BugZone: Nothing's perfect...

This is a part of our Cambodia forums to chat about anything, whether it relates to Cambodia or not. This discussion forum is at the top of our site because it's usually the busiest part of the expat community chatter with random topics on just about everything, including expat life, Khmer politics, Cambodian blogs we have or have come across, or whatever else our members want to discuss. Whether you're an expatriate, tourist, Cambodian or random traveler just passing through South East Asia, you are welcome to talk about anything or start new topics yourselves.
User avatar
Francis
Expatriate
Posts: 1116
Joined: Sun Aug 10, 2014 12:29 am
Karma: 0
Vietnam

Re: BugZone: Nothing's perfect...

Postby Francis » Thu Nov 20, 2014 5:30 pm

"Quick Reply" has disappeared, too.
Und der Haifisch der hat Tränen
Und die laufen vom Gesicht
Doch der Haifisch lebt im Wasser
So die Tränen sieht man nicht

In der Tiefe ist es einsam
Und so manche Träne fliesst
Und so kommt es dass das Wasser
In den Meeren salzig ist
User avatar
BOFH
Expatriate
Posts: 957
Joined: Wed Nov 19, 2014 10:27 am
Karma: 0

De-anonymizing CEO users

Postby BOFH » Thu Nov 20, 2014 5:30 pm

When I acquired my avatar I noticed that this forum installation only lets you set remote avatar URIs instead of direct file uploads. This enables a very easy way to de-anonymize your users, simply by pointing the avatar to a webserver where access logs can be read and then match access log entry timestamps against post timestamps in threads where the remote avatar is loaded from.

That-other-forum makes it even easier to de-anonymize users since they load avatars into posts listed in the reply form, which this forum installation does not. On this forum one would need to match access log entry timestamps against post timestamps, thus it's still very easy to find the IP address of a poster replying to a thread in which the remote avatar occurs. (Whereas on that-other-forum one could make more accurate findings by matching both timestamps and referrals from requests sent to reply form submission page.) Anybody with their own webserver running can do it.

For example: Avatar fetched at 13:37:01 (remote access log entry) and post being registered on board at 13:37:00 makes it very easy to bind users to IP addresses.

It's unwise to trade minimal disk space and bandwidth saved on 200x200px images for security, just saying. I know it's default in phpBB, but sometimes default functions hurt you: http://archive.hack.lu/2013/dbongard_hacklu_2013.pdf" onclick="window.open(this.href);return false;

Save the users, kill remote avatars!
User avatar
Francis
Expatriate
Posts: 1116
Joined: Sun Aug 10, 2014 12:29 am
Karma: 0
Vietnam

Re: BugZone: Nothing's perfect...

Postby Francis » Thu Nov 20, 2014 5:38 pm

Totally agreed. This became an idiotic country. Who wants to go to prison for posting something on a forum. Protect your members.
Und der Haifisch der hat Tränen
Und die laufen vom Gesicht
Doch der Haifisch lebt im Wasser
So die Tränen sieht man nicht

In der Tiefe ist es einsam
Und so manche Träne fliesst
Und so kommt es dass das Wasser
In den Meeren salzig ist
User avatar
StroppyChops
The Missionary Man
Posts: 8743
Joined: Tue May 06, 2014 11:24 am
Karma: 187
Australia

Re: BugZone: Nothing's perfect...

Postby StroppyChops » Thu Nov 20, 2014 8:36 pm

Image
Bodge: This ain't Kansas, and the neighbours ate Toto!
User avatar
Francis
Expatriate
Posts: 1116
Joined: Sun Aug 10, 2014 12:29 am
Karma: 0
Vietnam

Re: BugZone: Nothing's perfect...

Postby Francis » Thu Nov 20, 2014 8:47 pm

Quite cryptic, don't you think Stroppy ?? Sometimes I really wonder what's going on in Australian heads (take it easy Stroppy......just joking)
Und der Haifisch der hat Tränen
Und die laufen vom Gesicht
Doch der Haifisch lebt im Wasser
So die Tränen sieht man nicht

In der Tiefe ist es einsam
Und so manche Träne fliesst
Und so kommt es dass das Wasser
In den Meeren salzig ist
User avatar
Username Taken
Raven
Posts: 7003
Joined: Mon May 19, 2014 6:53 pm
Karma: 259
Contact:
Cambodia

Re: BugZone: Nothing's perfect...

Postby Username Taken » Thu Nov 20, 2014 9:21 pm

StroppyChops wrote:Image
Francis wrote:Quite cryptic, don't you think Stroppy ?? Sometimes I really wonder what's going on in Australian heads (take it easy Stroppy......just joking)
Please Francis,

Do try to keep up . . . . .


Image

general-chatter/bugzone-nothing-perfect ... tml#p44107
... give 'em a quick, short, sharp shock ...

https://BooksAboutCambodia.com
User avatar
Francis
Expatriate
Posts: 1116
Joined: Sun Aug 10, 2014 12:29 am
Karma: 0
Vietnam

Re: BugZone: Nothing's perfect...

Postby Francis » Thu Nov 20, 2014 10:21 pm

Username Taken wrote:Please Francis,

Do try to keep up . . . . .
I'm trying.....I see a squirrel with a gun and a hat ???????
Und der Haifisch der hat Tränen
Und die laufen vom Gesicht
Doch der Haifisch lebt im Wasser
So die Tränen sieht man nicht

In der Tiefe ist es einsam
Und so manche Träne fliesst
Und so kommt es dass das Wasser
In den Meeren salzig ist
User avatar
General Mackevili
GONK
Posts: 12490
Joined: Tue May 06, 2014 5:24 pm
Karma: 206
Location: The Kingdom
Contact:
United States of America

Re: BugZone: Nothing's perfect...

Postby General Mackevili » Thu Nov 20, 2014 11:55 pm

Francis wrote:
Username Taken wrote:Please Francis,

Do try to keep up . . . . .
I'm trying.....I see a squirrel with a gun and a hat ???????
Hehehehe, so cute, right?

Some people's minds are occupied with important things like squirrels, and others get distracted by the small things in life, like being able to log in properly, image upload capability, etc.

It should be obvious by now that UT joined the Mod Team not only for his ability to see the big picture and capabilities to handle the forum software, but mainly because he knows were to find all sorts of hilarious squirrel pics! He once posted a video of squirrel on a jet ski to my Facebook wall. I laughed for a week straight!



P.S. Do you still not have that button to post images?
"Life is too important to take seriously."

"Life does not cease to be funny when people die any more than it ceases to be serious when people laugh."

Looking for the best deals on hotels and guesthouses in Cambodia?

Book through Agoda:

Phnom Penh
Siem Reap
Sihanoukville
Kampot
Koh Rong
User avatar
General Mackevili
GONK
Posts: 12490
Joined: Tue May 06, 2014 5:24 pm
Karma: 206
Location: The Kingdom
Contact:
United States of America

Re: BugZone: Nothing's perfect...

Postby General Mackevili » Thu Nov 20, 2014 11:58 pm

Francis wrote:"Quick Reply" has disappeared, too.
Now this?

What browser, etc, are you using?




Image
"Life is too important to take seriously."

"Life does not cease to be funny when people die any more than it ceases to be serious when people laugh."

Looking for the best deals on hotels and guesthouses in Cambodia?

Book through Agoda:

Phnom Penh
Siem Reap
Sihanoukville
Kampot
Koh Rong
User avatar
Francis
Expatriate
Posts: 1116
Joined: Sun Aug 10, 2014 12:29 am
Karma: 0
Vietnam

Re: BugZone: Nothing's perfect...

Postby Francis » Fri Nov 21, 2014 1:37 am

General Mackevili wrote:P.S. Do you still not have that button to post images?
General Mackevili wrote:
Francis wrote:"Quick Reply" has disappeared, too.
Now this?

What browser, etc, are you using?
No button to post images and no "quick reply". I'm using Firefox on Ubuntu.

Image
Und der Haifisch der hat Tränen
Und die laufen vom Gesicht
Doch der Haifisch lebt im Wasser
So die Tränen sieht man nicht

In der Tiefe ist es einsam
Und so manche Träne fliesst
Und so kommt es dass das Wasser
In den Meeren salzig ist


  • Advertisement
Booking.com

  • Similar Topics
    Replies
    Views
    Last post

Return to “General Chatter”



Who is online

Users browsing this forum: IraHayes and 176 guests