|
Avid Pro Audio CommunityHow to Join & Post • Community Terms of Use • Help Us Help YouKnowledge Base Search • Community Search • Learn & Support |
|
#1
|
|||
|
|||
Avid DUC not secure?
Browsers Chrome and Safari are both warning that duc.avid.com is not a secure site. Safari will not allow me to continue the login process but Chrome will let me login (even though there is a bright red NOT SECURE warning in the banner. Apparently there isn't a https route to the site.
|
#2
|
|||
|
|||
Re: Avid DUC not secure?
Quote:
Safari will let me login no problem. What version Safari and what OSX? |
#3
|
||||
|
||||
Re: Avid DUC not secure?
Quote:
Don't panic. It is, as you said, because duc.avid.com does not use the Hypertext Transfer Protocol Secure (https). You do not enter credit card details here in the forum, isn't it? |
#4
|
|||
|
|||
Re: Avid DUC not secure?
It's a free forum run by Avid.
|
#5
|
|||
|
|||
Re: Avid DUC not secure?
Quote:
That's how identities get stolen and misused for worse purposes even when this is "just" a forum. So I do hope AVID will transition the DUC to https sooner than later. Google is slowly banning search results for non-encrypted websites mid term so they won't have a choice anyway ;-) Just be aware that everything you do here is sent across the net in plain text. Including your passwords, "private" messages etc. F.
__________________
PTHDn 2024.3 (OSX13.6.5), 8x8x8, MacPro 14,8, AJA LHi, SYNC HD, all genlocked via AJA GEN10, 64GB RAM, Xilica Neutrino, Meyersound Acheron |
#6
|
|||
|
|||
Re: Avid DUC not secure?
Any entry into a browser is the responsibility of the user (credit card info, home address, dob, SSN, etc.). We've gotten so lazy these days that we want to be placated at every site we go to. Own your own security. HTTPS is only required for a site were secure information is exchanged; this is not one of those sites. ESPN is not secure either. I wonder if we're complaining to them?
__________________
Mac 8 Core 6,1 - OSX 10.13.6 - 32GB RAM - Pro Tools 2018.10 - 8x8x8+8 ch DA Card (x2) - HD OMNI - ICON D-Control 32 - Sync I/O - Sonnet xMac Pro Server w/HDX x 2, Blackmagic Intensity Pro 4K Protools 2018.10 HD Native in 1 project suite Eristopher Music |
#7
|
|||
|
|||
Re: Avid DUC not secure?
The opponents of https here may be underestimating the potential risks involved.
There is just no reason any public (i.e. non toy) website should use open http today.. Https protects users from man in the middle attacks, protects users from easy things like stealing passwords (yes you should not reuse passwords or slight permutations on different services... but people do). Anybody want to guess how many users share passwords across DUC and avid.com and iLok.com? This and other reasons are why companies like Google are pushing for increased adoption of https, and folks have worked to make this all easier for web site owners to deploy. There is just no valid reason why Avid has not implemented https here. If not here, God hope Avid has folks paying attention to security elsewhere. A non-SSL protected user forum associated with corporate website, cloud services, online stores, billing systems, etc, is likely to be an interesting target for a malicious hacker. Oh and folks here with home studios full of valuable equipment... maybe being careful to not share location or other personal information on DUC... it may be possible to grab enough info about those users via a MITM attack to end up locating their studio. Last edited by Darryl Ramm; 03-24-2019 at 12:24 PM. |
#8
|
|||
|
|||
Re: Avid DUC not secure?
Quote:
__________________
PTHDn 2024.3 (OSX13.6.5), 8x8x8, MacPro 14,8, AJA LHi, SYNC HD, all genlocked via AJA GEN10, 64GB RAM, Xilica Neutrino, Meyersound Acheron |
#9
|
|||
|
|||
Re: Avid DUC not secure?
Point taken with regard to phishing sites.
i think the point of this thread is that It’s wise to not enter a password on an unsecure site that is the same as the password one uses on banking or credit card sites. A best practice is to not make it easier for those looking to obtain passwords that they can use to crack IDs. Encrypting data to/from this forum would be a good thing. Best regards, Bob Charest Sent from my iPhone using Tapatalk
__________________
Best Regards, Bob Charest __________________________________________ Macbook Pro Ventura 13.6 Pro Tools 2023.6 Focusrite Clarett 4 Pre, 2018 Mac Mini Sonoma 14.4.1 Protools Studio 2024.3, X32-Rack & RME BabyFace Pro |
#10
|
|||
|
|||
Re: Avid DUC not secure?
Hooray Jeff. Darryl will be tickled pink.
As soon as that's done, everyone can go back to using the same password they use at their bank. LOL . https saved us again! Sent from my iPhone using Tapatalk
__________________
Mac 8 Core 6,1 - OSX 10.13.6 - 32GB RAM - Pro Tools 2018.10 - 8x8x8+8 ch DA Card (x2) - HD OMNI - ICON D-Control 32 - Sync I/O - Sonnet xMac Pro Server w/HDX x 2, Blackmagic Intensity Pro 4K Protools 2018.10 HD Native in 1 project suite Eristopher Music |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
The best way to secure your ILOK | crizdee | Pro Tools TDM Systems (Mac) | 13 | 02-14-2007 09:12 AM |
"Secure Delivery Plug-in" what is that? | K.B. | 003, Mbox 2, Digi 002, original Mbox, Digi 001 (Win) | 32 | 04-14-2004 07:54 AM |
Warning: iLok site IS NOT secure! | dkrz | 003, Mbox 2, Digi 002, original Mbox, Digi 001 (Mac) | 5 | 11-25-2003 11:16 AM |
Digi Store not secure? | jimlongo | General Discussion | 6 | 02-08-2001 11:25 AM |