security

  1. vbuser

    XF 1.5 FYI about 2 step verification

    Google Authenticator accounts only exist on your phone. There is no back up. I reset my phone and lost access to all sites using Google Authenticator. I'm using Authy now which can sync with multiple mobile devices. Authy also backs up your accounts. Also, "Regenerate secret for a new...
  2. Puntocom

    OpenSSL to patch undisclosed high severity vulnerability this thursday

    Info here: OpenSSL to Patch Undisclosed High Severity Vulnerability this Thursday I wonder if LibreSSL will be vulnerable to this issue.
  3. naia

    PGP Encrypted Emails

    With services like Facebook now offering the feature to display your public PGP key on your profile, and to have all emails sent to you by Facebook encrypted with this key (source), and with Xenforo being a forum built on security, and especially with the recent addition of two factor...
  4. R

    Lack of interest Disallow/Disable/Force specific kinds of two factor authentication

    This is a suggestion for the new 2FA in XenForo v 1.5. Suggestion It would be great if you either... could disallow specific kinds of 2FA for user groups. or... adjust Implemented - Option to force 2Factor authentication on staff, so that you can force specific kinds of two factor...
  5. R

    Content Security Policy (CSP)

    As XenForo was built with "security in mind" I assume you want to secure or make it possible for server admins to secure their website. A great way to do this is Content Security Policy. However XenForo has some issues which make it difficult to use this in a strong way. Basic facts All test...
  6. Peter

    Lack of interest [Suggestion] Account Session/Login Security

    Login at friend's home, cafe, etc. then login at another PC or home, the second login will override and kick the first login. Either that or the ability to view account history and kick sessions.
Top Bottom