|
Avid Pro Audio CommunityHow to Join & Post • Community Terms of Use • Help Us Help YouKnowledge Base Search • Community Search • Learn & Support |
#21
|
||||
|
||||
Re: Avid DUC not secure?
Someone somewhere wrote that most users are idiots and are likely using same password here and there so this https most likely would be protecting other parts of avid.com
Just a guess.
__________________
Janne What we do in life, echoes in eternity. |
#22
|
|||
|
|||
Re: Avid DUC not secure?
I explained enough issues. You don’t think it’s an issue, too bad. I don’t know any security person who would think this is not an issue worth fixing.
Want to guess how many Avid staff might reuse passwords or slight permutations on DUC and Avid in-house systems? Want to guess if they have a corporate password management system or hardware key/2FA authentication implemented for internal systems? Oh what goodies that might reveal? Want to think what could happen if somebody MITM attacks and gets admin access to DUC and all the non-public info is scraped? Security happens in layers, https is one of those important layers. |
#23
|
|||
|
|||
Re: Avid DUC not secure?
Darryl, if you feel so strongly why not offer to pay to move it to https for Avid. Put your money where your mouth is. Oh, not that important anymore right! It doesn't matter to me either way. I'm not one of the idiots JFREAK was referring to. But I agree there are those that need protecting from their own bad habits. Hmmm, maybe those that want https most are those that need protecting most. . Tell me... whats your password? And whats in YOUR wallet!
All in fun. Pull ya panties back out!
__________________
Mac 8 Core 6,1 - OSX 10.13.6 - 32GB RAM - Pro Tools 2018.10 - 8x8x8+8 ch DA Card (x2) - HD OMNI - ICON D-Control 32 - Sync I/O - Sonnet xMac Pro Server w/HDX x 2, Blackmagic Intensity Pro 4K Protools 2018.10 HD Native in 1 project suite Eristopher Music |
#24
|
|||
|
|||
Re: Avid DUC not secure?
Cost which has been brought up here before is a fallacy. Organizations like Let’s Encrypt provide certificates for *free*. Sure I’ll pay for one of those for Avid. Additional overhead costs should be down in the weeds, and easily offset by any security breach cost models.
How about having a nice slow think before you type a reply and see if you can come up with any actual reasons why using https would not improve security for almost everybody on DUC? My day job is working in the technology industry, including in the past for Google, I damn well appreciate their push to get everybody, technology luddites included, on https. |
#25
|
|||
|
|||
Re: Avid DUC not secure?
Quote:
Darryl, you care! Great! I don’t! It’s simple. Nothing http or https has helped or hindered any of the work we do in PT or in the industry. AVID has never had a breach anywhere. The possibility and probability are always part of a thorough threat Matrix (I guess my days as Dir. of infoSec for a major airline for 15 years in which the no fly list landed on my desk to process in) comes in handy but doesn’t change my opinion on THIS site. This forum is about PT and PT processes. It’s great you care. There’s your pat on the back. Now...back to writing music. Good day! Sent from my iPhone using Tapatalk
__________________
Mac 8 Core 6,1 - OSX 10.13.6 - 32GB RAM - Pro Tools 2018.10 - 8x8x8+8 ch DA Card (x2) - HD OMNI - ICON D-Control 32 - Sync I/O - Sonnet xMac Pro Server w/HDX x 2, Blackmagic Intensity Pro 4K Protools 2018.10 HD Native in 1 project suite Eristopher Music Last edited by andrej770; 04-09-2019 at 03:53 PM. |
#26
|
||||
|
||||
Re: Avid DUC not secure?
Not a bad idea to weigh the impact in cost or inconvenience when considering increases to security, but based on discussions with our forum host I don't see a valid reason at this point to not implement this change.
__________________
• linkedin •
|
#27
|
|||
|
|||
Re: Avid DUC not secure?
Hooray Jeff. Darryl will be tickled pink.
As soon as that's done, everyone can go back to using the same password they use at their bank. LOL . https saved us again! Sent from my iPhone using Tapatalk
__________________
Mac 8 Core 6,1 - OSX 10.13.6 - 32GB RAM - Pro Tools 2018.10 - 8x8x8+8 ch DA Card (x2) - HD OMNI - ICON D-Control 32 - Sync I/O - Sonnet xMac Pro Server w/HDX x 2, Blackmagic Intensity Pro 4K Protools 2018.10 HD Native in 1 project suite Eristopher Music |
#28
|
|||
|
|||
Re: Avid DUC not secure?
Quote:
But again: not saying this must be the case. It just means your address is in those leaked/breached databases.
__________________
PTHDn 2024.3 (OSX13.6.5), 8x8x8, MacPro 14,8, AJA LHi, SYNC HD, all genlocked via AJA GEN10, 64GB RAM, Xilica Neutrino, Meyersound Acheron |
#29
|
|||
|
|||
Re: Avid DUC not secure?
Quote:
Clicking on the little lock lets you verify the website you are visiting actually IS run by AVID and not someone else.
__________________
PTHDn 2024.3 (OSX13.6.5), 8x8x8, MacPro 14,8, AJA LHi, SYNC HD, all genlocked via AJA GEN10, 64GB RAM, Xilica Neutrino, Meyersound Acheron |
#30
|
|||
|
|||
Re: Avid DUC not secure?
Had an interesting thing just happen about an hour ago. I usually don't put my daw computer online but my other Mac was so slow with some streaming YouTube video I went to my cheesegrater. When I was done with that I decided to browse the DUC. I normally stay logged in to the DUC on both computers but when I came to the daw machine my login was cleared and when I went to login up came a message saying the connection was not secure and had steps to go through to get in here. Yet my other Mac is fine and still logged in to the DUC.
Daw comp runs OSXC 10.13.6 and other Mac (2010 Mini) is running 10.6.8 |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
The best way to secure your ILOK | crizdee | Pro Tools TDM Systems (Mac) | 13 | 02-14-2007 09:12 AM |
"Secure Delivery Plug-in" what is that? | K.B. | 003, Mbox 2, Digi 002, original Mbox, Digi 001 (Win) | 32 | 04-14-2004 07:54 AM |
Warning: iLok site IS NOT secure! | dkrz | 003, Mbox 2, Digi 002, original Mbox, Digi 001 (Mac) | 5 | 11-25-2003 11:16 AM |
Digi Store not secure? | jimlongo | General Discussion | 6 | 02-08-2001 11:25 AM |