Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Forums › Geekzone › Increasing login security


BDFL - Memuneh
58096 posts

Uber Geek
+1 received by user: 9634

Administrator
Trusted
Geekzone
Subscriber

Topic # 88593 18-Aug-2011 16:28
Send private message

Hello folks

We have just made a small change to our login system: if your IP address changes since your login then your session will be closed and you will have to login again.

This will reduce the chances some malicious software or web sites could use the tokens we give out when you login to impersonate your user here on Geekzone.

It may be an incovenience for some mobile users since those are more likely to have their IP address changed without notice. If you see a message stating your session terminated because of your IP address changed then you will know why.

This is the default behaviour. There's now an option on your profile that will control this and you can turn it off if needed.





Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure)

 

Come talk travel on TravelTalk NZ.

Geekzone Price comparison | Geekzone News | Jinglebugs | Legal Movie Services in New Zealand | Payoneer | MightyApe | AliExpress | Amazon | 

View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2 | 3 | 4
1599 posts

Uber Geek
Inactive user


  Reply # 508646 18-Aug-2011 16:29
Send private message

Excellent feature for improving the website security in general. Also, there is a typo in your first sentence.

6428 posts

Uber Geek
+1 received by user: 1564


  Reply # 508650 18-Aug-2011 16:33
Send private message

does thismean if I use geekzone on two computers (e.g. my home desktop and my home laptop) then each time I switch between the two I will be logged out and will have to manually log back in again?

 
 
 
 


1599 posts

Uber Geek
Inactive user


  Reply # 508651 18-Aug-2011 16:36
Send private message

NonprayingMantis: does thismean if I use geekzone on two computers (e.g. my home desktop and my home laptop) then each time I switch between the two I will be logged out and will have to manually log back in again?

Probably will be better for you if you disable the feature in this case then. 



BDFL - Memuneh
58096 posts

Uber Geek
+1 received by user: 9634

Administrator
Trusted
Geekzone
Subscriber

  Reply # 508652 18-Aug-2011 16:37
Send private message

Good question. The answer is "no".

This is on per IP/browser basis. You can be logged on your home PC, on your work and those are considered independent sessions.

If you get your work PC out of the docking station, goes to a another city and start using your laptop at the hotel then it will be a different IP address and your work PC will be logged out. This will not affect the home PC.

However, there's a link you can click (it's been there for some time now) that will "destroy" all existing sessions.

This is handy for example if you turn off the IP address lock feature but have your work laptop stolen. You can click that link from any other PC and *ALL* your sesions will be closed, regardless of which browser or PC is currently logged in. This is good for example if you use Geekzone from a Internet Cafe and leave the session open. You can then close it remotely.





Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure)

 

Come talk travel on TravelTalk NZ.

Geekzone Price comparison | Geekzone News | Jinglebugs | Legal Movie Services in New Zealand | Payoneer | MightyApe | AliExpress | Amazon | 

4229 posts

Uber Geek
+1 received by user: 1123


  Reply # 508662 18-Aug-2011 16:54
Send private message

freitasm: if your IP address changes since your login then your session will be closed and you will have to login again.


If you are behind a NAT router, is it the internal or external IP changing that triggers the logout?



BDFL - Memuneh
58096 posts

Uber Geek
+1 received by user: 9634

Administrator
Trusted
Geekzone
Subscriber

  Reply # 508663 18-Aug-2011 17:00
Send private message

It should be the external one.





Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure)

 

Come talk travel on TravelTalk NZ.

Geekzone Price comparison | Geekzone News | Jinglebugs | Legal Movie Services in New Zealand | Payoneer | MightyApe | AliExpress | Amazon | 

1599 posts

Uber Geek
Inactive user


  Reply # 508672 18-Aug-2011 17:36
Send private message

freitasm: Good question. The answer is "no".

This is on per IP/browser basis. You can be logged on your home PC, on your work and those are considered independent sessions.

If you get your work PC out of the docking station, goes to a another city and start using your laptop at the hotel then it will be a different IP address and your work PC will be logged out. This will not affect the home PC.

However, there's a link you can click (it's been there for some time now) that will "destroy" all existing sessions.

This is handy for example if you turn off the IP address lock feature but have your work laptop stolen. You can click that link from any other PC and *ALL* your sesions will be closed, regardless of which browser or PC is currently logged in. This is good for example if you use Geekzone from a Internet Cafe and leave the session open. You can then close it remotely.


Whoops, I take back my prior statement. This is correct, it would be separate sessions. 



BDFL - Memuneh
58096 posts

Uber Geek
+1 received by user: 9634

Administrator
Trusted
Geekzone
Subscriber

  Reply # 508791 18-Aug-2011 23:28
Send private message

I've noticed a problem with this new way of managing security when accessing the main site from a smartphone.

Ooops. I will be looking at this later this week.






Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure)

 

Come talk travel on TravelTalk NZ.

Geekzone Price comparison | Geekzone News | Jinglebugs | Legal Movie Services in New Zealand | Payoneer | MightyApe | AliExpress | Amazon | 



BDFL - Memuneh
58096 posts

Uber Geek
+1 received by user: 9634

Administrator
Trusted
Geekzone
Subscriber

  Reply # 508888 19-Aug-2011 10:45
Send private message

Actually just tested in this happens only on Telecom XT. I am following up this.





Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure)

 

Come talk travel on TravelTalk NZ.

Geekzone Price comparison | Geekzone News | Jinglebugs | Legal Movie Services in New Zealand | Payoneer | MightyApe | AliExpress | Amazon | 

2585 posts

Uber Geek
+1 received by user: 172


  Reply # 508890 19-Aug-2011 10:52
Send private message

This is the default behaviour. There's now an option on your profile that will control this and you can turn it off if needed.



Where is this option? Im either blind or its not there.



BDFL - Memuneh
58096 posts

Uber Geek
+1 received by user: 9634

Administrator
Trusted
Geekzone
Subscriber

  Reply # 508891 19-Aug-2011 10:53
Send private message

It's there, under "Security Options".





Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure)

 

Come talk travel on TravelTalk NZ.

Geekzone Price comparison | Geekzone News | Jinglebugs | Legal Movie Services in New Zealand | Payoneer | MightyApe | AliExpress | Amazon | 

686 posts

Ultimate Geek
+1 received by user: 15

Trusted

  Reply # 509080 19-Aug-2011 16:30
Send private message

I may be a bit slow today, but I can't even find security options :(




BDFL - Memuneh
58096 posts

Uber Geek
+1 received by user: 9634

Administrator
Trusted
Geekzone
Subscriber

  Reply # 509101 19-Aug-2011 17:19
Send private message

Are you looking at http://www.geekzone.co.nz/upd_user.asp at all?






Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure)

 

Come talk travel on TravelTalk NZ.

Geekzone Price comparison | Geekzone News | Jinglebugs | Legal Movie Services in New Zealand | Payoneer | MightyApe | AliExpress | Amazon | 



BDFL - Memuneh
58096 posts

Uber Geek
+1 received by user: 9634

Administrator
Trusted
Geekzone
Subscriber

  Reply # 509102 19-Aug-2011 17:20
Send private message

Also note that this should not be turned off unless you understand the implications and why we implemented it.






Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure)

 

Come talk travel on TravelTalk NZ.

Geekzone Price comparison | Geekzone News | Jinglebugs | Legal Movie Services in New Zealand | Payoneer | MightyApe | AliExpress | Amazon | 

1815 posts

Uber Geek
+1 received by user: 51

Trusted

  Reply # 509111 19-Aug-2011 17:42
Send private message

I have it off but would like it on, if it could recall where I was going on geekzone.
I get an email to a thread, click the link and then have to log in and
geekzone forgets that I was heading to a link once logged in.

Could it at lease send me to the thread and ask to be logged in from there?

 1 | 2 | 3 | 4
View this topic in a long page with up to 500 replies per page Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Red Hat unveils production-ready open source hyperconverged infrastructure
Posted 23-Jun-2017 22:10

Whatever ailed Vodafone broadband … seems to be fixed
Posted 23-Jun-2017 14:10

VMware NSX Meets Stringent Government Security Standards with Common Criteria Certification
Posted 22-Jun-2017 19:05

Brother launches next-generation colour laser printers and all-in- ones for business
Posted 22-Jun-2017 18:56

Intel and IOC announce partnership
Posted 22-Jun-2017 18:50

Samsung Galaxy Tab S3: Best Android tablet
Posted 21-Jun-2017 12:05

Wellington-based company helping secure Microsoft browsers
Posted 20-Jun-2017 20:51

Endace delivers high performance with new 1/10/40 Gbps packet capture card
Posted 20-Jun-2017 20:50

You can now integrate SMX security into Microsoft Office 365, Google and other cloud email platforms
Posted 20-Jun-2017 20:47

Ravensdown launches new decision-making tool HawkEye
Posted 19-Jun-2017 15:38

Spark planning to take on direct management of all consumer stores
Posted 19-Jun-2017 10:03

Qrious acquires Ubiquity
Posted 14-Jun-2017 12:21

Spark New Zealand prepares for 5G with Nokia
Posted 14-Jun-2017 12:16

The future-proof 10.5-inch iPad Pro
Posted 13-Jun-2017 18:16

Mandatory data breach reporting in Australia
Posted 13-Jun-2017 11:30


Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Updates »

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.