Someone remind me....

Message boards : Questions and problems : Someone remind me....
Message board moderation

To post messages, you must log in.

AuthorMessage
Profile Ageless
Volunteer moderator
Project administrator
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 12491
Netherlands
Message 83689 - Posted: 8 Dec 2017, 10:24:45 UTC

Who can tell me why we can't link to World Community Grid from users' account pages, where it shows links to all the projects that user participates in. For example: https://setiathome.berkeley.edu/show_user.php?userid=7803901

Was this because WCG always used HTTPS and the other projects didn't?
Or is it because WCG uses the user name as the unique identifier, and the other projects use the email address as the unique identifier?
Or does it have another reason?

I asked BOINC and WCG admins, but haven't received an answer yet.
Jord
Please do not private message me for tech support. Use the forums for that. Tech PMs will be ignored.

quote: "Isn't the best defense always a good attack?"
ID: 83689 · Report as offensive     Reply Quote
SekeRob
Volunteer tester
Help desk expert

Send message
Joined: 25 Aug 06
Posts: 1596
Message 83691 - Posted: 8 Dec 2017, 11:15:19 UTC - in response to Message 83689.  
Last modified: 8 Dec 2017, 11:24:22 UTC

https connecting to WCG has ALWAYS been required, from day 1 at least from when BOINC client was adopted. FAICR, there was even redirect from http to https during the sign-up / attach process, which has had a history of failing. Do the 3rd party AMs enforce https?

Whilst, noted in BOINC github checkins, that a code contributor has made a number of changes where http calls were changed to https.

Requirement: Strongly probable this because of large account contributors from colleges, institutions, corporations... you're dealing with a deep integration with the IBM computing/hosting centers and network, security first! In that, do the 3rd party AMs enforce https?

Recently posted a query there that asked about signing in with the authenticator key, such as for account recovery. That is not enabled. Why... don't know, nor any response. The help says something along the lines of "if you can't recover your account, use contact us".
Coelum Non Animum Mutant, Qui Trans Mare Currunt
ID: 83691 · Report as offensive     Reply Quote
Profile Ageless
Volunteer moderator
Project administrator
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 12491
Netherlands
Message 83696 - Posted: 8 Dec 2017, 15:06:06 UTC - in response to Message 83691.  

Thanks for that. But do you mean WCG doesn't have a link in there because it doesn't work with account managers? Or that it always was a problem with HTTPS vs HTTP?

As far as I know, AMs follow what the project wants, and while projects may use HTTPS for their websites now, that doesn't mean their scheduler contact is via HTTPS.

As for the authenticator, if you see that happening at a project, that's because David is doing away with the authenticator and setting up a new way of logging in. More about that pretty soon.
Jord
Please do not private message me for tech support. Use the forums for that. Tech PMs will be ignored.

quote: "Isn't the best defense always a good attack?"
ID: 83696 · Report as offensive     Reply Quote
Juha
Volunteer developer
Volunteer tester
Help desk expert

Send message
Joined: 20 Nov 12
Posts: 737
Finland
Message 83702 - Posted: 8 Dec 2017, 17:50:02 UTC - in response to Message 83696.  

Commit c6ee2edf:

David  29 Dec 2006
    - user web: add project list to private use page also;
        sort projects by descending avg credit;
        don't link to user page on WCG (they don't have them)
ID: 83702 · Report as offensive     Reply Quote
Profile Ageless
Volunteer moderator
Project administrator
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 12491
Netherlands
Message 83704 - Posted: 8 Dec 2017, 18:55:17 UTC - in response to Message 83702.  

Thank you. :)
Jord
Please do not private message me for tech support. Use the forums for that. Tech PMs will be ignored.

quote: "Isn't the best defense always a good attack?"
ID: 83704 · Report as offensive     Reply Quote

Message boards : Questions and problems : Someone remind me....

Copyright © 2018 University of California. Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation.