#1 2017-12-04 11:10:32

tom1986

Member

Registered: 2011-10-14

Posts: 26

HTTPS problem

Has anyone made a point of the fact the site isn't https secure? Is that something you guys are looking into or..?
Great site apart from that!

tom1986

Member

Registered: 2011-10-14

Posts: 26

Re: HTTPS problem

And another thing! I've discovered there doesn't seem to be a way to change my password, and when I got gmbill to e-mail my details they did just that, including my password. Which if I'm not wrong means they don't hash the passwords which is a bit unforgivable especially these days. So I love this site and everything is stands for, but I also quite having my bank details and online accounts secure, I wish the two weren't mutually exclusive!

toucan2

Member

Registered: 2011-05-04

Posts: 83

Re: HTTPS problem

Didn't ishotmyself.com become https secure several months ago?

Last edited by toucan2 (2017-12-05 10:43:10)

tom1986

Member

Registered: 2011-10-14

Posts: 26

Re: HTTPS problem

Gonna contact support, will copy paste the response in here if anyone is interested. It's just another big hack waiting to happen.

tom1986

Member

Registered: 2011-10-14

Posts: 26

Re: HTTPS problem

Well here's my letter to the webmaster!
Dear Beautiful Agony team,

hope I'm using the correct form to make this comment! I've (somehow) only just noticed that your site is not https secure, which is a real problem for me logging in and of course being a paying customer. I've also discovered, whilst attempting (and being unable) to change my password via Gmbill, that Gmbill do not hash passwords. For recovery they e-mailed me my full password, rather than resetting it. As far as I know this means they do not e n c r y p t (forgive the spacing, this form has just rejected my message twice because it seems to think that this word is "gibberish"!) the password database and this would seem to mean they are asking to be the next big data breach victims.

I love your website, and I love the philosophy behind it, I've turned several friends on to it over the years, and I'd like to continue visiting, but this stuff is really disappointing. Are you aware of these security issues, are they being worked on?
All the best guys, I know you must be busy but I am looking forward to hearing back from you,
regards,
Tom P
-------------------------------------------------------------------------------
You've gotta chuckle, the message form genuinely told me that the words 'encrypt' and 'encryption' are gibberish! Says it all hahaha

Agony_Admin

Member

Registered: 2016-09-13

Posts: 432

Re: HTTPS problem

Hi Tom1986, I believe our Contact Support team has already responded to you and I hope that it's all been sorted out. Thank you for believing in our site, and thank you for your patience

Have a merry Xmas and happy new year!
A_A

Last edited by Agony_Admin (2017-12-13 04:57:50)

---

Beautiful Agony Site Manager