(RESOLVED) Will it ever be implemented? HTTPS

[Megaflow]

A thought suddenly occurs, a few years ago, a load of people could suddenly post using my account. I ended up with all kinds of random crap posted everywhere.

I raised a thread about it in this section, but they claimed to not be able to replicate the problem or understand what caused it.

If I can be bother to look, I'll see if I can find the thread.

Could that be related to this issue?

As for the Global Development Team bullst... Pull the other one, it's got bells on it!

[mickk]

CoolHands said:

Plus some of us don't need to as we use a unique password so it doesn't matter if it gets hacked.

This is the reason every member should have received notification to change their password to a unique one.

Then the worse case would be that they can post under your login, I think.

[0000]

mickk said:

Then the worse case would be that they can post under your login, I think.

And link your account with your email address, any other profile information you've entered like postcode, to associate with your cars, etc. And then any other information Google knows is associated with that email address. Knowledge is power.

[eldar]

0000 said:

And link your account with your email address, any other profile information you've entered like postcode, to associate with your cars, etc. And then any other information Google knows is associated with that email address. Knowledge is power.

Every little helps....

[anonymous-user]

Tankrizzo said:

308mate said:

The forum posters are not the business model, the classifieds are. This is autotrader with a forum attached. Hence most of the time and money (however little that might be) will be spent on that part of the site.

This. I doubt Haymarket give two sts about the PH forums.

Considering that there was a dealer who was no longer using PH and they were still advertising 72 of their cars, I wonder if they are in any better state than the forums, I suspect PH and maybe HM are really struggling

[George111]

Half way through February now - any news ?

[WinstonWolf]

So you've got time to introduce shiny new rules but not to address this major security vulnerability?

[randlemarcus]

WinstonWolf said:

So you've got time to introduce shiny new rules but not to address this major security vulnerability?

To be fair, the new rules dont seem to have been added to the actual T&Cs, so its not like this is a "brilliantly planned and executed Change" compared to the HTTPS thing, really.

[AndrewEH1]

To be honest the Posting Rules were a complete mess and I was planning to start a new thread about it, so quite happy they've been fixed and made much clearer.

[George111]

One of the new posting rules is:

Do not post material that the PistonHeads Team would find offensive, annoying or upsetting , including personal information (including Facebook/Twitter/Linked-In etc.) If in doubt, do not post it, or check in Website Feedback.

So annoying the PH team is now not permitted ! What a joke. Who in their right mind sets such rules. Utter nonsense and does convince me to do something about the SSL and phone-rip-you-off issue.

So PH team . . . heard the one about the company which bought a web site, didn't know what to do with it, let it fester, abused the members and generally fu<ked everybody off whilst scamming members for phone safe rip off ? Does it annoy you that you've been called out by so many people ? I was at least willing to give you the benefit of the doubt right now I'd be ashamed to say I worked on PH.

[James Drake]

George111 said:

One of the new posting rules is:

Do not post material that the PistonHeads Team would find offensive, annoying or upsetting , including personal information (including Facebook/Twitter/Linked-In etc.) If in doubt, do not post it, or check in Website Feedback.

So annoying the PH team is now not permitted ! What a joke. Who in their right mind sets such rules. Utter nonsense and does convince me to do something about the SSL and phone-rip-you-off issue.

So PH team . . . heard the one about the company which bought a web site, didn't know what to do with it, let it fester, abused the members and generally fu<ked everybody off whilst scamming members for phone safe rip off ? Does it annoy you that you've been called out by so many people ? I was at least willing to give you the benefit of the doubt right now I'd be ashamed to say I worked on PH.

Hi George111,

Thanks for taking the time to post. To be honest, this is a great example of when you're too close to something and have read it too many times, as the wording of this particular rule has been edited to the point where it can be misunderstood. The wording was originally meant to be more like:

"Do not post material that a reasonable person would find offensive, annoying or upsetting [/b], including personal information (including Facebook/Twitter/Linked-In etc.) If in doubt, do not post it, or check in Website Feedback. If you're in any doubt as to the definition of a "reasonable person", if any of the PH team or our Moderators think it is offensive, annoying or upsetting then it is offensive, annoying or upsetting."

However, this was shortened, edited and re-written to the point where it can be misread, so I'll make sure that is changed. However, I should add that deliberately annoying the PH team has never been permitted. Why on Earth would we allow anyone to deliberately annoy us? Remember this is our forum, and all members are here as our guests, so annoying us in not recommended. Constructive feedback and criticism is however welcome.

On that note, you seem incredibly angry at PH, and some of what you've written isn't constructive. Aside from fixing the known issues, is there anything else we can do to appease you because too much stress is bad for you.

WinstonWolf said:

So you've got time to introduce shiny new rules but not to address this major security vulnerability?

Not wishing to stand in the way of a bit of "lets all jump on the bandwagon and give PH a damn good bashing" mentality, but the changes to the Rules of Posting have been in the pipeline for quite some time and were completed by my team and the moderators. So in other words, a completely different set of people.

Believe me, I don't want to do anything to slow down the implementation of HTTPS; I even walk quietly when I pass by the Dev team's desks at the moment.

Thanks
JD

[dmsims]

James Drake said:

Not wishing to stand in the way of a bit of "lets all jump on the bandwagon and give PH a damn good bashing" mentality, but the changes to the Rules of Posting have been in the pipeline for quite some time and were completed by my team and the moderators. So in other words, a completely different set of people.

Believe me, I don't want to do anything to slow down the implementation of HTTPS; I even walk quietly when I pass by the Dev team's desks at the moment.

Thanks
JD

1. You're getting a "bashing" because you have willfully and deliberately ignored a major security flaw - this is completely inexcusable

Why has it not been fixed?

[James Drake]

dmsims said:

James Drake said:

Not wishing to stand in the way of a bit of "lets all jump on the bandwagon and give PH a damn good bashing" mentality, but the changes to the Rules of Posting have been in the pipeline for quite some time and were completed by my team and the moderators. So in other words, a completely different set of people.

Believe me, I don't want to do anything to slow down the implementation of HTTPS; I even walk quietly when I pass by the Dev team's desks at the moment.

Thanks
JD

1. You're getting a "bashing" because you have willfully and deliberately ignored a major security flaw - this is completely inexcusable

Why has it not been fixed?

That's why I'm not wishing to stand in the way of it. I was simply explaining that a different group of people were involved in the Rules Of Posting update. I understand the confusion though, to be honest the posts about the RoP are all off topic and are at danger of diverting this long running thread. So by all means bash away... but try to keep it constructive because I'm sure we can all agree that the main thing we want is for HTTPS to be implemented.

Oh, and I don't know why it hasn't been "fixed" yet, but I believe the Dev team (the people doing the HTTPS work) will be giving a further update soon. Like you I genuinely hope it is implemented soon.

JD

[PoleDriver]

James Drake said:

Remember this is our forum, and all members are here as our guests, so annoying us in not recommended!

Thanks
JD

[dudleybloke]

This place is like snails.

[PoleDriver]

dudleybloke said:

This place is like snails.

Slimy?
Covered in garlic butter?
In need of salt?

[James Drake]

PoleDriver said:

James Drake said:

Remember this is our forum, and all members are here as our guests, so annoying us in not recommended!

Thanks
JD

, Great reference, I love Vic and Bob!

But seriously, we've got some pretty impressive moderator powers and we're not afraid to use them!!! My desk actually looks like this:

[PoleDriver]

James Drake said:

But seriously, we've got some pretty impressive moderator powers and we're not afraid to use them!!! My desk actually looks like this:

I thought that was Big Al's desk!

[Monkeylegend]

James Drake said:

However, I should add that deliberately annoying the PH team has never been permitted. Why on Earth would we allow anyone to deliberately annoy us? Remember this is our forum, and all members are here as our guests, so annoying us in not recommended. Constructive feedback and criticism is however welcome.

James, who do you refer to when you say the PH team?

[xjay1337]

Monkeylegend said:

James, who do you refer to when you say the PH team?

The Haymarket Team Members Global Association Leader and his/her subordinates, or something like that.