Frothers Unite! UK

Editor in Chief Bill wrote:

I keep getting security certificate does not match warnings from Norton but otherwise no problems

That's odd, since we don't have a security certificate (or need one).

Or any security...

You just couldn't make this up!

Monkeyborg wrote:
You just described a couple of the TMP Editor's!

Ooooh, matron!

I thought Wendy just got tired of hanging out with smelly wurgamerz and realized we'd started an ouroboros equation and decided not to comment as everything had been said. Also possible Wendy looked at the latest prices for GW games and decided she could afford a vintage moog for the same price as a Black Consuls Space Marine army.

I think it's 'cause we're not as fun to hang out with as we think we are.

But what the hell. At least my mother still loves me.

"I wonder what Katie would make of the security on TMP"

I laughed. I hasten to add, although part of the security group, I'm not actually a specialist in the security field. But, you know, even I know not to put unencrypted passwords IN THE PUBLICLY VISIBLE URLS...

Holy hell, how has no-one spotted this before?


"Hopefully Katie will pop in at some point to give us an informed view as to the legalities of the situation."

As a quick guess, it's a violation of parts 3, 4, 6, 10, 11 and 12 of the PCI-DSS standard to which TMP is obliged to conform by dint of having signed the Paypal Merchant agreement. If you have the sponsor password, you can control the sponsor user account, thus incurring billables which the sponsor user has not authorised. Technically that would leave Paypal liable for the monies until they can recover them from TMP, which is one of the reasons why they insist on PCI-DSS compliance.

So, our next move is to alert PayPal, then?

"She's probably unable to post after splitting her sides when reading about it!"

No, I'm just cross that people are doing this stuff without reading even basic texts about the right way to do things because they just think they know better.

In years gone by, the only person that someone running on Dunning-Kruger used to harm was themselves. Technology is giving them ability to scale that pain out. I swear the last words a human will speak are going to be "I'm SMART -- I don't NEED to read the documentation, this is perfectly simple to operate.."

So you are saying we should buy Armintrout a chainsaw?

Horton W Bangpower wrote:

Bronshtein wrote:

General Paranoia wrote:

BeePie wrote:Seeing as we have a few ex advertisers here, I wonder if any of them would care to see if they can still access their old advertising reports and see if their passwords are displayed in the webpage address?
And one of those advertisers on Google really needs to rethink their password choice!

Well bugger me sideways with a fishfork! There I am and there's my password. Bastard.

Brony, are you "Anntenociti" (sic) Jed?

I'll take that as a yes, then? I thought you were Sc0rcher for so long!

What Katie fails to understand is that TMP is a HOBBY site, not a BUSINESS.
And Bill has been doing things right for TWENTY YEARS.

Has Katie even been ALIVE for TWENTY YEARS???

Sheesh.