DO NOT DEAL WITH THIS MEMBER
(Jan 24, 2016 02:02 PM)Doctor Blue Wrote: So is it if your current IP is different from your latest IP or is it just if it isn't known?
Not an argument, but I think if I have say 5-6 known constant use IP#'s I can add to a trusted list. where yes there will always remain a vulnerability, say I get ratted and the attacker uses the reverse proxy on a trusted IP#
But, Omni has made it extremely clear from the very beginning of the site, your account, your responsibility to maintain security.
And further noted, the problem is now sale of accounts. Its become near impossible to crack a secured HF account, so the attackers and scammers must find round robin efforts.
I think the implementation of an IP lockout/login is a great idea, but we should be allowed to trust our own connections to avoid such constant logins.
(Jan 24, 2016 02:04 PM)Kuso Wrote: I probably wouldn't be annoyed by this if we didn't have the 2fa securit. But I want security.
Agreed, Its a annoyance, but if it has to remain and keep security, I will deal but again, my PW like I am sure many others are totally random, so trying to login constantly becomes a tedious process just to check messages and read a forum.
Has this feauture been implemented already ?
my ip always changes ( mobile data ) i havent been logged out once
I just refreshed under another VPN and it only gave me captcha then let me though. May need to work on that some more omni.
(Jan 24, 2016 02:14 PM)Windows95 Wrote: I just refreshed under another VPN and it only gave me captcha then let me though. May need to work on that some more omni.
I'm pretty sure you can bounce back and fourth.
Example:
Log in on home PC.
Log in on VPN.
you can go between both and not logout. but if you add ANOTHER new IP, you have to log back in.
(Jan 24, 2016 02:16 PM)Savage xD Wrote: I'm pretty sure you can bounce back and fourth.
Example:
Log in on home PC.
Log in on VPN.
you can go between both and not logout. but if you add ANOTHER new IP, you have to log back in.
Refreshed on 8 VPNS that work on HF, no effect.
The only issue I see would be cell phone networks. When you're traveling as a passenger and reading Hf. You would have to login practically every refresh.
Jan 24, 2016 02:30 PM
(This post was last modified: Jan 24, 2016 02:31 PM by Savage xD.)
(Jan 24, 2016 02:19 PM)Windows95 Wrote: Refreshed on 8 VPNS that work on HF, no effect.
You're not hearing me.
I'm pretty sure once you login on that IP, it stays logged in.
It doesn't matter if you mvoe to another IP.
It's just new ip = login
old ip stays logged in even if there are multiple sessions.
PC 1 - logged in. browsed hf. ip doesn't change.
PC 2- logged in. browsed hf, this is a different ip.
back to PC 1, still logged in because the IP didn't change on that PC.
Jan 24, 2016 02:32 PM
(This post was last modified: Jan 24, 2016 02:33 PM by Doctor Blue.)
(Jan 24, 2016 02:11 PM)Armada Wrote: Not an argument, but I think if I have say 5-6 known constant use IP#'s I can add to a trusted list. where yes there will always remain a vulnerability, say I get ratted and the attacker uses the reverse proxy on a trusted IP#
But, Omni has made it extremely clear from the very beginning of the site, your account, your responsibility to maintain security.
And further noted, the problem is now sale of accounts. Its become near impossible to crack a secured HF account, so the attackers and scammers must find round robin efforts.
Not an argument? It's a question. I'm just asking if it happens on new IPs or on each change. I'm all for this, I'm not complaining at all :)
(Jan 24, 2016 02:30 PM)Savage xD Wrote: You're not hearing me.
I'm pretty sure once you login on that IP, it stays logged in.
It doesn't matter if you mvoe to another IP.
It's just new ip = login
old ip stays logged in even if there are multiple sessions.
PC 1 - logged in. browsed hf. ip doesn't change.
PC 2- logged in. browsed hf, this is a different ip.
back to PC 1, still logged in because the IP didn't change on that PC.
I see, will try to find one I've not logged in with yet.
Edit >>> Nope, my trust scan IP count even went up. IPs I haven't logged in with yet don't seem to log me out.
I don't see the big deal with having to login every time? I think more people need to be focused on security versus how quick they can fucking log in. I never store cookies, no one should. I log in to Hack Forums every time I leave and come back to the site.
DO NOT DEAL WITH THIS MEMBER
I'm guessing you can utilize multiple sessions, if that's the case, then you should be fine as long as you're using one device/browser/session per IP.
(Jan 24, 2016 02:39 PM)Ta-kun Wrote: I don't see the big deal with having to login every time? I think more people need to be focused on security versus how quick they can fucking log in. I never store cookies, no one should. I log in to Hack Forums every time I leave and come back to the site.
You're probably not as busy as everyone though. Plus going through the security, plus login information on consistent basis to check sales, deals, PM's on offers, etc.
Can be real annoying.
(Jan 24, 2016 02:43 PM)Kuso Wrote: You're probably not as busy as everyone though. Plus going through the security, plus login information on consistent basis to check sales, deals, PM's on offers, etc.
Can be real annoying.
Ya, I guess I can see that issue.
Just let me finish and implement the security changes before you ask about them.
|
