RMweb not safe?

[jburgt]

My iPhone give me the message that the RMweb should not be safe?

 

Kind regards, Hans

[Ian J.]

RMweb isn't on an https system, so browsers will sometimes flag it as unsafe.

[F-UnitMad]

Too flippin' right RMweb isn't safe!!

 

You can end up wasting hours on here, & there's all sorts of dangerous inspiration, too!!

 

[royaloak]

Too flippin' right RMweb isn't safe!!

 

You can end up wasting hours on here, & there's all sorts of dangerous inspiration, too!!

 

I dont mind wasting time on here but its the damage it does to my wallet, especially that bloomin 'bargain hunters'thread! 

[Guy Rixon]

It already has HTTPS support. You can change the protocol from http to https in the browser's address-bar. What it lacks is a proper certificate of identity for the server(s). Currently, RMWeb uses a self-signed certificate, so you browser quite rightly says that this is not secure. It's insecure in the sense that you have no assurance that the site to which you send your password is really RMWeb.

 

RMWeb should have HTTPS for the log-in pages, to protect the passwords (it may force browsers onto HTTPS for these pages; I haven't checked). It should have a proper certificate to confirm its identity. However, having self-signed HTTPS protecting the passwords is better than not HTTPS at all.

[jburgt]

@Guy,

 

I tried, but got a fault message. And the advice to contact the webmaster.

 

Gr, Hans

[Guy Rixon]

So they have HTTPS, haven't set it up fully, and it doesn't serve all the pages.

[Jenny Emily]

I get errors like these when there is a discrepancy with the time that my computer thinks it is, and the time that the server online thinks that it is.

[Alien]

Too flippin' right RMweb isn't safe!!

 

You can end up wasting hours on here, & there's all sorts of dangerous inspiration, too!!

 

 

Certainly not safe. There I was, just reading about unifrogs...............then I found myself whisked away to a secure location and was unable to escape hours [until my credit card finally melted].

 

Its hell being held in Jails.........................or was it Rails..............  

[40F]

So they have HTTPS, haven't set it up fully, and it doesn't serve all the pages.

 

And ????

[jburgt]

I thought this was a decent discussion. I got a message on my browser to contact the webmaster when I visited the RMweb. Not save as my provider said. So why the moderator deleted some of my posts, instead of given me a proper reaction? Or wrote I in the wrong thread?

[Oldddudders]

My iPad and iMac don't register any discomfort about RMweb. I never use my iPhone for Internet stuff as it is impossible to enjoy reading it.

 

A majority of my incoming emails are not considered by Outlook to be from safe senders - because they don't comply with some US standard. Yawn. 

[chris p bacon]

I thought this was a decent discussion. I got a message on my browser to contact the webmaster when I visited the RMweb. Not save as my provider said. So why the moderator deleted some of my posts, instead of given me a proper reaction? Or wrote I in the wrong thread?

 

 

The iPhone/Android posts have been deleted, nothing that matters.

 

I access on an iMac at home and an iPhone 6 and don't get a warning, I don't log in with the phone but just browse with a cuppa at work.

[Andy Y]

The iPhone/Android posts have been deleted, nothing that matters.

That's exactly correct.

[jburgt]

OK, I asked the posters in question to stay on topic. But you also deleted my question about a HTTPS-website. One of the ideas of my Provider.

[Oldddudders]

OK, I asked the posters in question to stay on topic. But you also deleted my question about a HTTPS-website. One of the ideas of my Provider.

 

So, since as we have identified most of us - almost all of us? - don't have any sort of security issue with RMweb, why would Andy Y be bothered about some additional gismo? We all - well almost all, presumably - have a firewall, so any nasties that an unsafe website tries to import will be zapped before they land. What is this all about? I have been with RMweb nealy 10 years, and no nonsense has ever landed here. We don't register card details, home addresses, bank a/c details. Where's the risk?

[JeremyC]

Given that RMWeb holds some information on its members, how will it be affected by the new General Data Protection Regulations (GDPR) which come into effect in May?

[Andy Y]

Given that RMWeb holds some information on its members, how will it be affected by the new General Data Protection Regulations (GDPR) which come into effect in May?

It will be fully compliant. It will be clear what information is held, as it is is now - the login name you chose on registration, your email address, the IP address posts are made from, passwords are encrypted and unreadable. And any topics, posts, signatures or messages you have made of course.

[Guy Rixon]

So, since as we have identified most of us - almost all of us? - don't have any sort of security issue with RMweb, why would Andy Y be bothered about some additional gismo? We all - well almost all, presumably - have a firewall, so any nasties that an unsafe website tries to import will be zapped before they land. What is this all about? I have been with RMweb nealy 10 years, and no nonsense has ever landed here. We don't register card details, home addresses, bank a/c details. Where's the risk?

 

Suppose that web site X has accounts with passwords but does not provided an encrypted connection for sending the passwords. Some members of the site use the same password that they use for other sites with more important content, like banks or their utility suppliers, their place of work (many people are smart enough not to do this, but many others do make the mistake). Said members log on to X on a public networks (e.g. at cafes) and their passwords are read by criminals who are scanning the traffic on those networks. The criminals then try the harvested passwords on well-known sites and get access.

 

That's the risk. It's independent of any information of value stored on RMWeb.

 

Note that I am not asserting that RMWeb lacks encryption for password exchange, just that I haven't seen how it's done.

[phil-b259]

Suppose that web site X has accounts with passwords but does not provided an encrypted connection for sending the passwords. Some members of the site use the same password that they use for other sites with more important content, like banks or their utility suppliers, their place of work (many people are smart enough not to do this, but many others do make the mistake). Said members log on to X on a public networks (e.g. at cafes) and their passwords are read by criminals who are scanning the traffic on those networks. The criminals then try the harvested passwords on well-known sites and get access.

 

That's the risk. It's independent of any information of value stored on RMWeb.

 

Note that I am not asserting that RMWeb lacks encryption for password exchange, just that I haven't seen how it's done.

 

Then don't have the same password for here as you do for your bank, etc

 

Sheesh what happened to personal responsibility? - its not as if there aren't enough reminders out there about people being proactive in protecting themselves.

 

It may sound harsh but if someone is dumb enough to use their RMweb password for other (and arguably more important sites), then gets hacked as a result - its their own stupid fault.

[Guest]

I have to agree with the above... if I was daft enough to use the same login for frivolous stuff like RMWeb as well as rather more serious stuff like banking, I would hold no-one responsible for my stupidity except for myself. Sadly, I suspect that today's culture of HAVING to blame someone for everything that goes wrong in your life is in effect here.

Folk need to use common sense. I have a healthy amount of that, but perhaps it needs to be taught in schools as a life skill, as it is sorely lacking elsewhere.

There. That's today's moan out of the way.

[jburgt]

As said here, I use different keywords. Of course that’s much safer. My question was, is a HTTPS website version better than a HTTP website? My provider advise the first.

[phil-b259]

As said here, I use different keywords. Of course that’s much safer. My question was, is a HTTPS website version better than a HTTP website? My provider advise the first.

Two thoughts on this.

 

Firstly internet providers / browser software makers may simply repeating 'best practice' guildelines parrot fashion rather than actually giving any thought to the issue.

 

Secondly said organisations may take the view that given the way an increasing number of folk seem to have difficulty in staying safe online it is better to make the HTTPS recomedation anyway.

 

The bottom line is that given the nature of RMweb - and in particular the lack of information it collects (as opposed to what users my decide to upload by themselves and for which they remain liable as it were), the use of HTTPS is not necessary.

[Mallard60022]

I have to agree with the above... if I was daft enough to use the same login for frivolous stuff like RMWeb as well as rather more serious stuff like banking, I would hold no-one responsible for my stupidity except for myself. Sadly, I suspect that today's culture of HAVING to blame someone for everything that goes wrong in your life is in effect here.

Folk need to use common sense. I have a healthy amount of that, but perhaps it needs to be taught in schools as a life skill, as it is sorely lacking elsewhere.

There. That's today's moan out of the way.

Sorely lacking elsewhere? Why is that? Is it because people are "dumb" and "stupid" as mentioned earlier or "daft enough" as you suggest, or because they don't have the experience that you and some others have and maybe they are older and do not understand these 'problems'?

Schools already provide young people withg plenty of IT experience and that age group will be enabled with more life skills than you or me, it is more than obvious that many older folk need support, not mocking. We should not forget that many of these old folk worked to provide the level of lifestyle many of us are now lucky enough to enjoy and perhaps they need a little more respect and support rather than being termed daft!

There's my little moan done then.

Phil. Proudly an old fart.

Edited July 30, 2018 by Mallard60022

[Talltim]

While there should be no banking etc info on RMWeb, sometimes info hacked from various places can combine to become a security issue. For example, I'm sure more than one person has sent their address via PM to other members.

This article shows that basic info from one place can lead to gaining info from other more important places, eventually leading to real loss https://www.wired.com/2012/08/apple-amazon-mat-honan-hacking/