READ THIS FIRST if you're going to post pix

paula · Posted: Tue Aug 19, 2008 9:42 pm

Recently it was drawn to my attention that in some cases merely by right-clicking on a photo, copying the link location and then pasting it into a new browser window . . . it was possible to access the album on the pic hosting website. From there it may or may not be possible to access other details.

If you're going to post pix here set up an entirely new pic hosting account.

Make sure it isn't publicly accessible, there is a question on most sites that enables or disables that choice.

MrNiceGuyNZ · Forum Moderator Joined: Sep 18, 2005 Posts: 2906

Thanks for the clarification email Paula, now I have the gist of the issue I can answer this one.

Regarding the issue of people guessing passwords to gain access to photobucket accounts ect, what is advisable is to change the way you handle passwords - create one in a document housed in say My Documents for future reference containing passwords the use a combination of upper case, lower case letters, numbers and symbols, jumble them all up.

H9$,\u4-N/!p9wO%

something you aren't going to remember but also very difficult to hack, thats where the word document comes in handy for copy and paste to that password window....

simple words can be hacked using a library file and I hear it only takes about 6 seconds to get a word, mixing the content makes it more difficult, the more variables you create the longer it will take to hack.
_________________
A pain free day the marijuana way.

Vote for change, Vote ALCP

paula · Posted: Wed Aug 20, 2008 7:58 pm

Thanks for that MNGNZ.

We're not trying to make anyone overly paranoid... this can be simply avoided by doing the password thang as described by MNGNZ above and either setting up an entirely new photo hosting account or ensuring it set to 'private'.

The other thing to point out is that if people link to remote sites such as photo sites or avatars, that means part of that particular page won't be encrypted (SSL) because we can only encrypt pages that come from norml.org.nz. ie. if you sign in and see the https:// and then go to a page with a photo on it, you'll see the https is no longer 100%. There is nothing we can do about this, other than banning remote pictures and avatars.
The only part of the page that is not encrypted will be the photo or avatar, however.

We can't be more specific as to which photo hosting site does this and which don't.
- I've noticed Photobucket definately did with mine until I found the 'private' option.
- Pictures from Bebo sites also automatically take you back there too, unless the site page's 'private' setting is enabled.

PPG · Enthusiast Joined: Jul 13, 2008 Posts: 51 Location: nz

Also if u load photos without using a proxy u are linking ur computer connection to those photos.


Home :: About NORML :: About Marijuana :: Hemp :: Medical Marijuana :: Your Rights :: Laws :: Get Active :: Politics

National Organisation for the Reform of Marijuana Laws, New Zealand Inc (NORML NZ) PO Box 3307, Auckland, New Zealand (c) 1998-2007 All rights reserved by NORML New Zealand Inc. except all comments and forum posts which are property of their authors. Powered by PHP-Nuke