Update: Cloudflare service has been successfully deployed and https is from now on enforced, insecure http is now forcefully redirected to secure communication.
It appears authentication password for Ember forums is currently going through potentially insecure channels in plain text which can be stolen in transit.
Risks:
Mild annoyance: Member loses access to account until mods help him restore it.
Major threat: Member is using same password here as everywhere else so somebody snatching the password while in transit can cascade to loosing access to his email account and then other services (would also defeat email two-way authentication - not that it matters much at this point
).
Solution:
It appears authentication password for Ember forums is currently going through potentially insecure channels in plain text which can be stolen in transit.
Risks:
Mild annoyance: Member loses access to account until mods help him restore it.
Major threat: Member is using same password here as everywhere else so somebody snatching the password while in transit can cascade to loosing access to his email account and then other services (would also defeat email two-way authentication - not that it matters much at this point
).Solution:
- Obtain SSL certificate
- Pros: Easy to maintain and setup
- Cons: Costs money (quite enough with wildcard cert)
- Move to CloudFlare reverse proxy
- Pros: FREE, Fast/Easy to setup, TLS communication, very little maintenance, DDOS protection, Content delivery network, saves bandwidth
- Cons: None that I can think of (I'm using it myself).
- Implement Let's Encrypt certificates
- Pros: FREE, automated, open, backed and sponsored by many major companies
- Cons: Can be difficult to setup, certificate needs to be reissued every 3 months manually if automation isn't implemented.
Last edited:
Well folks, here we are. Thanks to your dedicated crowdfunding efforts, we now have a place to call home for Ember!
For those of you unfamiliar with Ember, its a fan-funded revival of the original goals and beta of Firefall, as lead by Mark Kern, creator of Firefall and former team lead for vanilla WoW. Er, that's me...talking about myself in 3rd person. But you get the idea.
The game changed dramatically after I left and became much more of a traditional MMO at launch. Many fans wanted to see Firefall stay true to its original vision, and that's where this all started.
I launched a petition on change.org to gauge interest, and to date we've received over 1,800 signatures to remake Firefall (called Ember). At some point, fans wanted forums and a website home for the growing Ember project. We did a fundraiser on IndieGoGo and, to our shock, exceeded 580% of our funding goals!
We decided to use the extra money to develop Ember further, creating new concept art for the player frame, orthographics for the T.H.M.P.R. mech, and also concept the alien enemy species that will serve as humanity's opposition in the game. We'll post these update here on our new forums, as well as our upcoming product page.
But first, we promised a website and forums for Ember, to help promote the game and garner more signatures and build more demand. This is it, delivered on time despite me injuring my back badly over the weekend. I didn't want to let that stop me from delivering on a promise. In addition, we plan a simple product website that will explain more of the game and host longer updates on its progress. That should be up shortly as well.
So thank you, once again, for helping Ember come alive as a project. It should be very interesting to see where we go from here!
- Mark Kern
For those of you unfamiliar with Ember, its a fan-funded revival of the original goals and beta of Firefall, as lead by Mark Kern, creator of Firefall and former team lead for vanilla WoW. Er, that's me...talking about myself in 3rd person. But you get the idea.
The game changed dramatically after I left and became much more of a traditional MMO at launch. Many fans wanted to see Firefall stay true to its original vision, and that's where this all started.
I launched a petition on change.org to gauge interest, and to date we've received over 1,800 signatures to remake Firefall (called Ember). At some point, fans wanted forums and a website home for the growing Ember project. We did a fundraiser on IndieGoGo and, to our shock, exceeded 580% of our funding goals!
We decided to use the extra money to develop Ember further, creating new concept art for the player frame, orthographics for the T.H.M.P.R. mech, and also concept the alien enemy species that will serve as humanity's opposition in the game. We'll post these update here on our new forums, as well as our upcoming product page.
But first, we promised a website and forums for Ember, to help promote the game and garner more signatures and build more demand. This is it, delivered on time despite me injuring my back badly over the weekend. I didn't want to let that stop me from delivering on a promise. In addition, we plan a simple product website that will explain more of the game and host longer updates on its progress. That should be up shortly as well.
So thank you, once again, for helping Ember come alive as a project. It should be very interesting to see where we go from here!
- Mark Kern
