NotebookForums.com › Forums › Off Topic › Site Suggestions and Help › NBF Login is discouraging
New Posts  All Forums:Forum Nav:

NBF Login is discouraging

post #1 of 20
Thread Starter 
The Login process on NBF needs a serious refresh.

Today I received a notification of new reply on a thread. When visiting I was not logged. Compare with Amazon: I can remain months without visiting them, when I come back I am logged; I think in 15 years of dealing with Amazon they never asked my PWD unduly a single time. And when accessing secure pages, then they duly ask for my PWD, but only my PWD (my UserID is already displayed), and they will keep me secure-logged for a reasonable time: no unreasonable or annoying re-request of PWD, that would endanger efficiency and friendliness; no unreasonably long login, that would compromise security. It's the same or nearly on many other sites, e.g. SitePoint Forums, Yahoo, etc. Oppositely on NBF when coming back I am always out-logged.

Second problem, the login is very painful. The "forgot PWD" process requests a Captcha! (in 2011 they still think Captcha is useful! and they apply it to "forgot PWD"!!), and in addition that Captcha is specially picky. I believe the ones who installed that process either never thought of what they were doing, or are definitely willing to lessen the quality of the forum, in particular by discouraging anyone not diehard aficionado of this particular forum.

Third problem, they don't give your PWD back, they reset it. So you have to think again about creating a new PWD (time loss).

Fourth problem, and the biggest, they tell you "All cookies cleared!" when loging out! (if you are using multiple browsers, in my case Chrome8 and IE6, you may have to logout and re-loging in when changing PWD so to make it remembered in each browser). I hope this is just a reckless phrasing and they didn't actually clear all my cookies!! And if they don't make this vast destruction of useful data on someone else's property (their visitor's PC) without their will or permission and even without asking or notifying them, then they should NOT say they are doing it!

In case there were someone short-minded enough at NBF to not understand what they are doing, please someone teach them: cookies have been built for a purpose, they are a big amount of very useful data, destroying them is a huge time loss; anyway, and even worse, changing something (even if not such a vast destruction) on someone else without their permission is a crime (and would be treated as such if there was still some real justice and some real court of justice).

Versailles, Tue 18 Jan 2011 08:47:00 +0100
post #2 of 20
Michel, in the log in box, there is a box marked "Remember me". Click that box, and it will keep you logged in until you actually click the log out button. Also, when leaving the site, just close the tab, do not click the log out, as that will make you log back in manually next time.

Also, I believe that only the cookies relevant to NBF are cleared when you log out.

Hope this helps.
post #3 of 20
Quote:
Originally Posted by Michel Merlin View Post
The Login process on NBF needs a serious refresh.

Today I received a notification of new reply on a thread. When visiting I was not logged. Compare with Amazon: I can remain months without visiting them, when I come back I am logged; I think in 15 years of dealing with Amazon they never asked my PWD unduly a single time. And when accessing secure pages, then they duly ask for my PWD, but only my PWD (my UserID is already displayed), and they will keep me secure-logged for a reasonable time: no unreasonable or annoying re-request of PWD, that would endanger efficiency and friendliness; no unreasonably long login, that would compromise security. It's the same or nearly on many other sites, e.g. SitePoint Forums, Yahoo, etc. Oppositely on NBF when coming back I am always out-logged.
You were probably a victim of p.m. spamming that can happen to any sites. We are constantly working on as how to prevent this. If you don't want to be logged off after a certain time, you can try checking "remember me" flag at the sign-on dialog.

Quote:
Originally Posted by Michel Merlin View Post
Second problem, the login is very painful. The "forgot PWD" process requests a Captcha! (in 2011 they still think Captcha is useful! and they apply it to "forgot PWD"!!), and in addition that Captcha is specially picky. I believe the ones who installed that process either never thought of what they were doing, or are definitely willing to lessen the quality of the forum, in particular by discouraging anyone not diehard aficionado of this particular forum.
You have a better idea? do spill it out for us to consider

Quote:
Originally Posted by Michel Merlin View Post
Third problem, they don't give your PWD back, they reset it. So you have to think again about creating a new PWD (time loss).
Your password is yours to create and remember, if you lose it, we can only reset and you'd need a new one - why would you want someone else to remember your password for you?

Quote:
Originally Posted by Michel Merlin View Post
Fourth problem, and the biggest, they tell you "All cookies cleared!" when loging out! (if you are using multiple browsers, in my case Chrome8 and IE6, you may have to logout and re-loging in when changing PWD so to make it remembered in each browser). I hope this is just a reckless phrasing and they didn't actually clear all my cookies!! And if they don't make this vast destruction of useful data on someone else's property (their visitor's PC) without their will or permission and even without asking or notifying them, then they should NOT say they are doing it!
You expect a site to go through ALL your browsers, active and inactive with the site to clear out all cookies? You lost me here.

Quote:
Originally Posted by Michel Merlin View Post
In case there were someone short-minded enough at NBF to not understand what they are doing, please someone teach them: cookies have been built for a purpose, they are a big amount of very useful data, destroying them is a huge time loss; anyway, and even worse, changing something (even if not such a vast destruction) on someone else without their permission is a crime (and would be treated as such if there was still some real justice and some real court of justice).

Versailles, Tue 18 Jan 2011 08:47:00 +0100
Constructive input is always welcome at NBF, but this statement of yours is quite provocative, if I may say condescending! Sites can delete, at their discretion, any cookies that they used during a session. Funny for me to read about someone wanting sites to leave cookies straying around in their systems after the session.

cheers ...
post #4 of 20
As MichelleG said, if you want to stay logged in, just make sure to select the "Remember Me" check box and when you choose to exit the site, do so by exiting your browser tab or window.

The statement "all cookies cleared" upon logging out only refers to cookies placed by Notebook Forums. This site cannot and does not affect or alter any other cookies, saved data, or any other information stored on your computer from any other site. I apologize if the wording caused you confusion.

Regarding our use of Captcha, we have had a significant influx of spammers recently and we are trying to reduce their numbers in many different ways. One of these methods of slowing down spammers is the use of Captcha. While as you say it is an older method, we have had evidence that the forum is typically spammed less when it is on and so we keep it.
post #5 of 20
To further explain about the password, the password itself is not stored, when it is set a hash of it is created and stored (both for speed and security). a cryptographic hash is a one way process, and in order to turn that hash back into a password a brute force check against it would have to be run, trying every possible character combination in sequence until finding one that generated the same hash.

and about the cookies, it's only clearing the cookies from NBF itself (which theres a few created for different purposes), not the rest of your cookies in your browser. No, the phrase isn't very specific, but its the default message in the vBulletin software
post #6 of 20
Thread Starter 

Please read before "answering"

Please people, before posting, try to read what you feel like "replying" to. Did one of you really believe your ostensibly stupid assumptions on me, e.g. that I would have ignored the "remember me" link (while remaining logged on amazon for 15 years)? My post was long enough already, should I have added all the obvious? The funniest is those people provoking me so badly, then calling me "provocative". The best you achieve is recalling me the american saying: "Attempting to show others' stupidity most often ends demonstrating your own".

Someone wrote "we have had evidence that the forum is typically spammed less when it is on and so we keep it". Is that just random words, or is it an actual facts? in such case, can you elaborate and report the numbers, prior and after, of spams, of useful posts, or complaints of each sort? Personally I think, and I will continue to think as long as no sufficiently sincere and credible reports are brought, that under Captchas your loss in useful posts is higher than your gain in avoided spams.

Now please come back to helpful attitude:
  • stop faking to not understand that the Login process on NBF is badly outdated (personally I feel like back in 1995)
  • stop sending an "All cookies cleared!" message after someone did something as mundane as logging out: of course none will really think NBF has destroyed ALL their cookies, but the message such a dialog casts is essentially "we don't care about our work, we can do anything, including destroying anything, so be warned, don't trust anything to us"
  • haven't you noticed that most modern sites have abandoned Captchas, after noticing this hampers more honest users than wrongdoers?
  • when you find the email address someone sent you after "forgot PWD", and you decide to send them an unique secure link designed (as most sites, on that small point you are right) to reset the PWD, why in the world would you need, in addition, bother your visitor with an additional "security" hurdle? Did you ever THINK about that? Did this "thinking" really make you think this would efficiently hamper wrongdoers, and NOT hamper legit users?

Now I won't battle forever with people visibly more interested in ridiculing others than in understanding them - not to mention to cure and improve NBF. The flaw I reported is hurting NBF more than me, I tried to help, but I can't help people more interested in hurting than in helping others or even themselves.
.
Versailles, Tue 18 Jan 2011 17:08:20 +0100
post #7 of 20
Quote:
Originally Posted by Michel Merlin View Post
Someone wrote "we have had evidence that the forum is typically spammed less when it is on and so we keep it". Is that just random words, or is it an actual facts? in such case, can you elaborate and report the numbers, prior and after, of spams, of useful posts, or complaints of each sort?
you want some numbers? how about our own numbers here. I was the one who originally turned on the CAPTCHA, some time back. when I did, our spam registrations droppped to well under 10% of what they were before that. and you have been the only person that's complained about the CAPTCHA being part of the process

as for the "All cookies cleared!" message, I will change it to something a little more descriptive as soon as I get the chance.

I'm not sure why its not keeping your cookies, however. I just checked and there is no expire date set for them. I have not experienced the issue myself, I can get on the computers at my parents house, for example, which I only ever use when over there fixing a problem (months or years spread out at a time), and my cookies have remained valid and I haven't had to log in again.
post #8 of 20
Thread Starter 

NBF keeps "remembering" visitors logged

Quote:
Originally Posted by sRc View Post
as for the "All cookies cleared!" message, I will change it to something a little more descriptive as soon as I get the chance.

... (months or years spread out at a time), and my cookies have remained valid and I haven't had to log in again.
Thanks "sRc" for your constructive reply - and my apology if I was a little too "responsive" to the (rightly or wrongly perceived) heat.

I don't know why Chrome8, who usually keeps me logged very well, lost my logged status on NBF. I will see.

I didn't understand your phrase about numbers and CAPTCHAs, however the important thing is to think ALSO of the negative impact onto fair visitors, and I see your care for this and for the rest, so it's OK for me now.

(making a title so to outlook your reply about remembering visitors)

Versailles, Tue 18 Jan 2011 17:45:00 +0100
post #9 of 20
now that I think about it, Chrome in particular (by Chrome8 I presume you're using the regular Stable channel) did have a bug not that long ago where it was randomly losing cookies (and I did lose a few different sites under that bug), but I think that has been recently resolved.
post #10 of 20
Quote:
Originally Posted by Michel Merlin View Post
Please people, before posting, try to read what you feel like "replying" to. Did one of you really believe your ostensibly stupid assumptions on me, e.g. that I would have ignored the "remember me" link (while remaining logged on amazon for 15 years)? My post was long enough already, should I have added all the obvious? The funniest is those people provoking me so badly, then calling me "provocative". The best you achieve is recalling me the american saying: "Attempting to show others' stupidity most often ends demonstrating your own".
Un) You were assuming that we took it from your OP that you checked the "remember me" button?

Deux) You called someone short-minded without being provoked, or did you assume again that we should know that you were already being provoked when you posted your provocative comment?

Trois) You said it perfectly here"Attempting to show others' stupidity most often ends demonstrating your own"


Quote:
Originally Posted by Michel Merlin View Post
Someone wrote "we have had evidence that the forum is typically spammed less when it is on and so we keep it". Is that just random words, or is it an actual facts? in such case, can you elaborate and report the numbers, prior and after, of spams, of useful posts, or complaints of each sort? Personally I think, and I will continue to think as long as no sufficiently sincere and credible reports are brought, that under Captchas your loss in useful posts is higher than your gain in avoided spams.
Now this is an interesting point to bring about for everyone that work on this to chip in, could be a very good thread on its own - I myself have not so much idea over it, just another checking tool for me, a simple forum user. We have others that are more competent in this area to discuss with you

Quote:
Originally Posted by Michel Merlin View Post
Now please come back to helpful attitude:

... Now I won't battle forever with people visibly more interested in ridiculing others than in understanding them - not to mention to cure and improve NBF. The flaw I reported is hurting NBF more than me, I tried to help, but I can't help people more interested in hurting than in helping others or even themselves.
.
Versailles, Tue 18 Jan 2011 17:08:20 +0100
I stay by my statement above - and be very clear about this:

Constructive and helpful input is always welcome here at NBF - starting a post by calling people short-minded is not a very galant way to communicate.

NBF members are here to exchange ideas and trying to sort out any issues that need to be sorted out, in NBF best efforts.

cheers ...
post #11 of 20
Thread Starter 

Let's be accurate

Quote:
Originally Posted by qhn View Post
Un) You were assuming that we took it from your OP that you checked the "remember me" button?
I didn't even THINK that someone COULD IMAGINE (or more probably could fake to imagine) that I hadn't checked "remember me". What would YOU feel if a group suddenly implied you hadn't noticed or understood or done something that they obviously knew you had noticed, understood and done ?
Quote:
Originally Posted by qhn View Post
Deux) You called someone short-minded
Before accusing me publicly of calling someone short-minded, please quote and link the phrase where I called (according to you) "someone" such, hence WHO was thus "called... short-minded". Anyway, omitting the "In case there were" when raising this is clearly an offense against the truth and against myself.
Quote:
Originally Posted by qhn View Post
starting a post by calling people short-minded
this phrase was NOT "starting a post" but ending one, hence was in no way as reckless as you present it.
Quote:
Originally Posted by qhn View Post
Constructive and helpful input is always welcome here at NBF... NBF members are here to exchange ideas and trying to sort out any issues...
Readers will seee in the thread above who was the most - or the least - "Constructive and helpful", how I was "welcome here at NBF", and how "NBF members" are "trying to sort out any issues".

I continue to think as I thought for a decade about NBF: this forum has a lot of resources but (noting that they are far from the only or the worse ones) too often compromises them by an NIH, Resistance to change attitude that makes them fight any input that would change something to their routine.

Versailles, Tue 18 Jan 2011 20:09:00 +0100
post #12 of 20
@michel

Please note - our mods have been on our forums for a long time and they certainly do know that CAPTCHA works - they deal with the spam day-in and day-out and like sRc said, he remembers the days before CAPTCHA.

I did however notice a minor redundancy when logging out using Chrome 9.0.597.47 beta for me. I have only got this when my session has expired after inactivity (this is a good thing, not a bug). NBF fails to logout the first time and asks to try again (then works). This happens because the logout link's secure hash expires. It's fixed simply by logging out, clearing and entering the user/pass fields then checking the "remember me" button and logging back in. Chrome then saves the username and password properly for successive sessions.

Also, a cookie can only be read and modified by a script sitting on it's corresponding domain. A cookie using an outside a domain can't be modified from NBF. The only way this can happen is if our site has been compromised by an attack (i.e cross-site scripting) which it hasn't that I'm aware of

@src thanks for changing the "all cookies cleared" message.
post #13 of 20
Quote:
Originally Posted by Michel Merlin View Post
I didn't even THINK that someone COULD IMAGINE (or more probably could fake to imagine) that I hadn't checked "remember me". What would YOU feel if a group suddenly implied you hadn't noticed or understood or done something that they obviously knew you had noticed, understood and done ?
They are certain questions and suggestions that helpful members give when replying to posts where some information was missing for the eager reply-ers to see the whole picture of the issue.

These questions and suggestions are by no mean meant to offend the OP, but only to try to understand where the exact issue is. It is very much the same chain of thought when you call up support for a non-start issue and the gals/guys ask "have you push the power button" or "is the power being on" ... etc

These questions and suggestion implied nothing but just helpful input trying to build a chain of steps to understand your problem. They are obvious and can come across as too simple, but never offending.


Quote:
Originally Posted by Michel Merlin View Post
....
I continue to think as I thought for a decade about NBF: this forum has a lot of resources but (noting that they are far from the only or the worse ones) too often compromises them by an NIH, Resistance to change attitude that makes them fight any input that would change something to their routine.

Versailles, Tue 18 Jan 2011 20:09:00 +0100
Wow .... so many grand mots.


cheers ...
post #14 of 20
I haven't experienced any of the problems you're reporting and I am 100% Chrome 8 user. I login to multiple computers at a time and it always remembers me.
post #15 of 20
Quote:
Originally Posted by Michel Merlin View Post
Please people, before posting, try to read what you feel like "replying" to. Did one of you really believe your ostensibly stupid assumptions on me, e.g. that I would have ignored the "remember me" link (while remaining logged on amazon for 15 years)?
I apologize for being ostensibly stupid, I was just trying to help. Next time I'll just keep my mouth shut.
post #16 of 20
Quote:
Originally Posted by Davidvs View Post
I apologize for being ostensibly stupid, I was just trying to help. Next time I'll just keep my mouth shut.
OP was not mentioning you David - it was "someone" or was it "one of you"(?) I am not sure anymore - Don't take it so hard matey.

cheers ...
post #17 of 20
Wow what's that all about?
post #18 of 20
Quote:
Originally Posted by qhn View Post
They are certain questions and suggestions that helpful members give when replying to posts where some information was missing for the eager reply-ers to see the whole picture of the issue.

These questions and suggestions are by no mean meant to offend the OP, but only to try to understand where the exact issue is. It is very much the same chain of thought when you call up support for a non-start issue and the gals/guys ask "have you push the power button" or "is the power being on" ... etc

These questions and suggestion implied nothing but just helpful input trying to build a chain of steps to understand your problem. They are obvious and can come across as too simple, but never offending.


Try not to be so rude to those trying to help you, unless you would prefer to be ignored.
post #19 of 20
nice bump Kim
post #20 of 20
Couldn't help myself.
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Site Suggestions and Help
NotebookForums.com › Forums › Off Topic › Site Suggestions and Help › NBF Login is discouraging