duckbilled

Port Scans when accessing the forums?

Recommended Posts

Howdy,

I am not an IT expert, but the one in our office noticed that the AVSIM forums performed port scan when I accessed the forum from work this afternoon. He discovered this when researching a hacking attempt (I know, AVSIM has nothing to do with that issue). Why does this happen? I would like to be able to explain why. I can provide additional technical info if it is needed for a detailed explanation. PM me if you would like to handle this outside the forum.

It may have happened when I clicked on Chock's posted video here, but I don't know for sure.

Please let me know.

Thanks!

 

-Jeff

 

Share this post


Link to post
Share on other sites
Help AVSIM continue to serve you!
Please donate today!

I'm not an IT expert either.  From the Internet searches I conducted, port scans are common.  Our site is secure (see the green lock in the address bar).  Not many sites have the green bar yet.  This green lock tells you that you are entering a secure connection. We were one of the first to get the green lock so our membership would know they are on a safe and secure website.  It will be mandatory for all sites one of these days.  It cost us money so thanks to everyone for your donations!  Hope this helps.

Share this post


Link to post
Share on other sites

Thanks Jim.

Is there someone I can talk to - perhaps over PM - that can discuss this in greater detail? I have no doubts that AVSIM is secure and neither does my IT Director. Still, I am one of the senior staff members, and I'd like to understand this more.

Share this post


Link to post
Share on other sites

I'm sorry.  Not possible.  Details about our system, our security apparatus are not releasable to anyone, even your "IT Director".  The only thing our members need to know is that the site is secure.

Share this post


Link to post
Share on other sites

So... would it be okay for me to explain that AVSIM is doing?

It should be okay, as I don't represent AVSIM, and those in our community who log into AVSIM as members and especially donors have the right to know what data is being collected, or what attempts at data collection, is being done by AVSIM.

 

  • Upvote 1

Share this post


Link to post
Share on other sites

Hi Dave,

That information is all in the Green Lock.

Best regards,

Jim

Share this post


Link to post
Share on other sites

Dave, I don't believe that any information is being collected. Port scanning has been used for many years as a defensive tool to protect a website host from intrusion.

See: Port Scanning: It's Not Just an Offensive Tool Anymore

http://www.garykessler.net/library/is_tools_scan.html

  • Upvote 1

Share this post


Link to post
Share on other sites
On 10/6/2017 at 11:08 AM, Jim Young said:

Hi Dave,

That information is all in the Green Lock.

Best regards,

Jim

Interestingly, Jim, in Firefox the "Lock" isn't green on this very page. If I block cookies from AVSIM and reload the page the lock turns green, however, it also logs me out, and I can't login without re-enabling cookie storage. When on the main forum page, the lock is green.

Share this post


Link to post
Share on other sites
7 hours ago, somiller said:

Interestingly, Jim, in Firefox the "Lock" isn't green on this very page. If I block cookies from AVSIM and reload the page the lock turns green, however, it also logs me out, and I can't login without re-enabling cookie storage. When on the main forum page, the lock is green.

Thanks Steven.  Yes, I'm aware of this as I have Firefox too.  Image and video links and links to unsecure sites make the page unsecure.  But, overall, the site is secure.  This is an anomaly for every site like ours.  The information provided in the address bar tells you this.  Up until earlier this year, this site was basically unsecure other than it was password protected.  With your donations, we bought the green lock for added protection.  From my understanding, the green lock will be mandatory for every site someday soon.  It is mainly set up to make sure you are posting on AVSIM and not a site set up by someone else to make it look like you are on AVSIM (phishing).  Firefox and your connection to the Internet protects you further.  Other than this, I am braindead as far as to the security of this site.  Chase and our Tech handle those functions.

Share this post


Link to post
Share on other sites

Jim,

Thank you for responding. Good to know AVSIM has secured the site. This is still my go-to forum for all things flight sim, and I have to say this is a very, well-run resource.

Share this post


Link to post
Share on other sites
1 hour ago, somiller said:

and I have to say this is a very, well-run resource

You the man!  We appreciate nice comments like that once in a while.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now