OSDev.org

Hi, people!

Most of the time all I got when accessing this forum is a 403 error. The portal(main page and wiki) is ok.

I just learned about www.unipeak.com, which used to bypass firewalls. Right now I\'ve entered the forum with this, but I\'m not loging in cause I don\'t know if it secure to do so.

Any ideas?

B.

PS: I\'m writing from Brazil.

Well it is secure to login to most boards, otherwise what would be the point of a board?

Anyway, when you create an account your password is md5 hashed which is a one way encryption that can't be unhasged without an extreme ammount of trouble. So your password is safe from prying eyes. The cookie used by the board should store your user id and your password, the password will be double md5 hashed in the cookie, so even if somebody get's your cookie they won't know your password.

Your e-mail address can be hidden in your profile when you register to prevent spam and other things from being sent to you. So you don't have to worry about giving the board your email address when you register.

So in terms of protecting the users info, yes it is secure.

Anyway, the reason why unipeak doesn't work on this board is because this board uses cookies to store your info. Infact unipeak won't work with ANY site that uses cookies which means no logins, no carts when shopping on a site, no nothing.

What is the exact url you tried to visit when you got the 403 error? That is a server error not a board error and should only happen when you don't have access to a certain area of the site, or have been banned from using that section of the site.

Hi!

I\\\'m sorry if I was not clear in my previous message. I\\\'m sure of the board privacy. I feel it was not secure cause all access is done via unipeak.com, so they get a copy of all data I send, correct? And yes, unipeak.com DOES work for me, don\\\'t ask me why.

The address that gives me a 403 at home/work/university/ is http://www.mega-tokyo.com/forum/

Thank you!

B.

Please remember that the connection to this server is NOT secure (that is, it doesn't go through SSL) so someone in the middle of the connection CAN get the password when you actually submit it for login. Once you have logged in though, the cookie should be fine.

Oh, Mega-tokyo DOES indeed also allow HTTPS access.. oh well.. sorry about that.

my guess is the yabbse is detecting your IP comes from a known spammer and is blocking it. we have loads of IPs inside yabbsee marked as blocked.

No, YaBBSE would give a banned message not a 403 message.

A 403 is a server error, he has been banned via .htaccess. Which would have to be done by you, or somebody else who has ftp or shell access.

He is getting around the banning by using a proxy(unipeak).

Anyway, I don't know if you banned him for something, or if he just got caught in a range of banned ip's, but only you can unban him df by changing the .htaccess to not ban his ip.

Hi!

For sure you have no reason to ban me(I hope), but this already happened even before I registered on forum. It\\\'s at least strange cause sometimes it works without proxy. My IP is generally of the form 200.96.88.*

I noticed it also happens with people from other regions from my country, FYI.

Best regards,

Beppe

Yeah, alot of people from Brazil are known for hacking, it wouldn't be surprising to me that df banned a range of Brazillian ip's, and it got yours banned too. So he wasn't banning you intentionally, you just got caught up in a range of ip's that are used by many hackers.

I mean, df could make an exception for your ip by modifying the .htaccess. I can't do anything myself though because I don't have shell or ftp access.

df, can you make that for me?

Thanks

brazil is on my list. lots of hack attempts on my board from down there

My apologies.

PS: Are you united states\'er?

the site is hosted in the us but i am not american (well i am physically here right now for a short time)... but then i hope to move back to australia or uk..