Encryption

[helenscott08]

I am wondering why this board is NOT ENCRYPTED. So much personal info is in the posts.

I have heard a lot lately on radio and via KIM KOMANDO's site how in today's world it is becoming more and more prevalent that hackers or whatever they are called, are going into web sites in multiple ways. This means that the computer users are often not aware someone has invaded their computer and they, the computer user, is inadvertently and unknowingly sending the hacker on his way to everyone else you might be communicating with.

The general consensus is that everyone should ENCRYPT their sites or blogs or whatever it is you are doing...and have mail programs that are encrypted...

Thank you for your thoughts on this matter...

helen scott

[shellebelle]

If it were encrypted you couldn't READ it.

Since you choose what you want to share you are as protected as you choose. Some members do not use their real names, many use anonymous email addresses as well and then there are the ones like myself; we are here.

See I want you to see me. I want you to now me. I don't want to be just that person you pass on the street I want you to stop and look and say hey aren't you Shelle? Aren't you on Wacco? Don't you help people with their businesses?

And then the hacker issue. I refuse to live in fear.

I have prepaid legal hack away. I am armed with attorneys. My credit reports are monitored 365 days a year 24/7. <A HREF="https://www.prepaidlegal.com/idt/shelleyraeoconnor"><img src="https://www.prepaidlegal.com/images/AssocsOnly/banner_ads/idt_banner1.gif" border=0></A>

Also google - google or goosh you? What you see may be surprising or not. I WANT to be Googlable! I really do! If I have nothing to hide! Google me! Please! ShelleRae O'Connor, ShelleRae Oconnor, shelleyrae oconnor - explore - its fun! I want people to enjoy my life but mostly I never want someone I love to not be able to find me. Life throws us curves. I have almost died twice in the past 20 years. During crisis I can't be online, I can't be the instigator but I can be found, I can be reached! I am leaving a trail on purpose with intention!



I am wondering why this board is NOT ENCRYPTED. So much personal info is in the posts.

I have heard a lot lately on radio and via KIM KOMANDO's site how in today's world it is becoming more and more prevalent that hackers or whatever they are called, are going into web sites in multiple ways. This means that the computer users are often not aware someone has invaded their computer and they, the computer user, is inadvertently and unknowingly sending the hacker on his way to everyone else you might be communicating with.

The general consensus is that everyone should ENCRYPT their sites or blogs or whatever it is you are doing...and have mail programs that are encrypted...

Thank you for your thoughts on this matter...

helen scott

[PeriodThree]

Helen,

I can hear the fear and concern in your words. You fear is natural. You are relying on a technology which has become so complex that few people really understand what is going on.

In this case of uncertainty, it might be helpful if you were to spend a little time considering exactly what it is you are afraid of, and then armed with this understanding you can consider the possible attacks and work on ways around them.

For example, one threat model is that the server(s) which run Wacco could be compromised, and the crackers could then have access to your personal information.

One response to that threat is to simply not enter anything into Wacco, in public or private, which could hurt you if it were to be disclosed.

The two real concerns are to make sure that you don't use the same password on Wacco which you use for a high security application, and that your credit card information is protected.

Assuming that Barry is following good practices in his site design he is already encrypting the passwords which you enter, and he is either not keeping credit card data, or he is very careful in the way he stores that data.

Even if he is not following good practices you will not be hurt by most disclosures of your password if you don't use an important password on Wacco. And while your credit card can be misused, you are limited to $50 liability for most fraudulent uses of your card.

I strongly recommend that you read a bit Bruce Schneier and his blog:
https://www.schneier.com/blog/

Knowledge can be power (when it doesn't simply scare the heck out of us!)

Cheers,
Rich



I am wondering why this board is NOT ENCRYPTED. So much personal info is in the posts.

I have heard a lot lately on radio and via KIM KOMANDO's site how in today's world it is becoming more and more prevalent that hackers or whatever they are called, are going into web sites in multiple ways. This means that the computer users are often not aware someone has invaded their computer and they, the computer user, is inadvertently and unknowingly sending the hacker on his way to everyone else you might be communicating with.

The general consensus is that everyone should ENCRYPT their sites or blogs or whatever it is you are doing...and have mail programs that are encrypted...

Thank you for your thoughts on this matter...

helen scott

[Barry]

Thanks Rich!

Passwords are stored in encrypted form on WaccoBB.net.
We do not store credit card info.

Barry Chertov
Director of Waccovia Security



Helen,

I can hear the fear and concern in your words. You fear is natural. You are relying on a technology which has become so complex that few people really understand what is going on.

In this case of uncertainty, it might be helpful if you were to spend a little time considering exactly what it is you are afraid of, and then armed with this understanding you can consider the possible attacks and work on ways around them.

For example, one threat model is that the server(s) which run Wacco could be compromised, and the crackers could then have access to your personal information.

One response to that threat is to simply not enter anything into Wacco, in public or private, which could hurt you if it were to be disclosed.

The two real concerns are to make sure that you don't use the same password on Wacco which you use for a high security application, and that your credit card information is protected.

Assuming that Barry is following good practices in his site design he is already encrypting the passwords which you enter, and he is either not keeping credit card data, or he is very careful in the way he stores that data.

Even if he is not following good practices you will not be hurt by most disclosures of your password if you don't use an important password on Wacco. And while your credit card can be misused, you are limited to $50 liability for most fraudulent uses of your card.

I strongly recommend that you read a bit Bruce Schneier and his blog:
https://www.schneier.com/blog/

Knowledge can be power (when it doesn't simply scare the heck out of us!)

Cheers,
Rich

[shellebelle]

That isn't true any more unless your credit card company has specifically included that in this years legal small print. New laws came into effect this year that lay responsibility back on the consumer due to horrific losses in the past few years. You now have time limits for reporting and many more "requirements" for coverage.

But since Barry uses PayPal your potential losses are minimized greatly.

This is not true for other sites.

PS Your credit is not as valuable these days as your social and medical insurance.



Even if he is not following good practices you will not be hurt by most disclosures of your password if you don't use an important password on Wacco. And while your credit card can be misused, you are limited to $50 liability for most fraudulent uses of your card.



Cheers,
Rich

[shellebelle]

Oops I see what Rich is talking about if you loose a card it is $50 by FTC rules if reported in the first 24 hours but have your attorney ready. If they open a credit card for you or open credit for you - you are liable. If its with your pin (aka they steal your mail) then it all changes.

https://www.ftc.gov/bcp/conline/pubs/credit/atmcard.shtm




That isn't true any more unless your credit card company has specifically included that in this years legal small print. New laws came into effect this year that lay responsibility back on the consumer due to horrific losses in the past few years. You now have time limits for reporting and many more "requirements" for coverage.

But since Barry uses PayPal your potential losses are minimized greatly.

This is not true for other sites.

PS Your credit is not as valuable these days as your social and medical insurance.

[Zeno Swijtink]

Since you choose what you want to share you are as protected as you choose. Some members do not use their real names, many use anonymous email addresses as well and then there are the ones like myself; we are here.

See I want you to see me. I want you to now me. I don't want to be just that person you pass on the street I want you to stop and look and say hey aren't you Shelle? Aren't you on Wacco? Don't you help people with their businesses?


I am very much for using real names. The worst are those people who dig deeper underground after being more out at first, such as, probably, whatzwithi (https://www.waccobb.net/forums/member.php?u=8878). Look at that "profile" and the recent "joining."

Why would you join if you don't post??

Yes, you're right, you got it!

[MsTerry]

Well, how real is a real name or person?
With a common name, people can be easily confused.
But how common is a name like Zeno , how about in combination with Swijtink?
Could you use it to change your identity?
https://www.treknature.com/members/Zeno/

the internet is by it's nature as anonymous or as intimate as you want it to be.



I am very much for using real names. The worst are those people who dig deeper underground after being more out at first, such as, probably, whatzwithi (https://www.waccobb.net/forums/member.php?u=8878). Look at that "profile" and the recent "joining."