Linus, is the website encrypted?

MegaDave91 · February 27, 2013

I have a program called Trusteer Rapport (use mainly for online banking) that every once in a while will remind me that apparently the forum isn't encrypted. This might be concerning to some if they use the same password here as they do for other things as well, particularly sensitive information.

azeotrope · February 27, 2013

What do you mean by encrypted? It's not using https since they probably haven't bothered buying a certificate. It's not a big deal for forums, just don't use the same password that you use for email etc. I'd assume that passwords are hashed in the database by VB5 though.

EChondo · February 27, 2013

I'd assume that passwords are hashed in the database by VB5 though.

Yeah and we all know how VB5 is doing! Next thing we know our passwords are on the front page because of a bug :P

azeotrope · February 27, 2013

lol, yeah let's just hope there's no bug like that. I still don't understand the VB5 choice from a secruty perspective. hopefully there aren't any obvious SQLi or XSS vulnerabilities. I could pentest, but it doesn't really bother me. You shouldn't ever use a handle/passowrd on a forum that would possibly damage you if it were compromised.