Long overdue

I'm not understanding, I wake up with random posts like this made with my account, I was once banned for such. I investigated and saw numerous posts. I speedily changed my password and after a while, it continued

Can someone help?

flinton:
I'm not understanding, I wake up with random posts like this made with my account, I was once banned for such. I investigated and saw numerous posts. I speedily changed my password and after a while, it continued

Can someone help?

Good thing you've changed your password

Why is Domain King insisting that you must buy a dedicated IP and a paid SSL certificate from them before migrating your wordpress site from http to https? Another reason why Nigerian hosting companies are a pain in the neck.

I should be able to use a free SSL certificate like Let's Encrypt.

I'm good.

@seun, can you enforce the https? www.nairaland.com still brings the unsecured version of the site

It is completely FREE. Any web host that charges money to encrypt your site is just trying to extort you. Migration to HTTPS is absolutely FREE.

@TechCapone

It is a big lie!

SSL accounts in web hosting is NOT FREE!

flinton:
I'm not understanding, I wake up with random posts like this made with my account, I was once banned for such. I investigated and saw numerous posts. I speedily changed my password and after a while, it continued

Can someone help?

flinton:
I'm not understanding, I wake up with random posts like this made with my account, I was once banned for such. I investigated and saw numerous posts. I speedily changed my password and after a while, it continued

Can someone help?

You either clicked a link which is running a malware on your email account or installed a browser addon with malware which automatically posts on your Nairaland account since you are already automatically logged in.

Happened to me once!

Solution: Use a premium IOBIT Malware removal tool or Premium AVG link scanner to scan your pc and remove the malware

Thanks for the info

Either secure or not if my life is secure in dis shithole called Nigeria, I'm happy

flinton:
I'm not understanding, I wake up with random posts like this made with my account, I was once banned for such. I investigated and saw numerous posts. I speedily changed my password and after a while, it continued

Can someone help?

Change your password again. Have you installed any toolbars or other spyware that may be capturing your password?

My site is secure! Check it out: www.npowerdg.com

Please of recent chrome have been popping up this Smartsiteweb even while am currently on another app... Please how can I stop this frequent pop up from chrome... Thanks

Informative !

Click here for hosting plan hosting plans that come with free SSL + international servers

Silvermoney:
Why is Domain King insisting that you must buy a dedicated IP and a paid SSL certificate from them before migrating your wordpress site from http to https? Another reason why Nigerian hosting companies are a pain in the neck.

I should be able to use a free SSL certificate like Let's Encrypt.

I mentioned here last week that Nairaland was too big not to be secured, only to log in this morning on a secured Nairaland. Nice on Seun, SSL certificate isn't that expensive.

Seun:
Change your password again. Have you installed any toolbars or other spyware that may be capturing your password?

Hi, are you guys working on nairaland? Why are thread pages now numbered 1,2,3 but the links still number 0,1,2, etc i.e. Page 2 on a thread now corresponds to nairaland.com/threadnumber/1 instead of threadnumber/2?
Why do deleted posts leave blank green boards?

Nice one, we are good here with https://.

Is nairaland secure?

Lyoncrescent:
quick question to those in the know. The HR online application of our office that hosts our pay slip and other sensitive information is http not https However, the contractor who developed the applicationsaid it doesnt matter since the software is hosted online on the servers of Galaxy Backbone which is a Nigerian government company and as such its secure from hackers and all that because the Galaxy company has a whole lot of security on the backend.

My question is in this context is he right that https doesnt matter as long as you have security on the backend ? A lot of sensitive information are on this application from peoples certificates to payslips and the company that developed the software insists https doesnt matter and http is fine.You require a login to access the application though.

Please advice

The person is trying to tell you that your information is stored on a secured server. Meaning it is slightly harder for hackers to steal that information from their servers. It doesn't mean they can't though. What he failed to tell you, and where he is wrong is with the http issue. Even though their server is secure, if you use an http connection to send information to their server, the information that YOU send over that http connection to their server is not encrypted. What this means is that if you have a computer that has been compromised either with trojans, viruses etc and you decided to enter your username and password on the http connection, that information can be intercepted while you are sending it over. IF it is https, it is encrypted and makes it harder to steal. So https is still very important although it doesn't guarantee anything.

If a keylogger is installed on your computer, http or https, everything you typed on the site can be stolen.
With regards to those saying Nairaland is now secure, this is incorrect. It is YOUR CONNECTION to Nairaland that is secure so that when you enter usernames and passwords, it is encrypted. As far as your information stored on Nairaland server, unless Seun comes and tells you about the security in place, you have no either if it is secure or not.

https, free? which web host gives it for free? after paying for your domain name, you still have to pay for the https. I use different hosts for my domain name and wed hosting

EbolaParasite:


The person is trying to tell you that your information is stored on a secured server. Meaning it is slightly harder for hackers to steal that information from their servers. It doesn't mean they can't though. What he failed to tell you, and where he is wrong is with the http issue. Even though their server is secure, if you use an http connection to send information to their server, the information that YOU send over that http connection to their server is not encrypted. What this means is that if you have a computer that has been compromised either with trojans, viruses etc and you decided to enter your username and password on the http connection, that information can be intercepted while you are sending it over. IF it is https, it is encrypted and makes it harder to steal. So https is still very important although it doesn't guarantee anything.

If a keylogger is installed on your computer, http or https, everything you typed on the site can be stolen.
With regards to those saying Nairaland is now secure, this is incorrect. It is YOUR CONNECTION to Nairaland that is secure so that when you enter usernames and passwords, it is encrypted. As far as your information stored on Nairaland server, unless Seun comes and tells you about the security in place, you have no either if it is secure or not.

Thanks for this explanation. Grateful

pacespot:
https, free? which web host gives it for free? after paying for your domain name, you still have to pay for the https. I use different hosts for my domain name and wed hosting

Try letsencrypt. Even if you dont have shell access, they have plugins for several platforms. If you have shell access, it only takes 30 seconds and its free

frowland:
Advantage 1,2 and 5 is not entirely accurate. If you believe SSL secures browsers then you are deceiving yourself.
....and I think that bar have been going on for a long time now.

SSL secures data in transit not a browser.

Delivar:

SSL secures data in transit not a browser.

Even in transit, its not totally 'secured'.

frowland:


Even in transit, its not totally 'secured'.

You have a means to decrypt SSL encryption?

Delivar:

You have a means to decrypt SSL encryption?

Its not about decrypt or encrypt, its about data collection BEFORE its encrypted and transported (..and that depends on the point it was encrypted - server or browser?), and yes, why can't TLS encryption be decrypted.
Encryption is just to make the job of penetration harder not totally to prevent it.

frowland:


Its not about decrypt or encrypt, its about data collection BEFORE its encrypted and transported (..and that depends on the point it was encrypted - server or browser?), and yes, why can't TLS encryption be decrypted.
Encryption is just to make the job of penetration harder not totally to prevent it.

SSL does it's job as it says. Whatever means used to circumvent it as long as it isn't a loophole doesn't make it unreliable. It's left for you to guard against other security threats that bypasses the intended use of SSL.

Delivar:

SSL does it's job as it says. Whatever means used to circumvent it as long as it isn't a loophole doesn't make it unreliable. It's left for you to guard against other security threats that bypasses the intended use of SSL.

As long as there is loophole, does that make it 100% reliable? SSL is just like your house key, it does not stop a robber gaining access one way or another. ans YES encryption can be decrypted. Take your story to banks in Brazil, US, Pakistan etc that have witnessed successful russia and Nkorea cyber attacks. Ask them if they used multiple TLS why were they still compromised?
Secondly, its now TLS and no longer SSL as the later is 'old fashion' and hardly used anymore.

flinton:
I'm not understanding, I wake up with random posts like this made with my account, I was once banned for such. I investigated and saw numerous posts. I speedily changed my password and after a while, it continued

Can someone help?

He's still using your account to post. Pls change your password again