Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.

Forums › Geekzone › Increasing login security


BDFL
43741 posts

Uber Geek

Administrator
Trusted
Geekzone
Subscriber
Topic # 88593 18-Aug-2011 16:28 Send private message

Hello folks

We have just made a small change to our login system: if your IP address changes since your login then your session will be closed and you will have to login again.

This will reduce the chances some malicious software or web sites could use the tokens we give out when you login to impersonate your user here on Geekzone.

It may be an incovenience for some mobile users since those are more likely to have their IP address changed without notice. If you see a message stating your session terminated because of your IP address changed then you will know why.

This is the default behaviour. There's now an option on your profile that will control this and you can turn it off if needed.





Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) 

Geekzone Price comparison | Amazon Kindle order page | How to get the best out of Geekzone | New Zealand IT Jobs | Geekzone News | Jinglebugs 

View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2 | 3 | 4Next
1599 posts

Uber Geek
Inactive user
  Reply # 508646 18-Aug-2011 16:29 Send private message

Excellent feature for improving the website security in general. Also, there is a typo in your first sentence.

3613 posts

Uber Geek
  Reply # 508650 18-Aug-2011 16:33 Send private message

does thismean if I use geekzone on two computers (e.g. my home desktop and my home laptop) then each time I switch between the two I will be logged out and will have to manually log back in again?

1599 posts

Uber Geek
Inactive user
  Reply # 508651 18-Aug-2011 16:36 Send private message

NonprayingMantis: does thismean if I use geekzone on two computers (e.g. my home desktop and my home laptop) then each time I switch between the two I will be logged out and will have to manually log back in again?

Probably will be better for you if you disable the feature in this case then. 



BDFL
43741 posts

Uber Geek

Administrator
Trusted
Geekzone
Subscriber
  Reply # 508652 18-Aug-2011 16:37 Send private message

Good question. The answer is "no".

This is on per IP/browser basis. You can be logged on your home PC, on your work and those are considered independent sessions.

If you get your work PC out of the docking station, goes to a another city and start using your laptop at the hotel then it will be a different IP address and your work PC will be logged out. This will not affect the home PC.

However, there's a link you can click (it's been there for some time now) that will "destroy" all existing sessions.

This is handy for example if you turn off the IP address lock feature but have your work laptop stolen. You can click that link from any other PC and *ALL* your sesions will be closed, regardless of which browser or PC is currently logged in. This is good for example if you use Geekzone from a Internet Cafe and leave the session open. You can then close it remotely.





Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) 

Geekzone Price comparison | Amazon Kindle order page | How to get the best out of Geekzone | New Zealand IT Jobs | Geekzone News | Jinglebugs 

1328 posts

Uber Geek
  Reply # 508662 18-Aug-2011 16:54 Send private message

freitasm: if your IP address changes since your login then your session will be closed and you will have to login again.


If you are behind a NAT router, is it the internal or external IP changing that triggers the logout?



BDFL
43741 posts

Uber Geek

Administrator
Trusted
Geekzone
Subscriber
  Reply # 508663 18-Aug-2011 17:00 Send private message

It should be the external one.





Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) 

Geekzone Price comparison | Amazon Kindle order page | How to get the best out of Geekzone | New Zealand IT Jobs | Geekzone News | Jinglebugs 

1599 posts

Uber Geek
Inactive user
  Reply # 508672 18-Aug-2011 17:36 Send private message

freitasm: Good question. The answer is "no".

This is on per IP/browser basis. You can be logged on your home PC, on your work and those are considered independent sessions.

If you get your work PC out of the docking station, goes to a another city and start using your laptop at the hotel then it will be a different IP address and your work PC will be logged out. This will not affect the home PC.

However, there's a link you can click (it's been there for some time now) that will "destroy" all existing sessions.

This is handy for example if you turn off the IP address lock feature but have your work laptop stolen. You can click that link from any other PC and *ALL* your sesions will be closed, regardless of which browser or PC is currently logged in. This is good for example if you use Geekzone from a Internet Cafe and leave the session open. You can then close it remotely.


Whoops, I take back my prior statement. This is correct, it would be separate sessions. 



BDFL
43741 posts

Uber Geek

Administrator
Trusted
Geekzone
Subscriber
  Reply # 508791 18-Aug-2011 23:28 Send private message

I've noticed a problem with this new way of managing security when accessing the main site from a smartphone.

Ooops. I will be looking at this later this week.






Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) 

Geekzone Price comparison | Amazon Kindle order page | How to get the best out of Geekzone | New Zealand IT Jobs | Geekzone News | Jinglebugs 



BDFL
43741 posts

Uber Geek

Administrator
Trusted
Geekzone
Subscriber
  Reply # 508888 19-Aug-2011 10:45 Send private message

Actually just tested in this happens only on Telecom XT. I am following up this.





Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) 

Geekzone Price comparison | Amazon Kindle order page | How to get the best out of Geekzone | New Zealand IT Jobs | Geekzone News | Jinglebugs 

1074 posts

Uber Geek
  Reply # 508890 19-Aug-2011 10:52 Send private message

This is the default behaviour. There's now an option on your profile that will control this and you can turn it off if needed.



Where is this option? Im either blind or its not there.



BDFL
43741 posts

Uber Geek

Administrator
Trusted
Geekzone
Subscriber
  Reply # 508891 19-Aug-2011 10:53 Send private message

It's there, under "Security Options".





Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) 

Geekzone Price comparison | Amazon Kindle order page | How to get the best out of Geekzone | New Zealand IT Jobs | Geekzone News | Jinglebugs 

546 posts

Ultimate Geek

Trusted
  Reply # 509080 19-Aug-2011 16:30 Send private message

I may be a bit slow today, but I can't even find security options :(








BDFL
43741 posts

Uber Geek

Administrator
Trusted
Geekzone
Subscriber
  Reply # 509101 19-Aug-2011 17:19 Send private message

Are you looking at http://www.geekzone.co.nz/upd_user.asp at all?






Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) 

Geekzone Price comparison | Amazon Kindle order page | How to get the best out of Geekzone | New Zealand IT Jobs | Geekzone News | Jinglebugs 



BDFL
43741 posts

Uber Geek

Administrator
Trusted
Geekzone
Subscriber
  Reply # 509102 19-Aug-2011 17:20 Send private message

Also note that this should not be turned off unless you understand the implications and why we implemented it.






Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) 

Geekzone Price comparison | Amazon Kindle order page | How to get the best out of Geekzone | New Zealand IT Jobs | Geekzone News | Jinglebugs 

1682 posts

Uber Geek

Trusted
  Reply # 509111 19-Aug-2011 17:42 Send private message

I have it off but would like it on, if it could recall where I was going on geekzone.
I get an email to a thread, click the link and then have to log in and
geekzone forgets that I was heading to a link once logged in.

Could it at lease send me to the thread and ask to be logged in from there?

 1 | 2 | 3 | 4Next
View this topic in a long page with up to 500 replies per page Create new topic



Twitter »
Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when new jobs are posted to our jobs board:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:




News »
Gen-i and SAP partner in mobile business
Posted 23-May-2013 09:23

Ericsson to close down telecom cable manufacturing
Posted 23-May-2013 08:46

FaceToFace Communications and StarLeaf bring unique cloud-based videoconferencing to Australia and New Zealand
Posted 22-May-2013 09:12

IBM Watson finds a new job: customer services
Posted 22-May-2013 08:37

Microsoft unveils Xbox One
Posted 22-May-2013 08:11

InternetNZ and AUT University form strategic partnership
Posted 21-May-2013 09:29


Trending now »
Hot discussions in our forums right now:

Xbox One
Created by DjShadow, last reply by merve0o0 on 22-May-2013 18:27 (37 replies)
Pages... 2 3

Fecked up religious people strike again :-(
Created by Mark, last reply by Klipspringer on 23-May-2013 12:00 (28 replies)
Pages... 2

Cannabis is illegal yet we have really strong 'legal highs' ?
Created by qwerty7, last reply by Asmodeus on 23-May-2013 11:37 (64 replies)
Pages... 3 4 5

HTC One (2013) owners' discussion
Created by Dingbatt, last reply by bradstewart on 23-May-2013 11:59 (1539 replies)
Pages... 101 102 103

A new project coming to Geekzone
Created by freitasm, last reply by jonb on 23-May-2013 11:07 (254 replies)
Pages... 15 16 17

"igov" online passport renewals
Created by Linuxluver, last reply by profrink on 22-May-2013 22:22 (29 replies)
Pages... 2

Orcon, Is this for real or a scam??
Created by old3eyes, last reply by DarthKermit on 22-May-2013 19:12 (29 replies)
Pages... 2

Vodafone Naked Broadband Speeds (Auckland CBD)
Created by wscalioni, last reply by grkiwi on 20-May-2013 21:13 (14 replies)


Geekzone Jobs »
Most recent NZ jobs in technology:

Release Manager
Posted 23-May-2013 11:28

Digital Strategist
Posted 23-May-2013 11:28

Senior and Lead Test Analyst
Posted 23-May-2013 09:28

SAP Business Objects Lead
Posted 23-May-2013 09:28

Senior Project Manager
Posted 23-May-2013 09:28

PHP Developer
Posted 23-May-2013 09:28

Intermediate Project Manager
Posted 22-May-2013 22:27


Geekzone Live »
Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.

Updates »
Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.