Digital Art Zone

 
   
1 of 2
1
Why is this site with all the security issues still online?
Posted: 05 June 2012 07:03 PM   [ Ignore ]
Member
Rank
Total Posts:  231
Joined  2006-09-01

Why is this site with all the security issues still online?
                                                                                                                                         
(Just repeating the subject in case of this thread being merged into some other one)
                                                                                                                                          Why am I listed online if I was denying this?
                                                                                                                                          There are 2 logins there: the general one (shop and forum) and the one only into the forums, where you have the option to uncheck the
“Show my name in the online users list”. The overall login may be a bug; but the unchecked “Show my name in the online users list” shouldn’t show me in the “Active members” list on the bottom of the forum start page. Hey, I unchecked it! And this joke of a software still shows me?
                                                                                                                                          Why does this system shows after almost two weeks of being alive the real names of members to other members?
                                                                                                                                          This is the (not Hans Guck-in-die-Luft?). Showing the real names of members is not some “glitch” or “something, which is known and has to be worked on”. It’s simply a security breach: members trust DAZ to not reveal there real names because they can choose an alias. It’s not some social network where you’re forced by EULA to use your real identity. (Yeah, I know you can fake it there. That’s not the point.)
                                                                                                                                      Why was my credit card information carried over from the old shop into the new one?
                                                                                                                                      After the security problem with Artzone sometime ago and the switch to the new shop before this new shop I decided not to store my cc-info in this possibly insecure environement. (I had those thing with another shop, changing credit cards, no other shop working etc. blabla). But after I logged in the first time into this new shop my credit card information, which I had denied to save, where suddenly there.

And: no, I’m not paranoid. My nickname is my first name and with my former alias (kentauros) and my location everyone could have found my real identity within two minutes; I don’t have a problem being identified as a DAZ forum member; but I have a problem with all those insecurities here, especially my cc-infos. And others have problem with the other security issues.
                                                                                                                                  And if DAZ were in Germany I would have filled in a complaint into the bureau of data privacy protection, because what DAZ is performing here since almost two weeks should be in no way tollerable ...

SHUT THIS SITE DOWN UNTIL THOSE ISSUES ARE SOLVED.

edit: And please implement paragraph breaks, so I’m not looking like some complete idiot.

 

Profile
 
 
Posted: 05 June 2012 07:23 PM   [ Ignore ]   [ # 1 ]
Addict
Avatar
RankRankRankRank
Total Posts:  4994
Joined  2005-08-03

While it does tend to glitch and show you logged in as someone else, you are not logged in as them. If you were to click to see your account info, the info is your own and not somebody else’s. The name is the only info you can get about this person. Yes, it would take next to no effort to obtain certain information, especially with the forum profiles, but the person’s real name that shows up in the store, does not show up in their forum profile, so you have no way to put two and two together.

To get a paragraph break, hit enter-space-enter. It’s annoying, but it’s a workaround.

 Signature 

Wearing duck crap doesn’t make you a duck - Floki
@Deviantart | @ShareCG
Tutorial: V4 Transmap Brows on Genesis (DS)
Free Script: Bulk convert V4/M4 mats for Genesis2 (DS/Poser)

Profile
 
 
Posted: 05 June 2012 07:44 PM   [ Ignore ]   [ # 2 ]
Addict
Avatar
RankRankRankRank
Total Posts:  3804
Joined  2012-02-06
Vaskania - 05 June 2012 07:23 PM


To get a paragraph break, hit enter-space-enter. It’s annoying, but it’s a workaround.

enter-enter-enter works too.

 Signature 

Community Volunteer
Monthly New User Contests!

My tutorials and FAQs | My Gallery | My Render Thread
Visit my world… Tornalia.com | http://scottlivingston.deviantart.com

Profile
 
 
Posted: 05 June 2012 08:00 PM   [ Ignore ]   [ # 3 ]
Member
Rank
Total Posts:  231
Joined  2006-09-01
Vaskania - 05 June 2012 07:23 PM

While it does tend to glitch and show you logged in as someone else, you are not logged in as them. If you were to click to see your account info, the info is your own and not somebody else’s.

Yep, I know this. And I read all about the “temporary glitch which will be worked on some DAZ soon and we have to have enough patience”. What made me to write my post was the first point: I deny something and the software doesn’t accept my choice, It was just the one point to make me boil over ...

Vaskania - 05 June 2012 07:23 PM

The name is the only info you can get about this person. Yes, it would take next to no effort to obtain certain information, especially with the forum profiles,


There’s the problem: I’m really smile not paranoid but I have a friend which is an IT security specialist. And two years ago I was on someones 50th birthday party which usually includes people you won’t already know everything about. So some people met again the next day, to kill the beer and meat leftovers and suddenly my friend came up a with a whole lot of information, alomost life spanning, about those two people which weren’t before in our peer group. And he had nothing more than some harmless interests/hobbies and real names. I don’t got paranoid on this, but I realized what is available with only slightest informations. So I still see DAZ at the moment as a security issue.

Vaskania - 05 June 2012 07:23 PM

To get a paragraph break, hit enter-space-enter. It’s annoying, but it’s a workaround.


Love you for this.

love your for thisl

love your for thisl

Edit: I will never got those forums-html done; I’m just to old for Web 2.0.

 

Profile
 
 
Posted: 05 June 2012 08:05 PM   [ Ignore ]   [ # 4 ]
Addict
Avatar
RankRankRankRank
Total Posts:  4994
Joined  2005-08-03

Thing is, with so much social networking and things nowadays, it’s really not difficult to find things out about people. I know there are paid websites a lot of people use for genealogy purposes, which are also useful for getting information about convicts and such for case purposes. =x

LOL you’re welcome for the tip. raspberry

 Signature 

Wearing duck crap doesn’t make you a duck - Floki
@Deviantart | @ShareCG
Tutorial: V4 Transmap Brows on Genesis (DS)
Free Script: Bulk convert V4/M4 mats for Genesis2 (DS/Poser)

Profile
 
 
Posted: 05 June 2012 08:38 PM   [ Ignore ]   [ # 5 ]
Member
Rank
Total Posts:  231
Joined  2006-09-01
Vaskania - 05 June 2012 08:05 PM

Thing is, with so much social networking and things nowadays, it’s really not difficult to find things out about people. I know there are paid websites a lot of people use for genealogy purposes, which are also useful for getting information about convicts and such for case purposes. =x

Of course, some people do, some won’t.

I had some forum post in mind where someone (KickAir8something, I don’t find the post ...) said, that even the slightest connection between her real name and DAZ could cause her some trouble. I don’t know if this is a real treat but I can imagine googling a real name and only “DAZ” at this moment with real names exposed come up with some thread like the “Reby Sky”-thread or “Is DAZ-Studio only for the p…-thing”. I wouldn’t care, because I’m already beyond good and evil smile But some others may do.

(So, now I’m going to watch the last recorded “Shameless” episode and then go to bed, waiting for the answers I’ll get later here ...) smile

 

Profile
 
 
Posted: 05 June 2012 09:17 PM   [ Ignore ]   [ # 6 ]
Member
Rank
Total Posts:  198
Joined  2003-10-09

Protecting personal details is mandatory in most countries and businesses usually have to publicly state they will protect your data.


I see Daz mentions they have a privacy policy in their terms of service but I didn’t find the full privacy document.  http://www.daz3d.com/shop/terms-of-service/


Privacy
DAZ 3D will use and protect your data, such as your name, email address, and in accordance with the DAZ 3D Online Privacy Policy, the contents of which are incorporated by reference herein.

Profile
 
 
Posted: 05 June 2012 11:30 PM   [ Ignore ]   [ # 7 ]
Active Member
RankRank
Total Posts:  452
Joined  2005-11-06

Where is the option ‘Show my name in the online users list’? I can’t find that anywhere.

 Signature 

BEGINNERS TUTORIALS FOR BRYCE
MY DAZ 3d STORE  for Bryce & DAZ Studio Materials and Shaders
BRYCE ARENA News and resources for Bryce

Profile
 
 
Posted: 06 June 2012 12:36 AM   [ Ignore ]   [ # 8 ]
Addict
Avatar
RankRankRankRank
Total Posts:  4994
Joined  2005-08-03
Eva1 - 05 June 2012 11:30 PM

Where is the option ‘Show my name in the online users list’? I can’t find that anywhere.

Ehhh.. I’m not finding it either, and looking back, I’m confused why he says there are 2 logins. The store/forum logins are integrated into 1 login. gulp

 Signature 

Wearing duck crap doesn’t make you a duck - Floki
@Deviantart | @ShareCG
Tutorial: V4 Transmap Brows on Genesis (DS)
Free Script: Bulk convert V4/M4 mats for Genesis2 (DS/Poser)

Profile
 
 
Posted: 06 June 2012 05:08 AM   [ Ignore ]   [ # 9 ]
Administrator
Avatar
RankRankRankRank
Total Posts:  15734
Joined  2003-10-09

The Screen name fuield seems to have reset for some people who had changed their name during the life of the old forum, it’s possible that it is also showing real names instead of pseudonyms in some cases for the same reason. I can edit screen names, for the forum at least, so if you are showing the wrong name please PM me with the name you should have (and ideally a couple of alternatives in case the name is already in use).

 Signature 

DAZ Studio Frequently Asked Questions

Index of free DAZ Studio scripts and plugins list

Profile
 
 
Posted: 06 June 2012 05:27 AM   [ Ignore ]   [ # 10 ]
Member
Rank
Total Posts:  195
Joined  2011-03-31
Vaskania - 06 June 2012 12:36 AM
Eva1 - 05 June 2012 11:30 PM

Where is the option ‘Show my name in the online users list’? I can’t find that anywhere.

Ehhh.. I’m not finding it either, and looking back, I’m confused why he says there are 2 logins. The store/forum logins are integrated into 1 login. gulp

I can be logged into the forums but not the store, so either they are separate logins or the store is more borked than it first appears.

Profile
 
 
Posted: 06 June 2012 06:41 AM   [ Ignore ]   [ # 11 ]
Power Member
Avatar
RankRankRank
Total Posts:  1807
Joined  2012-04-14
adzan - 05 June 2012 09:17 PM

Privacy
DAZ 3D will use and protect your data, such as your name, email address, and in accordance with the DAZ 3D Online Privacy Policy, the contents of which are incorporated by reference herein.

Given that some of us will go to the store and see other people’s names Daz are failing to protect people’s personal data. I’d agree with the OP, this site has got security issues.

Profile
 
 
Posted: 06 June 2012 07:38 AM   [ Ignore ]   [ # 12 ]
Member
Rank
Total Posts:  231
Joined  2006-09-01
Vaskania - 06 June 2012 12:36 AM
Eva1 - 05 June 2012 11:30 PM

Where is the option ‘Show my name in the online users list’? I can’t find that anywhere.

Ehhh.. I’m not finding it either, and looking back, I’m confused why he says there are 2 logins. The store/forum logins are integrated into 1 login. gulp


I took those two screenshots in two minutes while being logged out. Obviously the different logins use different cookies: on the first one my cart is empty, on the second one it’s filed with 1 item (the freebie I “bought” and downloaded yesterday, so this is wrong, too).

 

Image Attachments
neu-2.JPG
neu-4.JPG
Profile
 
 
Posted: 06 June 2012 08:56 AM   [ Ignore ]   [ # 13 ]
Addict
Avatar
RankRankRankRank
Total Posts:  4994
Joined  2005-08-03
Loaar - 06 June 2012 05:27 AM
Vaskania - 06 June 2012 12:36 AM
Eva1 - 05 June 2012 11:30 PM

Where is the option ‘Show my name in the online users list’? I can’t find that anywhere.

Ehhh.. I’m not finding it either, and looking back, I’m confused why he says there are 2 logins. The store/forum logins are integrated into 1 login. gulp


I can be logged into the forums but not the store, so either they are separate logins or the store is more borked than it first appears.

I tried testing that last night after my post and HOLY CRAP did my logins mess up. I tried logging into the forums first, and was still able to access my wishlist in the store, but came across a looping login page when trying to access My Account. Not sure if the two are unrelated and I just had very bad timing.

Frank__ - 06 June 2012 07:38 AM

I took those two screenshots in two minutes while being logged out. Obviously the different logins use different cookies: on the first one my cart is empty, on the second one it’s filed with 1 item (the freebie I “bought” and downloaded yesterday, so this is wrong, too).


Ok, I’m going to test this real fast in IE (I don’t feel like logging out of FF whilst typing replies).
 
How are you even seeing the login page from the first image? Is that a page you have bookmarked? I can hit Community, which takes me to a page I can choose Forums,  Galleries, Affiliate Program, or Publishing. If I choose Forums, then I see the Forums in a logged out state. If I hit login in the upper right, I get the page from your 2nd image.

If I hit Shop, I see the Shop. If I try to login from the Shop tab, I still see the 2nd login.

The correct login page has the url https://www.daz3d.com/shop/customer/account/login/referer/with a slew of random crap here.

 Signature 

Wearing duck crap doesn’t make you a duck - Floki
@Deviantart | @ShareCG
Tutorial: V4 Transmap Brows on Genesis (DS)
Free Script: Bulk convert V4/M4 mats for Genesis2 (DS/Poser)

Profile
 
 
Posted: 06 June 2012 09:17 AM   [ Ignore ]   [ # 14 ]
Member
Rank
Total Posts:  231
Joined  2006-09-01
Vaskania - 06 June 2012 08:56 AM

How are you even seeing the login page from the first image? Is that a page you have bookmarked? I can hit Community, which takes me to a page I can choose Forums,  Galleries, Affiliate Program, or Publishing. If I choose Forums, then I see the Forums in a logged out state. If I hit login in the upper right, I get the page from your 2nd image.

I get the first login when I’m logged out and try to read something in the member’s only forum. So maybe it’s a thing only PC Club members see.

Profile
 
 
Posted: 06 June 2012 09:54 AM   [ Ignore ]   [ # 15 ]
Addict
Avatar
RankRankRankRank
Total Posts:  4994
Joined  2005-08-03
Frank__ - 06 June 2012 09:17 AM
Vaskania - 06 June 2012 08:56 AM

How are you even seeing the login page from the first image? Is that a page you have bookmarked? I can hit Community, which takes me to a page I can choose Forums,  Galleries, Affiliate Program, or Publishing. If I choose Forums, then I see the Forums in a logged out state. If I hit login in the upper right, I get the page from your 2nd image.

I get the first login when I’m logged out and try to read something in the member’s only forum. So maybe it’s a thing only PC Club members see.

You shouldn’t even be seeing the Members Only forum link when you’re logged out.
Since I am a PC member, I don’t know what it looks like if you’re logged in and aren’t one.

 Signature 

Wearing duck crap doesn’t make you a duck - Floki
@Deviantart | @ShareCG
Tutorial: V4 Transmap Brows on Genesis (DS)
Free Script: Bulk convert V4/M4 mats for Genesis2 (DS/Poser)

Profile
 
 
   
1 of 2
1