|
|
| Author |
Thread Statistics | Show CCP posts - 0 post(s) |
Mithridates VI
IMPSwarm
Negative-Feedback
1080
   |
Posted - 2013.05.01 01:34:00 -
[1] - Quote
Counterintelligence 101: Employment History Without EVE Account
Okay, maybe it is... but you're in the minority.
Chances are that most of the posts on your forum are visible to strangers and spies. If you've put a little effort into website security, only some of your posts are available to everyone. If you've put no effort into website security, all of the posts on your site can be read by your rivals, your members may appear in Google searches and all of their posts are visible.
Lock it down to users only in the forum settings, on the page settings, on your shoutbox settings. Go to your admin tab at the top of the screen and in "Main Settings" deselect "Share your website on Enjin".
Require your members to change their personal privacy settings so that "Don't display your posts in other communities in your profile" is selected, otherwise all it takes to break open your forums is a friendship with or clever search for a single one of your members.
Test whether, with a new account, you can access any of your secret details. Test whether you can read the posts of any of your members through their profiles... or post a link to your Enjin and I'll tell you which parts fail.
Only once your site is fully configured to be "Registered Users Only" is it worthwhile to check whether your registered users are who you think they are, which I'll probably cover later if this is well received. |
Mithridates VI
IMPSwarm
Negative-Feedback
1081
|
Posted - 2013.05.01 01:46:00 -
[2] - Quote
Roy Ventus wrote:If it's to the point where it's something that'll make or break the corp, I don't even post it on there.
This is a good way to go, but even so if a decent social engineer is sniffing around your corp, it's little tidbits of inconsequential stuff that will trip you up.
|
Mithridates VI
IMPSwarm
Negative-Feedback
1108
|
Posted - 2013.05.02 01:48:00 -
[3] - Quote
Vaerana Myshtana wrote:Cyn Bruin wrote:Scheneighnay McBob wrote:Best solution: don't put anything important on enjin.
I don't think I did at least So you'll secure your enjin site, but tell everyone your plans for PC a month before it happens?  Did you find anything on our Enjin site about which planets we are attacking? If so, could you point me at it? 
I have a massive folder of BSOTT intel which I'm going to dump in this thread for your insolence.
>BSOTT INTEL DATA DUMP ID#233523
Quote:Rule #1
1) Don't be a ****.
Seriously. Be nice - You can be firm without making personal attacks.
>END DATA DUMP |
Mithridates VI
IMPSwarm
Negative-Feedback
1432
|
Posted - 2013.05.15 05:59:00 -
[4] - Quote
Updated with "Disable the (rather exploitable) site info page in your admin > settings > site info section." |
|
|
| |
|