites like Facebook can do it because you upload ALL CONTENT to their servers so they can 100% serve all content HTTPS. HF does not work that way. I keep having to repeat this shit. It's annoying. Even funnier is when the OpenSSL protocol had a serious exploit. Quote:...i have hijacked my own account so many god damn times when i have been testing different session stealing programs(droidsheep) Dumbest shit ever. Put that in your sig and watch the neg reps pile up. Lastly..the only real issue is upon login. And for that you can just use HTTPS on the login page if you want. https://hackforums.net/member.php?action=login Now you don't have to worry about MITM. Quote:go down to macdonalds or w/e there is free wifi. 1. You deserve to have your account stolen if you eat McDonalds. 2. Do you think account hijackers give a fuck about an HF account? They're looking for REAL site data like banks or email logins. SSL is way overrated as a security measure. It slows the server down. It slows connections down. It can cause browser incompatibilities and poorly loaded documents. |
|
|
| Possibly Related Threads... | |||
| Thread / Author | Replies | Views | Last Post |
| [Feedback] by Boost V2Mar 19, 2017 05:39 AM | 11 | 522 |
Mar 19, 2017 05:39 AM Last Post: Mαxim |
| by RazDzOct 30, 2016 11:38 AM | 19 | 537 |
Oct 30, 2016 11:38 AM Last Post: Insane |
| by .humanMar 9, 2016 04:00 PM | 9 | 343 |
Mar 9, 2016 04:00 PM Last Post: Omniscient |