ATTN: Security of Personal Identity!! NOT

[birdmom]

Attention Everyone:
Somebody is probably going to get very upset with me, but I am sorry, there is something very wrong with this website.

I have noticed that you ask for address and phone numbers on the member's profiles. Does everyone realize that the site administrators do not provide any security of that information? It is totally unprotected.

All you have to do is pull up this website, you don't even have to be logged in--or a member. You can click on anyone's name you see listed on a topic on the bottom half of the home page, or where there name shows as Who's Online over on the right. It will pull up their Profile and display all of their Personal Information, if they were foolish enough to place it there in a public forum.

Sorry guys, but I have an MS in Technology Management (telecommunications) and worked for an ISP for several years. This is reallly bad but if I didn't say something, I wouldn't be worth the paper my $60,000 degree is printed on. You may revoke my privileges for writing this, but who in the heck is running this thing?

Shame shame! Don't you guys know that there are bad people out there, and anyone can register here, anyone can just happen along and find this site (as I did) and steal personal information to create fake identities; or, they can notify bird thieves who support a very large black market for stolen exotic birds, and they especially like the ones who talk.

You simply must protect the personal information of your members, I am very disappointed. This data should be encrypted. If you don't like hearing this from a woman, just ask danmcq. He'll know, I am very sure.

Joanne aka birdmom

PS: and no, I am not trolling. I am serious. This is a problem you should take very seriously before it jeopardizes the website or results in irreparable harm to any of your registered members.<br><br>Post edited by: birdmom, at: 2007/12/30 09:02

[birdmom]

Okay, I'm not done this really irritates me. I am recommending some changes that I think should be made to this website design, asap. Please notify the website owner and website editor AT ONCE, I'm perfectly serious about this:

You need to advise all members to remove their personal data from the profile, and notify them properly that anyone can see it, anywhere in the world. I would send everyone an email now.

I think you really need to reformat the personal information page, so that only the user can access it; and only they can allow their 'buddies' or anyone they choose to see it. (However, even if you do that, you are making yourself very liable should a buddy become a stalker.)

I really do not see why you need to have member's addresses or phone numbers. Are you planning to send us Christmas Cards? Because, I didn't get one, but then I didn't put my address on there, either.

Really, I mean be sensible, if a member gets friendly with another member it is up to them to exchange such person information, that way you are not liable for anything happening to them or their personal identity information. I think the website owner is taking a really big liability here, and the website owner could be sued.

I am sorry, but again, I have worked for an International ISP and two phone companies, and I also worked in Internet Security for the HackerSafe people.

Please take these suggestions as helpful critique and don't be defensive about it. I am offering you valuable advice and won't send a bill. On the up side, it is a beautiful website and I love the flexibility, the tools, format and members, most are great.

Thanks for letting me play. Unfortunately, until such changes are made, I don't think I am comfortable associating here for obvious professional reasons.
Sorry. I really enjoy the forum. I need to sleep on this one. Joanne

[FairY]

birdmom, everybody is perfectly free not to fill in any information at all

[danmcq]

Joanne,

You are absolutely correct in your comments regarding personal information being kept safe and secure on the Internet. But, as with all non-secure websites, as this is, the individual is responsible for their personal information and whether they wish to make it available or not.

As Fairy said and I of course know that you understand this too, just don't fill it in.

But, you have brought up a very important topic that some people may not realize. Information you put out on the Internet about yourself is easily found by anyone unless it is on a secure https site that incorporates at least 128 (256 bit preferred) encryption and only you are allowed to chose to make that available to another individual via a link that is also password protected and encrypted that you personally send that individual and can also place a time constraint on that access if so desired.

Thanks for bringing this important information to light Joanne. Many of us are keenly aware of security on the Internet, but a larger portion of people are not.

Karma to you! :-)

[lovemyGreys]

Yes i agree with Dan, a very good thread which highlights the security risk, it is up to each member to fill their profile in accordingly.

[judygram]

Thanks Joanne for bringing this subject to light, and it is not the first time someone has brought this very topic up. I am agreement with Dan that no one should put their actual street address or phone number on their profile page. It really is up to each of us as individuals to keep that private information to ourrselves and only share it with ones they feel they can trust.

[Toni]

Yea Joanne makes good points, and for security reasons I am smart enough not to add that info,,,Its a shame we have people in the world that would hurt other people.

[birdmom]

FairY,
THAT IS REALLY LAME.

To dump it off on the member is really irresponsible.
You know perfectly well, and so does Dan, that they do not realize it. I feel you are obligated to be more portective of your members' private information. If not (and obviously you dont care) then, why in the heck should I participate on this forum.There are many other forums.

I will not be on this one any longer.

As I asked before, please remove my registration. Obviously, you did not take me seriously. As long as I can still log in, you have denied my request to remove me from this forum.

I want to be removed now please do it.

[birdmom]

OK, I know you guys own a website, and the more hits on it the higher the google ranking, the more member profiles the better its marketability to sell the site someday. I don't care. Yes Frank, i know its not online banking, Frank but havent you ever heard of identity theft? You dont have to be a bank to enable a persons identity to be stolen. Frank, you obviously don't know it, but yes sites do prevent others from reading personal data, ask DanMcq he'll explain it to you):

For everyone to see, here is Frank Venutos .............




I, FairY, have removed this. Private Messages are PRIVATE MESSAGES. You as feeling so concerned about privacy should know that best.

It takes some ethics to know the rules for behavior on the internet. Placing PRIVATE MESSAGES on a public forum is crossing those rules, and I don't agree with those.<br><br>Post edited by: FairY, at: 2007/12/31 11:21

[judygram]

Joanne, even though I agree with you in part, it is up to each individual to protect their own identity by not putting any of their personal information on the site. Each one of us is responsible for our own actions and stupidity is no excuse.

I do have a problem with posting your exchange with Frank on the site in this thread, that was uncalled for and certainly goes against your belief that putting personal info on the site since it contains your personal email address with your last name.

I don't like to see any of the members leave and that certainly includes you but this is a free country and if you want to leave then that is your choice. The admins do not own this site and do not have much control over how it is operated other than make suggestions so don't blame Frank for any of this mess.