Simon.Gardiner wrote:I'd say that was an issue with the security of the admin area(s) rather than https. Also, there should probably be a regular site backup going on anyway to cater for equipment failures, among other things.
This is absolutely correct, Simon. HTTPS won't prevent the site being hacked and the site owner has to take other precautions against this.
For the benefit of others who think there is no requirement for HTTPS to be added, think again please. This is not about the site or its content.
The HTTPS and the site certificate that supports this are there to protect us and information we pass to and from the site. It is very important that this is set up correctly so you know you can trust that this is the "real" owners forum and not a spoof site. At the moment you can't tell, so you might be caught by a MitM (Man in the Middle) attack which is designed to steal your info or land malware on your computer. You think you are on the real forum but in fact it may not be, or at least not for the first page that delivers the payload and compromises you before sending you on to the real site.
It happens more frequently than you think and the fact that AV may not even detect the event means you may never know. They aren't just after the password you reuse here and everywhere else (banking sites), they are after selling your details on to others. Data is monetizable your interest in motorcycles may just be what some lobby group needs to persuade a set of voters to make a bogus decision as in Brexit and US election campaigns.
You think you are immune? Think again!
I have to say that risk here is low because there are no adverts and not a huge number of users to leverage but the lack of a proper site certificate will attract low level hackers who see an easy target. The forum people should sort this out because its easy and it acts as a deterrent. Also, you will soon see newer releases of web browsers refusing to open sites like this.
Sorry guys, this is the second time in a row that I have posted about something which has nothing to do with an Ariel. I promise to stick to the main purpose next time!