Sign me up Login
Fairyabc discussion Board Return home

Teresa's space [Favorites] [Copy] [Share] [RSS]

  • DescriptionFairy Heather Moonspirit in game!
  • HobbiesProgramming, gaming, sci-fi, old horror movies, doll customization, sewing, building electronics
  • GenderFemale
  • TalentTinker talent

View profile detail

Mini Update + Mentoring 2018-11-06
Hey guys! So much has been going on recently, but I haven't posted in forever, and I know some people are wondering. The development is going well, but for certain reasons I can't talk about it, which is why I don't post anymore!  However, I have recently started doing classes/mentoring on Phaser 3 with ES6, so if you wanna learn to make some games, PM me!
(125) Views|(0) Comments
Public UIDs and Fabc's Awful Security 2018-08-25
A recent conversation reminded me about something that's been bothering me for a while; I decided I'd write about it here, since I have nothing better to do with my life atm, apparently. ;) When I first started posting here, people told me to engage more with the community, so when I used a little trick in-game, I figured I'd post a mini 'tutorial' about it. At the time, I didn't realize how public and important UIDs were in fabc community. I actually thought that it was an accident that the ID was shown in users' space URLs, due to the horrendous URL generation instead of the usage of routes (but that's another issue). This leads me to the one of the biggest issues with fabc's security.  Having UIDs public -- easily visible to everyone -- allows malicious users to spoof identities, and impersonate anyone they please. Making UIDs private and hashed, and having the session validated -- allowing only those with sufficient database permissions to query them, solves this problem, keeping attackers from accessing or intercepting them to change them.  Of course, this won't 100% solve all problems. There are other issues which can allow attacks through the cracks. That is why it is imperative for the forum pages to be secured with SSL, ASAP. Not having the login information encrypted is irresponsible. This is a tiny site, so it may never end up an issue, but you can not be too safe. I'll say it again, please make sure that your password is not at all related to anything you use anywhere else. As it stands, your info can be easily intercepted, and honestly, the more I find out about the security on this site, the more I worry about how passwords are stored. Another thing is that apparently this site is not version controlled. That is truly terrifying. 
(282) Views|(8) Comments

View more

You need log in Login | Sign me up

louiselouisa 2019-9-18 18:46
Teresa: your page is really cute!
thank you!!
Teresa 2019-9-15 14:10
hi! ^ ^
doritos04 2019-9-14 14:51
Shinymist 2019-5-29 20:48
Teresa: What is the meadow background on your header? It’s gorgeous!
Thank you so much! My header background is of the Ballroom from last autumn.
MieArt 2019-5-16 10:09
Teresa: hi, your profile pic is so pretty!
thank you, teresa! c:
MieArt 2019-5-13 16:26
oh hello, it's nice to meet you! :)
Nelly2024 2019-5-12 16:07
Teresa: <3
IAmWillow 2019-5-12 15:15
Teresa: I might be gone to an appt when you're back, but I still wanna see!
Hey! It's almost finished! It'll be the first animation I've posted! : D
Kei 2019-5-9 18:40
Teresa: The background on your page is so pretty!
Thanks :)
MiaSugarglow 2019-1-27 15:21
What's this?
Lavender-Marie 2018-8-31 22:38
Teresa: Yay band! I want to learn the flute so much. I play clarinet and trumpet and learning violin and guitar. I don’t get a lot of time to practice anymor ...
That's awesome! My closest friends actually play clarinet and trumpet :D It's too bad that you don't have as much practice time anymore, but I'm sure you'll find the time somehow <3
Sabrinaandove❤ 2018-8-31 16:51
Hiii! Just flying by to say hello!
GoldenFlower 2018-8-30 22:47
Teresa: I hope school is going well for you, then!
Thank you!
GoldenFlower 2018-8-30 15:55
Teresa: Hey, I haven’t seen you around lately, how are you?
I'm good. I just have been doing a lot of school t\stuff lately. I make sure I come and check up on here, though.  
DelicateDeer 2018-8-29 19:39
Your page has updated a lot since I last saw it! Love it and all your blogs so far  
I have no clue why but your playlist unfortunatly wont play for me    Hopefully it's just glitching on my end
JulieBubble 2018-7-29 11:36
Teresa: Oooh~ love the new page <3
Thank you! :D
View all

No threads yet


banned|mobile|Archiver|Developer Email|Account frozen|Privacy Policy|Fairyabc

GMT-4, 2020-4-6 01:49

Fairyabc © 2016-2017 Powered by Discuz!

To Top