Sign me up Login
fairyabc discussion Board Return home

Teresa's space http://www.fairyabc.com/?6264 [Favorites] [Copy] [Share] [RSS]

Music
Statistic

Visitors: 384

    No Albums yet

Public UIDs and Fabc's Awful Security 2018-08-25
A recent conversation reminded me about something that's been bothering me for a while; I decided I'd write about it here, since I have nothing better to do with my life atm, apparently. ;) When I first started posting here, people told me to engage more with the community, so when I used a little trick in-game, I figured I'd post a mini 'tutorial' about it. At the time, I didn't realize how public and important UIDs were in fabc community. I actually thought that it was an accident that the ID was shown in users' space URLs, due to the horrendous URL generation instead of the usage of routes (but that's another issue). This leads me to the one of the biggest issues with fabc's security.  Having UIDs public -- easily visible to everyone -- allows malicious users to spoof identities, and impersonate anyone they please. Making UIDs private and hashed, and having the session validated -- allowing only those with sufficient database permissions to query them, solves this problem, keeping attackers from accessing or intercepting them to change them.  Of course, this won't 100% solve all problems. There are other issues which can allow attacks through the cracks. That is why it is imperative for the forum pages to be secured with SSL, ASAP. Not having the login information encrypted is irresponsible. This is a tiny site, so it may never end up an issue, but you can not be too safe. I'll say it again, please make sure that your password is not at all related to anything you use anywhere else. As it stands, your info can be easily intercepted, and honestly, the more I find out about the security on this site, the more I worry about how passwords are stored. Another thing is that apparently this site is not version controlled. That is truly terrifying. 
(68) Views|(8) Comments
Update On Game 2018-08-05
   Between my job, working on my big site and blog -- on top of other projects, meetings, studying, cooking and cleaning, and dealing with disability I have precious little time to devote to this project. As such, I can make no estimate when I will launch the first demo.    Currently, I'm taking a moment to restructure and change the stack. I started with an HTML 5 template and plain old ES5. Actually, I'm still using ES5 because I want it to be as widely compatible as possible, but I needed a module loader (and figure I'll go with something that doubles as a task runner so I don't have to ship with MORE dependencies), so I'm going with webpack. I actually haven't needed a module loader before, so I'm having to learn it... And I'll be real, I'm not really sure how to properly unit test an HTML5 game. Of course, I resent it because then I'm dragged into using bloated Node just for one small thing. Plus I have to use JavaScript in the backend now, which makes me grumbly because I want to use as little of that horrible language as possible lol.
(48) Views|(1) Comments

View more

  • DescriptionFairy Heather Moonspirit in game!
  • HobbiesProgramming, gaming, sci-fi, old horror movies, doll customization, sewing, building electronics
  • GenderFemale
  • TalentTinker talent

View profile detail

You need log in Login | Sign me up


Lavender-Marie 2018-8-31 09:38 PM
Teresa: Yay band! I want to learn the flute so much. I play clarinet and trumpet and learning violin and guitar. I don’t get a lot of time to practice anymor ...
That's awesome! My closest friends actually play clarinet and trumpet :D It's too bad that you don't have as much practice time anymore, but I'm sure you'll find the time somehow <3
Sabrinaandove❤ 2018-8-31 03:51 PM
Hiii! Just flying by to say hello!
GoldenFlower 2018-8-30 09:47 PM
Teresa: I hope school is going well for you, then!
Thank you!
GoldenFlower 2018-8-30 02:55 PM
Teresa: Hey, I haven’t seen you around lately, how are you?
I'm good. I just have been doing a lot of school t\stuff lately. I make sure I come and check up on here, though.  
DelicateDeer 2018-8-29 06:39 PM
Your page has updated a lot since I last saw it! Love it and all your blogs so far  
I have no clue why but your playlist unfortunatly wont play for me    Hopefully it's just glitching on my end
JulieBubble 2018-7-29 10:36 AM
Teresa: Oooh~ love the new page <3
Thank you! :D
GoldenFlower 2018-6-17 07:45 PM
Teresa: Lol! That happens to me sometimes too, quite fun :D
Lol I am definitely going to sleep tonight
GoldenFlower 2018-6-17 04:16 PM
Teresa: Hi, how are you today? :3
Awesome! I had no sleep last night. I still haven't slept, and I'm hyper.
GoldenFlower 2018-6-17 09:16 AM
Haii
GoldenFlower 2018-6-16 12:12 PM
Teresa: I LOVE your new page design! It's adorable!!
Thank you so much!
eleanorpixie 2018-6-15 04:42 PM
Teresa: I like the art on your page, who's the artist? :D
Hey! Someone finally noticed! WLOP is a skilled artist, and this art is based on his comic 'Ghostblade'. Have a nice day! <3
JulieBubble 2018-6-14 01:32 PM
Teresa: I'm assuming it's not available on Linux, so I'll look into it when I get back from vacation and maybe we can meet up! Have a great week >^.^<3
I am honestly not entirely sure lol. We can definitely meet up :D Thanks and have a good week too!
JulieBubble 2018-6-14 01:24 PM
Teresa: Awesome! How active is it? Is it browser based or download?
It's pretty active. There is usually about 300-400 players on at a time and obviously the later at night it is the more players there are. And it's a download
JulieBubble 2018-6-14 01:02 PM
Teresa: Hey, do you still play TLoPO? I'm interested!
I do still play!
GoldenFlower 2018-6-12 10:06 PM
Teresa: Thanks >^.^<

Nice to meet you!
Nice to meet you too!
GoldenFlower 2018-6-12 02:43 PM
Hewo! Cool username! <3
View all
Visitors

banned|mobile|Archiver|Developer Email|Account frozen|Privacy Policy|fairyabc

GMT-5, 2018-10-15 05:13 PM

Fairyabc © 2016-2017 Powered by Discuz!

To Top