Cpaptalk.com vs Apneaboard.com

prodigyplace wrote: ↑

Sun Aug 05, 2018 12:14 pm

Except Supplier #1 is cpap.com, not cpaptalk.com. There is no way to reference cpaptalk or cpaptalk.com over on ApnneaBoard..

Apologies - I was under the impression the objection "over there" was due to cpaptalk.com being affiliated with and/or hosted by cpap.com.

Thanks,
-JD

JayDee wrote: ↑

Sun Aug 05, 2018 2:23 pm

noise wrote: ↑

Sun Aug 05, 2018 12:14 pm

Except Supplier #1 is cpap.com, not cpaptalk.com. There is no way to reference cpaptalk or cpaptalk.com over on ApnneaBoard..

Apologies - I was under the impression the objection "over there" was due to cpaptalk.com being affiliated with and/or hosted by cpap.com.

Thanks,
-JD

No, you're completely right, and what you said made perfect sense, nothing to apologize for, other than making a comment too clever for some people

One more difference about CPAPTalk vs ApneaBoard.
On CPAPTalk the login page is securely encrypted with an https certificate.
The usernames and passwords whim logging in to ApneaBoard are sent across the Internet without any encryption. They even have an Admin sticky trying to say their site is secure without any certificate.

In my opinion they are not worth risking identity theft.

prodigyplace wrote: ↑

Sat Aug 11, 2018 4:53 am

One more difference about CPAPTalk vs ApneaBoard.
On CPAPTalk the login page is securely encrypted with an https certificate.
The usernames and passwords whim logging in to ApneaBoard are sent across the Internet without any encryption. They even have an Admin sticky trying to say their site is secure without any certificate.

In my opinion they are not worth risking identity theft.

I created accounts at both. I've done some reading over there, but haven't participated. This post reminded me - when I created an account, my forum name (djams) was taken. So, if you're browsing around over there, just know it isn't me. I had to get really creative and came up with djams1 for apneaboard.

djams wrote: ↑

Sat Aug 11, 2018 5:04 am

prodigyplace wrote: ↑

Sat Aug 11, 2018 4:53 am

One more difference about CPAPTalk vs ApneaBoard.
On CPAPTalk the login page is securely encrypted with an https certificate.
The usernames and passwords whim logging in to ApneaBoard are sent across the Internet without any encryption. They even have an Admin sticky trying to say their site is secure without any certificate.

In my opinion they are not worth risking identity theft.

I created accounts at both. I've done some reading over there, but haven't participated. This post reminded me - when I created an account, my forum name (djams) was taken. So, if you're browsing around over there, just know it isn't me. I had to get really creative and came up with djams1 for apneaboard.

OK. I actually did a network packet capture and was able to read my username & password from the data sent to apneaboard. That is why I am warning.

prodigyplace wrote: ↑

Sat Aug 11, 2018 4:53 am

One more difference about CPAPTalk vs ApneaBoard.
On CPAPTalk the login page is securely encrypted with an https certificate.
The usernames and passwords whim logging in to ApneaBoard are sent across the Internet without any encryption. They even have an Admin sticky trying to say their site is secure without any certificate.

In my opinion they are not worth risking identity theft.

CpapTalk comes with warning on my Firefox, that they are running HTTP not HTTPS.

Steal my Identity, if you must, the world can support one more poor person, they breed anyway. Jim

Goofproof wrote: ↑

Sat Aug 11, 2018 12:09 pm

prodigyplace wrote: ↑

Sat Aug 11, 2018 4:53 am

One more difference about CPAPTalk vs ApneaBoard.
On CPAPTalk the login page is securely encrypted with an https certificate.
The usernames and passwords whim logging in to ApneaBoard are sent across the Internet without any encryption. They even have an Admin sticky trying to say their site is secure without any certificate.

In my opinion they are not worth risking identity theft.

CpapTalk comes with warning on my Firefox, that they are running HTTP not HTTPS.

Steal my Identity, if you must, the world can support one more poor person, they breed anyway. Jim

I mentioned that to Ben.
The forum, except for the login page is only http. The login page here is secure https. The site then gives your computer some code called a cookie.

Whenever you visit the insecure parts of the forum, your browser presents that cookie to prove who you are and that you are logged in. Without data on the server there is no real way to translate that cookie into your identity information.

prodigyplace wrote: ↑

Sat Aug 11, 2018 4:53 am

In my opinion they are not worth risking identity theft.

The only identity at risk is that of the pseudonym on that specific board.

So long as you use a pseudonym here, use good security hygiene and don't use the same passwords for different accounts, I'm not seeing a lot of risk of ID theft from using apneaboard. You don't store any credit card info, your home address, phone numbers, or even your real name in that account. You are much more likely to get phished via email, infected from a trojan or malicious link or hacked via IDs and passwords stolen from a direct attack on a service provider (think AOL, Reddit, Experian, etc.) than have your IRL ID stolen from apnea board.

I recommend you add multi-factor authentication to all your accounts that have it available to reduce the risk of compromise to important accounts. I don't consider my apneaboard or cpaptalk accounts in that category.