SEARCH FINESCALE.COM

Enter keywords or a search phrase below:

Why is finescale.com not a "Secure Site?"

556 views
4 replies
1 rating 2 rating 3 rating 4 rating 5 rating
  • Member since
    April 2009
  • From: Longmont, Colorado
Why is finescale.com not a "Secure Site?"
Posted by Cadet Chuck on Wednesday, February 17, 2021 3:34 PM

Lately I have been wondering why this is not a secure site, and what problems that might pose for us.  Are we vulnerable to hackers and viruses, just by visiting this site?

I hope we might hear from a moderator on this.

Thank you.

Computer, did we bring batteries?.....Computer?

  • Member since
    January 2021
Posted by rev_barabbas on Wednesday, February 17, 2021 4:08 PM

Pure speculation here, but for the site to become secure they're usually required to get a dedicated IP address and they'd have to pay for an SSL certificate. Since this site itself doesn't sell anything (the magazine sales go through the publisher website) its probably just the cheaper option for them.

The most you're risking is the password you use for this site being exposed. Hopefully, you use a different password for every site.

What they're giving up is worse though. Google actually penalizes their search results because the site isn't secure, and we all get a warning from our web browsers when we navigate to the site initially...which can make a lot of people back out of using it. 

-- rev_barabbas --

Keep going, don't quit.

  • Member since
    February 2003
  • From: East Bethel, MN
Posted by midnightprowler on Wednesday, February 17, 2021 5:48 PM

There's no reason the forum needs to be a secure site, nothing is bought on it. The  pages that have things to purchase are secure. 

 

 

 

 

 

Hi, I am Lee, I am a plastiholic.

Co. A, 682 Engineers, Ltchfield, MN, 1980-1986

1 Thessalonians 4:13-18 1 Corinthians 15:51-54

Ask me about Speedway Decals

  • Member since
    June 2018
  • From: Ohio (USA)
Posted by DRUMS01 on Wednesday, February 17, 2021 7:01 PM

I'm not a moderator, but I do believe that they both have good points. To really be secure you are indeed talking a dedicated IP, Servers with secure socket connections, Multi-Tier Firewalls, a robust encryption system, Network Intrusion Protection System, Host Intrusion Protective System, and antiviral software, a team to maintain it, etc. After all, anything less than this is not that secure really.....

With the forum being a hobby model building site one would have to ask why? More specifically, the company most likely performed a risk/benefit analysis early on and made a decision concerning the risk versus cost to make it secure. My bet is the risk does not warrant the cost for the various supports.

I don't want to play down the question though as I know that a good hacker with cutting malware can bring any web site down or steal information if that is the intention of the adversary. I've posted many photos here and my profile information isn't anything that can't really be retrieved or purchased from many other mediums (credit card companies, loan agreements, cell phone contracts, any other site we access and agree to thier terms and agreements, any chat site like twitter / facebook, common public information, etc.). 

My question would be, is there really anything within this forum that warrants the need for a true secure site (Privacy Act, Financial, HIPPA, PII)?

Would FSM be able to afford the cost of making this truely a secure site and stay profitable?

And if so, how much would they charge us by subscription to use the site?

 

I am a Veteran; to all other Veterans thank you for your service. Retired now and living well

PROJECTS:

- 1/48 RAH-66 Comanche - WIP

- 1/350 USS Alabama (GB) - DONE

- 1/16 1910 Thomas Flyer - DONE

- 1/78 AC-119 Stinger Gunship (GB) - DONE

 

 

 

  • Member since
    January 2021
Posted by rev_barabbas on Sunday, February 21, 2021 11:48 PM

You know what? I just noticed it's only the subdomain "cs.finescale.com" that is insecure. "finescale.com" is secure. It seems to be either a misconfiguration of the "cs" subdomain, or the forum software itself doesn't work with SSL the way it's been setup, or at all.

-- rev_barabbas --

Keep going, don't quit.

JOIN OUR COMMUNITY!

Our community is FREE to join. To participate you must either login or register for an account.

SEARCH FORUMS
FREE NEWSLETTER
By signing up you may also receive reader surveys and occasional special offers. We do not sell, rent or trade our email lists. View our Privacy Policy.