Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
Forums › Geekzone › Increasing login security


BDFL - Memuneh
61171 posts

Uber Geek
+1 received by user: 11949

Administrator
Trusted
Geekzone
Lifetime subscriber

Topic # 88593 18-Aug-2011 16:28
Send private message

Hello folks

We have just made a small change to our login system: if your IP address changes since your login then your session will be closed and you will have to login again.

This will reduce the chances some malicious software or web sites could use the tokens we give out when you login to impersonate your user here on Geekzone.

It may be an incovenience for some mobile users since those are more likely to have their IP address changed without notice. If you see a message stating your session terminated because of your IP address changed then you will know why.

This is the default behaviour. There's now an option on your profile that will control this and you can turn it off if needed.




Backblaze cloud backup (personal and business) | Geekzone broadband switch | Amazon (Geekzone aff) | MightyApe (Geekzone aff) | 

 

My technology disclosure  | Business Transformation | Enterprise Content Management | Customer Relationship Management

 

 

View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2 | 3 | 4
1598 posts

Uber Geek
Inactive user


  Reply # 508646 18-Aug-2011 16:29
Send private message

Excellent feature for improving the website security in general. Also, there is a typo in your first sentence.

6434 posts

Uber Geek
+1 received by user: 1571


  Reply # 508650 18-Aug-2011 16:33
Send private message

does thismean if I use geekzone on two computers (e.g. my home desktop and my home laptop) then each time I switch between the two I will be logged out and will have to manually log back in again?

1598 posts

Uber Geek
Inactive user


  Reply # 508651 18-Aug-2011 16:36
Send private message

NonprayingMantis: does thismean if I use geekzone on two computers (e.g. my home desktop and my home laptop) then each time I switch between the two I will be logged out and will have to manually log back in again?

Probably will be better for you if you disable the feature in this case then. 



BDFL - Memuneh
61171 posts

Uber Geek
+1 received by user: 11949

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 508652 18-Aug-2011 16:37
Send private message

Good question. The answer is "no".

This is on per IP/browser basis. You can be logged on your home PC, on your work and those are considered independent sessions.

If you get your work PC out of the docking station, goes to a another city and start using your laptop at the hotel then it will be a different IP address and your work PC will be logged out. This will not affect the home PC.

However, there's a link you can click (it's been there for some time now) that will "destroy" all existing sessions.

This is handy for example if you turn off the IP address lock feature but have your work laptop stolen. You can click that link from any other PC and *ALL* your sesions will be closed, regardless of which browser or PC is currently logged in. This is good for example if you use Geekzone from a Internet Cafe and leave the session open. You can then close it remotely.




Backblaze cloud backup (personal and business) | Geekzone broadband switch | Amazon (Geekzone aff) | MightyApe (Geekzone aff) | 

 

My technology disclosure  | Business Transformation | Enterprise Content Management | Customer Relationship Management

 

 

5043 posts

Uber Geek
+1 received by user: 1619


  Reply # 508662 18-Aug-2011 16:54
Send private message

freitasm: if your IP address changes since your login then your session will be closed and you will have to login again.


If you are behind a NAT router, is it the internal or external IP changing that triggers the logout?



BDFL - Memuneh
61171 posts

Uber Geek
+1 received by user: 11949

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 508663 18-Aug-2011 17:00
Send private message

It should be the external one.




Backblaze cloud backup (personal and business) | Geekzone broadband switch | Amazon (Geekzone aff) | MightyApe (Geekzone aff) | 

 

My technology disclosure  | Business Transformation | Enterprise Content Management | Customer Relationship Management

 

 

1598 posts

Uber Geek
Inactive user


  Reply # 508672 18-Aug-2011 17:36
Send private message

freitasm: Good question. The answer is "no".

This is on per IP/browser basis. You can be logged on your home PC, on your work and those are considered independent sessions.

If you get your work PC out of the docking station, goes to a another city and start using your laptop at the hotel then it will be a different IP address and your work PC will be logged out. This will not affect the home PC.

However, there's a link you can click (it's been there for some time now) that will "destroy" all existing sessions.

This is handy for example if you turn off the IP address lock feature but have your work laptop stolen. You can click that link from any other PC and *ALL* your sesions will be closed, regardless of which browser or PC is currently logged in. This is good for example if you use Geekzone from a Internet Cafe and leave the session open. You can then close it remotely.


Whoops, I take back my prior statement. This is correct, it would be separate sessions. 



BDFL - Memuneh
61171 posts

Uber Geek
+1 received by user: 11949

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 508791 18-Aug-2011 23:28
Send private message

I've noticed a problem with this new way of managing security when accessing the main site from a smartphone.

Ooops. I will be looking at this later this week.





Backblaze cloud backup (personal and business) | Geekzone broadband switch | Amazon (Geekzone aff) | MightyApe (Geekzone aff) | 

 

My technology disclosure  | Business Transformation | Enterprise Content Management | Customer Relationship Management

 

 



BDFL - Memuneh
61171 posts

Uber Geek
+1 received by user: 11949

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 508888 19-Aug-2011 10:45
Send private message

Actually just tested in this happens only on Telecom XT. I am following up this.




Backblaze cloud backup (personal and business) | Geekzone broadband switch | Amazon (Geekzone aff) | MightyApe (Geekzone aff) | 

 

My technology disclosure  | Business Transformation | Enterprise Content Management | Customer Relationship Management

 

 

2627 posts

Uber Geek
+1 received by user: 185


  Reply # 508890 19-Aug-2011 10:52
Send private message

This is the default behaviour. There's now an option on your profile that will control this and you can turn it off if needed.



Where is this option? Im either blind or its not there.



BDFL - Memuneh
61171 posts

Uber Geek
+1 received by user: 11949

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 508891 19-Aug-2011 10:53
Send private message

It's there, under "Security Options".




Backblaze cloud backup (personal and business) | Geekzone broadband switch | Amazon (Geekzone aff) | MightyApe (Geekzone aff) | 

 

My technology disclosure  | Business Transformation | Enterprise Content Management | Customer Relationship Management

 

 

688 posts

Ultimate Geek
+1 received by user: 15

Trusted

  Reply # 509080 19-Aug-2011 16:30
Send private message

I may be a bit slow today, but I can't even find security options :(




BDFL - Memuneh
61171 posts

Uber Geek
+1 received by user: 11949

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 509101 19-Aug-2011 17:19
Send private message

Are you looking at http://www.geekzone.co.nz/upd_user.asp at all?





Backblaze cloud backup (personal and business) | Geekzone broadband switch | Amazon (Geekzone aff) | MightyApe (Geekzone aff) | 

 

My technology disclosure  | Business Transformation | Enterprise Content Management | Customer Relationship Management

 

 



BDFL - Memuneh
61171 posts

Uber Geek
+1 received by user: 11949

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 509102 19-Aug-2011 17:20
Send private message

Also note that this should not be turned off unless you understand the implications and why we implemented it.





Backblaze cloud backup (personal and business) | Geekzone broadband switch | Amazon (Geekzone aff) | MightyApe (Geekzone aff) | 

 

My technology disclosure  | Business Transformation | Enterprise Content Management | Customer Relationship Management

 

 

1818 posts

Uber Geek
+1 received by user: 52

Trusted

  Reply # 509111 19-Aug-2011 17:42
Send private message

I have it off but would like it on, if it could recall where I was going on geekzone.
I get an email to a thread, click the link and then have to log in and
geekzone forgets that I was heading to a link once logged in.

Could it at lease send me to the thread and ask to be logged in from there?

 1 | 2 | 3 | 4
View this topic in a long page with up to 500 replies per page Create new topic

Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Updates »

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.