NEWS: Forum Update week of Sept 24th-28th, Downtimes

This forum is the ideal place for all discussion relating to X4. You will also find additional information from developers here.

Moderator: Moderators for English X Forum

Turmfalke2
Posts: 39
Joined: Sun, 16. Dec 12, 21:15

Post by Turmfalke2 » Sat, 22. Sep 18, 12:59

CBJ wrote: The forum has been set to default to https for quite some time. Are you sure you're not just using an old bookmark?
Even if I were to use an old bookmark I would expect a 301 instead of a 200.

Code: Select all

$ curl -I http://forum.egosoft.com
HTTP/1.1 200 OK
Date: Sat, 22 Sep 2018 10:56:52 GMT
Server: Apache/2.4.10 (Debian)
[cookie data removed]
Cache-Control: no-cache, pre-check=0, post-check=0
Expires: 0
Pragma: no-cache
Vary: Accept-Encoding,User-Agent
Content-Type: text/html
compared to amazon.com

Code: Select all

 $ curl -I http://amazon.com
HTTP/1.1 301 Moved Permanently
Server: Server
Date: Sat, 22 Sep 2018 10:57:56 GMT
Content-Type: text/html
Content-Length: 179
Connection: keep-alive
Location: https://amazon.com/
[edit by BurnIt!] cookie data removed

User avatar
BurnIt!
EGOSOFT
EGOSOFT
Posts: 5066
Joined: Wed, 6. Nov 02, 20:31
x4

Post by BurnIt! » Sat, 22. Sep 18, 14:42

First: please make sure you do NOT post your cookie information anywhere. I have edited the data out of your post.


We do not have a permanent redirect to https active at this time, that is correct, this was set up intentionally but may change in the future.

For now http access is still allowed but HTTP Strict Transport Security is enabled.

The message regarding the encryption is indeed not entirely accurate as we do in fact not employ SSL, but TLS (1.2).
BurnIt!
In der Ruhe liegt die Kraft. / In peace lies strength.

Turmfalke2
Posts: 39
Joined: Sun, 16. Dec 12, 21:15

Post by Turmfalke2 » Sat, 22. Sep 18, 15:44

Wait what..? That wasn't my cookie, at least not one that contains data worth protecting.

I didn't provide any cookies in my http request, so it is just your page generating a new cookie without being given any login information or such. The better question would be, why would it even try to set a cookie in that situation? There is nothing worth saving.

While we are it, you might also want to rework your cookie policy.
www.egosoft.com wrote: This website uses cookies to improve user experience. By using our website you consent to all cookies in accordance with our Cookie Policy.

"By using our website you consent" is a direct violation of gdpr. ( http://www.privacy-regulation.eu/en/recital-32-GDPR.htm & http://www.privacy-regulation.eu/en/art ... s-GDPR.htm (11))

A5PECT
Posts: 6078
Joined: Sun, 3. Sep 06, 02:31
x4

Post by A5PECT » Sat, 22. Sep 18, 18:00

Welp, time to pay our last respects to the old forum.

<Split and merged from an unrelated thread. Alan Phipps>
Admitting you have a problem is the first step in figuring out how to make it worse.

User avatar
Miniding
Posts: 937
Joined: Fri, 14. Dec 07, 11:33
x4

Post by Miniding » Sat, 22. Sep 18, 21:24

@ Turmfalke2: You seem to be well informed about GDPR!!! :lol:
Of course as a European company, Ego should be Following the rule too.

But we are on a forum, not on any Bank website… In fact, the only personal information Ego's got from us is our mail address, isn"t it?

I Don't mind what info can be taken from Ego's cookies… What can be so important? What I say here, I totally assume!!!

:D :D

Edit : Thanks for the clarifying edit of my post "I Don't know who" :D :D
Miniding
X3 Reunion - X3 Terran Conflict - X3 Albion Prelude - X Rebirth - X4 CE...

Fanchen
Posts: 1879
Joined: Wed, 31. May 06, 21:42
x4

Post by Fanchen » Sat, 22. Sep 18, 22:15

@Miniding
There are more things than just the mail address. For example, according to the GDPR, IP addresses are personal data. Accessing any website also transmits information like your browser and operating system versions. Websites might analyse at what times you access them (though I suspect Egosoft doesn't. ;))

Cookies can store your session data, and that information might allow others to access your account until you log off. Most people don't want others to read their messages or write posts under their name.

User avatar
Tamina
Moderator (Deutsch)
Moderator (Deutsch)
Posts: 4543
Joined: Sun, 26. Jan 14, 09:56

Post by Tamina » Sat, 22. Sep 18, 22:38

Can't login anymore, I get an error message, the session times out in seconds. I guess this is related to the forum update?

@Fanchen
Despite this being a problem of Egosoft and not ours, do you know this by fact?
(Except for the IPs: I know Google has to anonymize IPs of German residents.)

Code: Select all

Und wenn ein Forenbösewicht, was Ungezogenes spricht, dann hol' ich meinen Kaktus und der sticht sticht sticht.
  /l、 
゙(゚、 。 7 
 l、゙ ~ヽ   / 
 じしf_, )ノ 

Fanchen
Posts: 1879
Joined: Wed, 31. May 06, 21:42
x4

Post by Fanchen » Sat, 22. Sep 18, 22:44

@Tamina
What exactly are you referring to, the browser/OS versions? That is done by the User Agent string which you can check on website like this one. And yes, given that websites can identify you (for example by your IP address or, even easier, because you are logged in) they could check at what time you are using their service.

User avatar
Tamina
Moderator (Deutsch)
Moderator (Deutsch)
Posts: 4543
Joined: Sun, 26. Jan 14, 09:56

Post by Tamina » Sat, 22. Sep 18, 22:55

I hope this is still somewhat ontopic and my last post on this matter.
To clarify the question: If the information you listed fall into the declaration of "personal information" in the GDPR by fact.
(Despite that they could be potentially used to cross-track a single person with enough given other information.)

Code: Select all

Und wenn ein Forenbösewicht, was Ungezogenes spricht, dann hol' ich meinen Kaktus und der sticht sticht sticht.
  /l、 
゙(゚、 。 7 
 l、゙ ~ヽ   / 
 じしf_, )ノ 

User avatar
StoneLegionYT
Posts: 1428
Joined: Fri, 4. Nov 05, 01:18
x4

Post by StoneLegionYT » Sat, 22. Sep 18, 23:05

Keep in mind just using basic google analytics you need to have a Privacy Policy.

E Co.
Posts: 1
Joined: Mon, 17. Sep 18, 01:46
xr

Post by E Co. » Sun, 23. Sep 18, 05:10

I boo and hiss in protest. I like like the look of the forum, I don't want it to look like every site out there, with their fancy-schmancy animated sliding buttons and their newfangled "mobile" friendliness. :evil: President's End will look like a joke compared to the fury that I shall bring upon the new forum!
Spoiler
Show
As someone who mostly uses mobile, this update is appreciated, but I'll miss the old look

User avatar
Miniding
Posts: 937
Joined: Fri, 14. Dec 07, 11:33
x4

Post by Miniding » Sun, 23. Sep 18, 10:08

My IP adress, as lots of FAI do this way, is changing over time like 2-3 times a Week. Beside, lot of people have some "internet security" feature in their system (also hide for most site your real adress…) abd for the record, I Always disconnect my session from site with logins so nobody can be me but ME! :) This is just good practice...

If I may… GDPR is a giant joke! In France, for exemple, we had a law named "Informatique et Liberté" wich already, about the end of the 90s, forbided storage of personnal informations by peer (Website…)

The problem is not to store personal infos but how to use them!!! That's the law we all need!! I know what some will tell me "It's for analysis of use…" Ok While it's for that purpose, I'm Ok with that:
GDPR is just a step forward before taxing BIG DATA enterprises that make lots of money with selling OUR personnal infos. As lots of law, it's just for states to have basis to future taxes ! We had a law for website not to store personnal informations that was "abrogé" and 20 years after that, they care about OUR privacy?!!! What a big Joke!

Websites and other services Don't need any personnal info to be stored to identify you like cookies or such… It's just convinient.

REALLY Sorry about the BIG off topic but I can't stand reading about this GDPR that oblige workers to be responsible of the personnal datas of their colleags. It's a totally absurde law to me! And by the way, no type of datas are stamped "Personnal" by GDPR, it's each company that decides the peremiter of personnal datas.

Sorry again but I fell better now even if some will take it for a conspiracyhood post… It's not.

:oops:
Miniding
X3 Reunion - X3 Terran Conflict - X3 Albion Prelude - X Rebirth - X4 CE...

Solflame
Posts: 214
Joined: Fri, 31. Aug 18, 22:30
x4

Post by Solflame » Sun, 23. Sep 18, 20:10

You'd be surprised what you can find out w/ an IP Address and some sleuthing.

User avatar
Miniding
Posts: 937
Joined: Fri, 14. Dec 07, 11:33
x4

Post by Miniding » Sun, 23. Sep 18, 23:30

I'm aware of that... but I do good practices to avoid it...
Miniding
X3 Reunion - X3 Terran Conflict - X3 Albion Prelude - X Rebirth - X4 CE...

User avatar
ezra-r
Posts: 3420
Joined: Fri, 14. Oct 05, 21:04
x4

Post by ezra-r » Mon, 24. Sep 18, 00:35

missing person: Little Susy? :lol:

Is that like Station announcements or just coincidence?

PS: The screenshot latest browser tab.

pjknibbs
Posts: 41359
Joined: Wed, 6. Nov 02, 20:31
x4

Post by pjknibbs » Mon, 24. Sep 18, 04:36

ezra-r wrote:missing person: Little Susy? :lol:

Is that like Station announcements or just coincidence?

PS: The screenshot latest browser tab.
Pretty sure all those tabs are in-jokes. You've got one about landing on planets, and another about SpaceX sending our artists *somewhere* (presumably into space so they can draw it better)...

DavidGW
Posts: 345
Joined: Sat, 18. May 13, 06:40
x4

Post by DavidGW » Mon, 24. Sep 18, 04:50

pjknibbs wrote:Pretty sure all those tabs are in-jokes. You've got one about landing on planets, and another about SpaceX sending our artists *somewhere* (presumably into space so they can draw it better)...
But no joke about multiplayer. Therefore, logically, we can all assume that X4 will be an exclusively online, multiplayer title.

DaMuncha
Posts: 1394
Joined: Mon, 1. Nov 10, 10:00
x4

Post by DaMuncha » Mon, 24. Sep 18, 04:57

pjknibbs wrote:
ezra-r wrote:missing person: Little Susy? :lol:

Is that like Station announcements or just coincidence?

PS: The screenshot latest browser tab.
Pretty sure all those tabs are in-jokes. You've got one about landing on planets, and another about SpaceX sending our artists *somewhere* (presumably into space so they can draw it better)...
There was also a header about HL3 being released after 900 years.

pjknibbs
Posts: 41359
Joined: Wed, 6. Nov 02, 20:31
x4

Post by pjknibbs » Mon, 24. Sep 18, 08:25

DaMuncha wrote: There was also a header about HL3 being released after 900 years.
Is that on the German one, because I don't see it on the English screenshot?

muppetts
Posts: 7180
Joined: Fri, 10. Oct 03, 13:50
x3tc

Post by muppetts » Mon, 24. Sep 18, 10:29

Yea!
VURT The only Feathers to Fly With......

Post Reply

Return to “X4: Foundations”