Open Photography Forums  
HOME FORUMS NEWS FAQ SEARCH

Go Back   Open Photography Forums > OPF Welcome Hall > OPF Look, Feel, and Vibe

OPF Look, Feel, and Vibe Comments & suggestions to the site.

Reply
 
Thread Tools Display Modes
  #31  
Old October 5th, 2018, 02:33 AM
Asher Kelman Asher Kelman is online now
OPF Owner/Editor-in-Chief
 
Join Date: Apr 2006
Posts: 34,568
Default

Quote:
Originally Posted by Jerome Marot View Post
Asher, I really hate to bother you with that problem, but I feel it is really important.

I have began to address this by studying the mechanics of the change.

But I do wonder what protections https brings?

Right now I laboriously check for any spamming from the registrant’s IP address. I look for spammers or dictionary hackers etc. I even search for a phrase they may have used in the registration even in the first several posts. What I fear is the person getting in and copying list of members of OPF and trying to sell them drugs, insurance or whatever. So how does the HTTPS designation help us in such needed security?

Asher
__________________
Follow us on Twitter at @opfweb

Our purpose is getting to an impressive photograph. So we encourage browsing and then feedback. Consider a link to your galleries annotated, C&C welcomed. Images posted within OPF are assumed to be for Comment & Critique, unless otherwise designated.
Reply With Quote
  #32  
Old October 5th, 2018, 06:30 AM
Robert Watcher Robert Watcher is offline
Senior Member
 
Join Date: Feb 2008
Location: Xela, Guatemala / Ontario, Canada
Posts: 2,161
Default

Quote:
Originally Posted by Asher Kelman View Post
I have began to address this by studying the mechanics of the change.

But I do wonder what protections https brings?

Right now I laboriously check for any spamming from the registrant’s IP address. I look for spammers or dictionary hackers etc. I even search for a phrase they may have used in the registration even in the first several posts. What I fear is the person getting in and copying list of members of OPF and trying to sell them drugs, insurance or whatever. So how does the HTTPS designation help us in such needed security?

Asher
This may help Asher - https://www.vbulletin.com/forum/arti...forum-to-https


——-
Reply With Quote
  #33  
Old October 5th, 2018, 07:39 AM
Asher Kelman Asher Kelman is online now
OPF Owner/Editor-in-Chief
 
Join Date: Apr 2006
Posts: 34,568
Default

Quote:
Originally Posted by Robert Watcher View Post
This is a wonderful link, Robert, thanks!

So now we have a major issue: images that are from http sites. These will get our site labeled as “unsafe”. 😢

So we need to either block uploading of silica images, (as explained by links in your above reference paper), or better still I need to attached all images and store them in OPF.

So can anyone write a program that will plough through OPF, download each successive image to a gallery and then embed that image back on the page?

I will pay for that a reasonable fee!

Any ideas who can do that?

Asher
__________________
Follow us on Twitter at @opfweb

Our purpose is getting to an impressive photograph. So we encourage browsing and then feedback. Consider a link to your galleries annotated, C&C welcomed. Images posted within OPF are assumed to be for Comment & Critique, unless otherwise designated.
Reply With Quote
  #34  
Old October 5th, 2018, 08:33 AM
Asher Kelman Asher Kelman is online now
OPF Owner/Editor-in-Chief
 
Join Date: Apr 2006
Posts: 34,568
Default

Can anyone refine my request below so it would be understood best by a programmer I could get to make an app to convert all linked images to ones stored on OPF server:


“Write an app to harvest linked image files to a catalog, organized by photographer) in vbulletin 3 and upgrades and then replace existing link, (for each posted image), to the new catalog”


Asher
__________________
Follow us on Twitter at @opfweb

Our purpose is getting to an impressive photograph. So we encourage browsing and then feedback. Consider a link to your galleries annotated, C&C welcomed. Images posted within OPF are assumed to be for Comment & Critique, unless otherwise designated.
Reply With Quote
  #35  
Old October 5th, 2018, 08:41 AM
Robert Watcher Robert Watcher is offline
Senior Member
 
Join Date: Feb 2008
Location: Xela, Guatemala / Ontario, Canada
Posts: 2,161
Default

Quote:
Originally Posted by Asher Kelman View Post
Can anyone refine my request below so it would be understood best by a programmer I could get to make an app to convert all linked images to ones stored on OPF server:


“Write an app to harvest linked image files to a catalog, organized by photographer) in vbulletin 3 and upgrades and then replace existing link, (for each posted image), to the new catalog”


Asher
I noticed this solution. Not sure whether it work with this version of vbulletin or not. https://www.vbulletin.org/forum/show...95#post2589795

While your suggested solution sounds viable, I think you would get into complications related to your right to store these copyrighted images on your server without express permission from the owner. While many might not mind, I am aware that photographers often store their embedded files on their own server or choice of server, so they can maintain control of the images. Just something to think about.

——-
Reply With Quote
  #36  
Old October 5th, 2018, 08:49 AM
Robert Watcher Robert Watcher is offline
Senior Member
 
Join Date: Feb 2008
Location: Xela, Guatemala / Ontario, Canada
Posts: 2,161
Default

It appears like the Mixed Content Block may be an issue with transitioning your forum over to https. At the least it won’t be quite as easy as a regular website.

I got into a similar issue last year when I built a couple of PWA web apps for clients, that linked to a currency converter API as well as a weather API that were not being served from https. They were both free services. PWA’s have to be delivered over https which requires all scripts and files delivered from other sources to come from https as well - so I had no choice but to find different secure API’s To provide me with the same functionality for my apps.

This doesn’t help your situation, but letting you know that I understand the predicament of making such a change on the forum.

——
Reply With Quote
  #37  
Old October 5th, 2018, 01:43 PM
Jerome Marot Jerome Marot is offline
Senior Member
 
Join Date: Jan 2011
Location: Munich, Germany.
Posts: 3,750
Default

Why make things more complicated than it needs be?

The first and most serious problem is that login and its associated password should be transmitted over https. The second problem is that the vbulletin version this forum uses is too old.

Just get https installed first. That should be easy and will solve the password problem.

Then try a recent version of vbulletin. That is already a hand full of work. Maybe you try it on an alternative web site first: openphotographyforums-test.com

When that works, you can deal with the image storage problem. The more recent version of vbulletin should make that work easier.
Reply With Quote
  #38  
Old October 5th, 2018, 02:42 PM
Asher Kelman Asher Kelman is online now
OPF Owner/Editor-in-Chief
 
Join Date: Apr 2006
Posts: 34,568
Default

Hi Jerome,

I already paid vBulletin for the upgrade but ran into issues that the entire site is customized by Nicolas Claris' assistant who was severely injured in a motor vehicle accident and so is unavailable. Otherwise we would have been upgraded ages ago.

I understand now that password transmission is your key concern. I would hope then that folk do not use one password for every social network.

Upgrade to vBulletin 5 is not the barrier as 3 works fine except for Galleries and that can be done in this version. It is reported that the version 4 onwards on not as robust as version 3. However, I am only reading what the "experts" write.


Does anyone know which of the usual image storage serving platforms we use are already Google-compliant and since how long. Then I could estimate what the impact in unavailable images would be if we converted to https right away.


I will make this my top priority but do value and appreciate further feedback.

Asher
__________________
Follow us on Twitter at @opfweb

Our purpose is getting to an impressive photograph. So we encourage browsing and then feedback. Consider a link to your galleries annotated, C&C welcomed. Images posted within OPF are assumed to be for Comment & Critique, unless otherwise designated.
Reply With Quote
  #39  
Old October 5th, 2018, 04:28 PM
Doug Kerr Doug Kerr is online now
Senior Member
 
Join Date: May 2006
Location: Alamogordo, New Mexico, USA
Posts: 8,517
Default

Hi, Asher,

My images are harbored on my personal site, provided by AT&T Web Hosting. It does not use the HTTPS protocol. Or perhaps I have not arranged for it to do so for me.

I will look into this.

Best regards,

Doug
Reply With Quote
  #40  
Old October 5th, 2018, 11:30 PM
Jerome Marot Jerome Marot is offline
Senior Member
 
Join Date: Jan 2011
Location: Munich, Germany.
Posts: 3,750
Default

Flickr uses https.

Also: I checked with chrome on another https site with images unencrypted. You don't get a warning unless you explicitly ask chrome to check the connection. I would not consider it a priority to solve that image problem, especially for older images.

Well I could test it out!

I will first update my own FTP site with my provider.

Thanks,

Asher
Reply With Quote
  #41  
Old October 6th, 2018, 08:49 AM
Doug Kerr Doug Kerr is online now
Senior Member
 
Join Date: May 2006
Location: Alamogordo, New Mexico, USA
Posts: 8,517
Default

This issue brings new interest to the prospect that the OPF forum system could itself harbor images posted by members. I enjoy this capability on several other forums in which I participate. (Well, one of those is a forum in which I used to participate, but I was thrown off it by the vorsitzer for being a troublemaker. Can you imagine that?)

I have no idea, Asher, what the burden would be to you putting into play such an arrangement, but I hope that you would give it another serious look.

I realize that adopting an HTTPS basis for OPF, even with such a facility in place, with the implications we have been informed of as to links with external media on a non-HTPPS site, would raise the spectre of grave disruption of the existing oeuvre.

Best regards,

Doug
Reply With Quote
  #42  
Old October 6th, 2018, 08:55 AM
Doug Kerr Doug Kerr is online now
Senior Member
 
Join Date: May 2006
Location: Alamogordo, New Mexico, USA
Posts: 8,517
Default

Hi, Asher,

Quote:
Originally Posted by Asher Kelman View Post

I understand now that password transmission is your key concern. I would hope then that folk do not use one password for every social network.
It has never been my practice to use a common password for different forums and other sites.

Best regards,

Doug
Reply With Quote
  #43  
Old October 6th, 2018, 10:31 AM
Asher Kelman Asher Kelman is online now
OPF Owner/Editor-in-Chief
 
Join Date: Apr 2006
Posts: 34,568
Default

Quote:
Originally Posted by Doug Kerr View Post
This issue brings new interest to the prospect that the OPF forum system could itself harbor images posted by members. I enjoy this capability on several other forums in which I participate. (Well, one of those is a forum in which I used to participate, but I was thrown off it by the vorsitzer for being a troublemaker. Can you imagine that?)

I have no idea, Asher, what the burden would be to you putting into play such an arrangement, but I hope that you would give it another serious look.

I realize that adopting an HTTPS basis for OPF, even with such a facility in place, with the implications we have been informed of as to links with external media on a non-HTPPS site, would raise the spectre of grave disruption of the existing oeuvre.

Best regards,

Doug

That is why I want to get someone to write and app that


  • Will crawl through OPF: download all the images and place them in the photographer's gallery here for free. We would automatically make a link for the file in each such post.
  • Going forward: all pictures would simply be uploaded here.
  • Galleries: Could be a store where folk, (if they wish), license images or sell prints.



Asher
__________________
Follow us on Twitter at @opfweb

Our purpose is getting to an impressive photograph. So we encourage browsing and then feedback. Consider a link to your galleries annotated, C&C welcomed. Images posted within OPF are assumed to be for Comment & Critique, unless otherwise designated.
Reply With Quote
  #44  
Old October 6th, 2018, 11:40 AM
Jerome Marot Jerome Marot is offline
Senior Member
 
Join Date: Jan 2011
Location: Munich, Germany.
Posts: 3,750
Default

Quote:
Originally Posted by Doug Kerr View Post
I realize that adopting an HTTPS basis for OPF, even with such a facility in place, with the implications we have been informed of as to links with external media on a non-HTPPS site, would raise the spectre of grave disruption of the existing oeuvre.
What are you talking about? A forum accessible under https only with images linked on http is not a problem. I checked using chrome this very morning. It works, the user really has to get out of their way to check whether there is a problem and, if you ask for a message, the message is that the images are not safe but the web page is.
Reply With Quote
  #45  
Old October 6th, 2018, 01:12 PM
Asher Kelman Asher Kelman is online now
OPF Owner/Editor-in-Chief
 
Join Date: Apr 2006
Posts: 34,568
Default

Jerome,

Sorry, I don't quite follow, except you imply there is no big issue for us to worry about.

What do you mean by "if you ask for a message"? From what or whom?

Will the http-linked images appear normally? Will Google under some circumstances you know about ding us as "unsafe"?

Why do others recommend various state gems to deal with this if there is no practical problem?

I am just learning from everyone else and the links that have been provided which suggest extra actions beyond not worrying!

Asher
__________________
Follow us on Twitter at @opfweb

Our purpose is getting to an impressive photograph. So we encourage browsing and then feedback. Consider a link to your galleries annotated, C&C welcomed. Images posted within OPF are assumed to be for Comment & Critique, unless otherwise designated.
Reply With Quote
  #46  
Old October 6th, 2018, 01:32 PM
Doug Kerr Doug Kerr is online now
Senior Member
 
Join Date: May 2006
Location: Alamogordo, New Mexico, USA
Posts: 8,517
Default

Hi, Jerome,

Quote:
Originally Posted by Jerome Marot View Post
What are you talking about? A forum accessible under https only with images linked on http is not a problem. I checked using chrome this very morning. It works, the user really has to get out of their way to check whether there is a problem and, if you ask for a message, the message is that the images are not safe but the web page is.
I am not in any way an expert on this.

I thought I had seen earlier in this thread that there would be some scenario in which when a forum working on an HTTPS protocol basis, resources on sites operating on an HTTP basis (notably, images harbored on such a site) might not be accessible. Perhaps the intimation is that it would be the browser that would decline to do that.

Or perhaps that discussion pertained to an altogether different scenario, where the "main" site itself (e.g., a forum site) somehow had to retrieve certain resources, which it would refuse to do if they were on sites not prepared to operate with the HTTPS protocol.

Of course, that is not our current situation - the OPF software does not retrieve the images embedded in forum posts - that is done by the individual viewer's browser.

So I should perhaps not have made that comment.

Best regards,

Doug
Reply With Quote
  #47  
Old October 7th, 2018, 12:55 AM
Jerome Marot Jerome Marot is offline
Senior Member
 
Join Date: Jan 2011
Location: Munich, Germany.
Posts: 3,750
Default

Quote:
Originally Posted by Asher Kelman View Post
Sorry, I don't quite follow, except you imply there is no big issue for us to worry about.
Yes.

Quote:
What do you mean by "if you ask for a message"? From what or whom?
You ask the browser by clicking the symbol left of the site address.

Quote:
Will the http-linked images appear normally?
Yes.

Quote:
Will Google under some circumstances you know about ding us as "unsafe"?

Why do others recommend various state gems to deal with this if there is no practical problem?
I can't answer these 2 questions because they imply predicting future events beyond my control.

Quote:
I am just learning from everyone else and the links that have been provided which suggest extra actions beyond not worrying!
In some cases extra actions may be needed.

Let me describe what happens when connecting to a https web site with http images with the browsers I could test on my Macbook:

-Safari: nothing happens, site displays normally.

-Chrome: site displays normally with a small gray symbol left to the url. Clicking on that symbol explains "Your connection to this site is not fully secure. Attackers might be able to see the images you're looking at on this site and trick you by modifying them" as explained here.

-Firefox: site displays normally with an orange symbol left to the url. Clicking on that symbol explains basically the same as under Chrome, see here.
Reply With Quote
  #48  
Old October 7th, 2018, 01:41 AM
Asher Kelman Asher Kelman is online now
OPF Owner/Editor-in-Chief
 
Join Date: Apr 2006
Posts: 34,568
Default

Thanks, Jerome for your patience and explanations.

I believe then I can go forward with converting to a more secure website.

I will also make an effort to get someone to help me with the IT.

If there is anyone who knows PHP who wishes to volunteer, let me know.

Asher
__________________
Follow us on Twitter at @opfweb

Our purpose is getting to an impressive photograph. So we encourage browsing and then feedback. Consider a link to your galleries annotated, C&C welcomed. Images posted within OPF are assumed to be for Comment & Critique, unless otherwise designated.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
On the move Robert Watcher Photojournalism - Street - Documentary 2 August 17th, 2016 03:39 PM
Raccoon on the move Dwayne Oakes Wildlife 6 July 24th, 2009 06:21 AM
Move that body Frank Doorhof Fashion - Glamour - Product - Advertising 2 August 4th, 2008 01:43 AM
Move up to MF and LF - Step 1 Yaron Lenard Medium Format & Large Format Cameras 7 June 27th, 2008 10:32 AM


All times are GMT -7. The time now is 12:54 PM.


Posting images or text grants license to OPF, yet © of such remain with its creator. Still, all assembled discussion © 2006-2017 Asher Kelman (all rights reserved) Posts with new theme or unusual image might be moved/copied to a new thread!