BugZone: Nothing's perfect...

This is where our community discusses almost anything! While we're mainly a Cambodia expat discussion forum and talk about expat life here, we debate about almost everything. Even if you're a tourist passing through Southeast Asia and want to connect with expatriates living and working in Cambodia, this is the first section of our site that you should check out. Our members start their own discussions or post links to other blogs and/or news articles they find interesting and want to chat about. So join in the fun and start new topics, or feel free to comment on anything our community members have already started! We also have some Khmer members here as well, but English is the main language used on CEO. You're welcome to have a look around, and if you decide you want to participate, you can become a part our international expat community by signing up for a free account.
Francis
Expatriate
Posts: 1116
Joined: Sun Aug 10, 2014 12:29 am
Reputation: 0
Vietnam

Re: BugZone: Nothing's perfect...

Post by Francis »

"Quick Reply" has disappeared, too.
Und der Haifisch der hat Tränen
Und die laufen vom Gesicht
Doch der Haifisch lebt im Wasser
So die Tränen sieht man nicht

In der Tiefe ist es einsam
Und so manche Träne fliesst
Und so kommt es dass das Wasser
In den Meeren salzig ist
BOFH
Expatriate
Posts: 957
Joined: Wed Nov 19, 2014 10:27 am
Reputation: 3

De-anonymizing CEO users

Post by BOFH »

When I acquired my avatar I noticed that this forum installation only lets you set remote avatar URIs instead of direct file uploads. This enables a very easy way to de-anonymize your users, simply by pointing the avatar to a webserver where access logs can be read and then match access log entry timestamps against post timestamps in threads where the remote avatar is loaded from.

That-other-forum makes it even easier to de-anonymize users since they load avatars into posts listed in the reply form, which this forum installation does not. On this forum one would need to match access log entry timestamps against post timestamps, thus it's still very easy to find the IP address of a poster replying to a thread in which the remote avatar occurs. (Whereas on that-other-forum one could make more accurate findings by matching both timestamps and referrals from requests sent to reply form submission page.) Anybody with their own webserver running can do it.

For example: Avatar fetched at 13:37:01 (remote access log entry) and post being registered on board at 13:37:00 makes it very easy to bind users to IP addresses.

It's unwise to trade minimal disk space and bandwidth saved on 200x200px images for security, just saying. I know it's default in phpBB, but sometimes default functions hurt you: http://archive.hack.lu/2013/dbongard_hacklu_2013.pdf

Save the users, kill remote avatars!
Francis
Expatriate
Posts: 1116
Joined: Sun Aug 10, 2014 12:29 am
Reputation: 0
Vietnam

Re: BugZone: Nothing's perfect...

Post by Francis »

Totally agreed. This became an idiotic country. Who wants to go to prison for posting something on a forum. Protect your members.
Und der Haifisch der hat Tränen
Und die laufen vom Gesicht
Doch der Haifisch lebt im Wasser
So die Tränen sieht man nicht

In der Tiefe ist es einsam
Und so manche Träne fliesst
Und so kommt es dass das Wasser
In den Meeren salzig ist
User avatar
StroppyChops
The Missionary Man
Posts: 10598
Joined: Tue May 06, 2014 11:24 am
Reputation: 1032
Australia

Re: BugZone: Nothing's perfect...

Post by StroppyChops »

Image
Bodge: This ain't Kansas, and the neighbours ate Toto!
Francis
Expatriate
Posts: 1116
Joined: Sun Aug 10, 2014 12:29 am
Reputation: 0
Vietnam

Re: BugZone: Nothing's perfect...

Post by Francis »

Quite cryptic, don't you think Stroppy ?? Sometimes I really wonder what's going on in Australian heads (take it easy Stroppy......just joking)
Und der Haifisch der hat Tränen
Und die laufen vom Gesicht
Doch der Haifisch lebt im Wasser
So die Tränen sieht man nicht

In der Tiefe ist es einsam
Und so manche Träne fliesst
Und so kommt es dass das Wasser
In den Meeren salzig ist
User avatar
Username Taken
Raven
Posts: 13896
Joined: Mon May 19, 2014 6:53 pm
Reputation: 5962
Cambodia

Re: BugZone: Nothing's perfect...

Post by Username Taken »

StroppyChops wrote:Image
Francis wrote:Quite cryptic, don't you think Stroppy ?? Sometimes I really wonder what's going on in Australian heads (take it easy Stroppy......just joking)
Please Francis,

Do try to keep up . . . . .


Image

https://cambodiaexpatsonline.com/general ... tml#p44107
Francis
Expatriate
Posts: 1116
Joined: Sun Aug 10, 2014 12:29 am
Reputation: 0
Vietnam

Re: BugZone: Nothing's perfect...

Post by Francis »

Username Taken wrote:Please Francis,

Do try to keep up . . . . .
I'm trying.....I see a squirrel with a gun and a hat ???????
Und der Haifisch der hat Tränen
Und die laufen vom Gesicht
Doch der Haifisch lebt im Wasser
So die Tränen sieht man nicht

In der Tiefe ist es einsam
Und so manche Träne fliesst
Und so kommt es dass das Wasser
In den Meeren salzig ist
User avatar
General Mackevili
The General
Posts: 18400
Joined: Tue May 06, 2014 5:24 pm
Reputation: 3397
Location: The Kingdom
Contact:
United States of America

Re: BugZone: Nothing's perfect...

Post by General Mackevili »

Francis wrote:
Username Taken wrote:Please Francis,

Do try to keep up . . . . .
I'm trying.....I see a squirrel with a gun and a hat ???????
Hehehehe, so cute, right?

Some people's minds are occupied with important things like squirrels, and others get distracted by the small things in life, like being able to log in properly, image upload capability, etc.

It should be obvious by now that UT joined the Mod Team not only for his ability to see the big picture and capabilities to handle the forum software, but mainly because he knows were to find all sorts of hilarious squirrel pics! He once posted a video of squirrel on a jet ski to my Facebook wall. I laughed for a week straight!



P.S. Do you still not have that button to post images?
"Life is too important to take seriously."

"Life does not cease to be funny when people die any more than it ceases to be serious when people laugh."

Have a story or an anonymous news tip for CEO? Need advertising? CONTACT ME

Cambodia Expats Online is the most popular community in the country. JOIN TODAY

Follow CEO on social media:

Facebook
Twitter
YouTube
Google+
Instagram
User avatar
General Mackevili
The General
Posts: 18400
Joined: Tue May 06, 2014 5:24 pm
Reputation: 3397
Location: The Kingdom
Contact:
United States of America

Re: BugZone: Nothing's perfect...

Post by General Mackevili »

Francis wrote:"Quick Reply" has disappeared, too.
Now this?

What browser, etc, are you using?




Image
"Life is too important to take seriously."

"Life does not cease to be funny when people die any more than it ceases to be serious when people laugh."

Have a story or an anonymous news tip for CEO? Need advertising? CONTACT ME

Cambodia Expats Online is the most popular community in the country. JOIN TODAY

Follow CEO on social media:

Facebook
Twitter
YouTube
Google+
Instagram
Francis
Expatriate
Posts: 1116
Joined: Sun Aug 10, 2014 12:29 am
Reputation: 0
Vietnam

Re: BugZone: Nothing's perfect...

Post by Francis »

General Mackevili wrote:P.S. Do you still not have that button to post images?
General Mackevili wrote:
Francis wrote:"Quick Reply" has disappeared, too.
Now this?

What browser, etc, are you using?
No button to post images and no "quick reply". I'm using Firefox on Ubuntu.

Image
Und der Haifisch der hat Tränen
Und die laufen vom Gesicht
Doch der Haifisch lebt im Wasser
So die Tränen sieht man nicht

In der Tiefe ist es einsam
Und so manche Träne fliesst
Und so kommt es dass das Wasser
In den Meeren salzig ist
Post Reply Previous topicNext topic
  • Similar Topics
    Replies
    Views
    Last post

Who is online

Users browsing this forum: Ahrefs [Bot], Khmu Nation, truffledog and 1197 guests