http://www.youronlinedoctor.com - $30 Permanet Discount for VIP's
GREAT NEWS: $30 off for VIP's NOW.
Please use code available inside VIP area. This code MUST be put on the shipping and billing form of our forms anywhere. They cannot offer the discount without this code being on that form.



Tests, introductions, site questions, and suggestions >> Our site, our board, the net, computers...

Trampy
Pooh-Bah


Reged: 04/02/02
Posts: 1197
Loc: Southwest U.S.
Re: Making DB free of DEA, FBI, and FDA
      10/20/03 09:30 PM

Quote:

This question is for DB or anyone... How safe are the PMs from being intercepted or accessed on DB by others?




Any system can be hacked. Period. It's also possible to hack a system so that they can't trace it back to the source. I don't know about any current PHP exploits, but i'm sure there are some that worked in the past. In general, most exploits involve buffer overflow, but they could also involve embedded scripts in messages or posts. It'd be easier to do if the security is set up to be lax and they don't monitor the system for intrusion attempts. If someone can log is as root or administrator, they can do anything. Passwords should be picked so that they can't be found with a dictionary atttack. Also, the system should be set up to lock out any administrative account after a few unsuccessful attempts to log in with the wrong password. All of your PMs can be read by DB or anyone who gets the right username/password from them. I would never send out anything that's self-incriminating on the internet. If a court issues a subpeona or a search warrant, DB would be obligated to give them what the court ordered.

A few days ago the system was configured so that it was spitting out its SQL error messages in HTML to everyone. People make mistakes. A human error could expose everything here to anyone who wanted to look at it ... no hacking required. Have you ever left your house or car unlocked for a few minutes by mistake? Same thing.

If you want your PMs to be confidential, then encrypt them with PGP. Then the only person who can read them is the one you encrypt them to. But that person can disclose it to others. It's also only as good as the passphrase you choose, so don't write it on a Post-It and paste it on your monitor. PGP 8.02 is about as good as it gets for free encryption. You can download it directly from PGP. Find it with Google.

Trampy

--------------------
Your mileage may vary ...

Post Extras Print Post   Remind Me!     Notify Moderator


Entire topic
Subject Posted by Posted on
* Making DB free of DEA, FBI, and FDA marleysherb 10/18/03 07:54 PM
. * * Re: Making DB free of DEA, FBI, and FDA DrugBuyersAdministrator   11/06/03 07:02 AM
. * * Re: Making DB free of DEA, FBI, and FDA Spectre13   01/11/04 04:38 AM
. * * Re: Making DB free of DEA, FBI, and FDA Spectre13   01/13/04 12:31 PM
. * * Re: Making DB free of DEA, FBI, and FDA toky20   11/06/03 08:37 AM
. * * Re: Making DB free of DEA, FBI, and FDA marleysherb   11/03/03 01:03 AM
. * * Re: Making DB free of DEA, FBI, and FDA buey   11/03/03 07:00 PM
. * * Re: Making DB free of DEA, FBI, and FDA yawkaw3   11/03/03 10:16 PM
. * * Re: Making DB free of DEA, FBI, and FDA zorg   11/03/03 03:27 AM
. * * Re: Making DB free of DEA, FBI, and FDA toky20   11/04/03 07:38 PM
. * * Re: Making DB free of DEA, FBI, and FDA potatoboy99   11/04/03 08:58 PM
. * * Re: Making DB free of DEA, FBI, and FDA zorg   11/04/03 09:42 PM
. * * Re: Making DB free of DEA, FBI, and FDA toky20   11/05/03 10:10 AM
. * * Re: Making DB free of DEA, FBI, and FDA Beetlenut   11/04/03 08:48 PM
. * * Re: Making DB free of DEA, FBI, and FDA gage   10/19/03 12:25 PM
. * * Re: Making DB free of DEA, FBI, and FDA Trampy   10/19/03 09:25 AM
. * * Re: Making DB free of DEA, FBI, and FDA antique   10/19/03 12:16 PM
. * * Re: Making DB free of DEA, FBI, and FDA Trampy   10/20/03 09:30 PM
. * * Re: Making DB free of DEA, FBI, and FDA antique   10/21/03 01:08 PM
. * * Re: Making DB free of DEA, FBI, and FDA toky20   10/24/03 10:03 AM
. * * Re: Making DB free of DEA, FBI, and FDA night_shade   10/24/03 02:03 PM
. * * Re: Making DB free of DEA, FBI, and FDA lovepink   10/18/03 10:47 PM
. * * Re: Making DB free of DEA, FBI, and FDA lemongrass   10/19/03 01:09 AM
. * * Re: Making DB free of DEA, FBI, and FDA moonbeam   10/18/03 10:41 PM

Extra information
0 registered and 0 anonymous users are browsing this forum.

Moderator:  Melody, Heidi 



Forum Permissions
      You cannot start new topics
      You cannot reply to topics
      HTML is enabled
      UBBCode is enabled

Rating:
Thread views: 750

Rate this thread

Jump to

Help & Contact Information | Privacy statement | Rules Free Members Area

*
UBB.threads™ 6.5
With Modifications from ThreadsDev.com by Joshua Pettit