PolishForums.com
POLAND . The Unofficial Guide
 Unanswered | Archives
"Polska" means "Poland" in Polish! Witamy, Guest | PF Members | Gold Members

Polish Forums / FAQ, Feedback /

Can Admin and Moderators read Private Messages?


page 4 of 4:  « Prev  1  2  3  4 posts: 120

SzwedwPolsceThreads: 13
Posts: 1,915
Joined: Feb 21, 09 ♂ 		 Aug 6, 09, 14:51    #91
jump_bunny:
PS my password is: wyspiissexy17

Yes, we already know that. ;)
mateinoneThreads: 10
Posts: 78
Joined: Mar 15, 09 ♂ 		 Dec 5, 09, 16:15    #92
Basically I am not sure what is powering this BB, but in phpBB it is quite simple to read a PM. There is a 2 (or more) private message tables in the DB. These have the test, the author ID and the "sent to id". Then to go further you would check these against the user table for the numeric id's of those involved.

Basically you could do it will a simple statement.

However... This is not something that the users (moderator or admin) can access via the admin panel. They need to directly get into the backend dbs and on a number of sites I have admin'd they do not have the access to that as quite often those doing the IT are not those administrating the site.

In regards to accessing them from the "front end" the admin/moderator would have to reset the user password and then access the PMs, in reality this would be the end of a site, because then that person would register as another user and mention that people had been reading their PMs and chances are that unless there is a very legit reason.. Most people would be turned off a site like that.

As for accessing in the back end (btw I am talking phpBB specifically, but most act the same way).. This is necessary. A site could be subpoenaed to supply all information to authorities in much the same way an ISP can be, so that is not ever going to change and you are not likely to see the data encrypted to the back end in a hurry.

Others have mentioned the integrity of those with "God" access and at the end of the day, you simply have to trust people in charge or you should not be accessing a site.

I used to have access to hundreds of thousands of credit card numbers, addresses etc etc.. But obviously I was not about to abuse that, most people in IT in some way work with sensitive data and really have absolutely no interest in reading about the private messages of other people.

As mentioned.. it is highly unlikely that a mod has the backend access and in most cases a mode does not even have the access to reset a users pass working only with forum files (I am not sure of the privs of the users here).

lol in summary... really it is a storm in a teacup :)
SeanBMThreads: 41
Posts: 8,727
Joined: Mar 10, 08 ♂ 		 Dec 5, 09, 16:25    #93
mateinone:
As mentioned.. it is highly unlikely that a mod has the backend access

Why are you bringing their personal lives into this?
;)





I for one, did not understand a thing you wrote there mateinone.
mateinoneThreads: 10
Posts: 78
Joined: Mar 15, 09 ♂ 		 Dec 5, 09, 16:29    #94
SeanBM
SeanBM:
mateinone:
As mentioned.. it is highly unlikely that a mod has the backend access

Why are you bringing their personal lives into this?
;)


I for one, did not understand a thing you wrote there mateinone.

lol gold!! :)

Basically, I just said it was easy enough for owner of the server to access, but outside of that not so easy and very unlikely... :P
delphiandomineThreads: 42
Posts: 9,954
Joined: Nov 25, 08 ♂ [Suspended] 		 Dec 5, 09, 16:42    #95
mateinone - actually, on phpBB, it is trivial for a forum administrator to obtain a dump of the database, from which private messages can be easily read. You don't need backend access for this, just access to the admin panel :)
mateinoneThreads: 10
Posts: 78
Joined: Mar 15, 09 ♂ 		Edited by: mateinone  Dec 5, 09, 16:50    #96
delphiandomine:
mateinone - actually, on phpBB, it is trivial for a forum administrator to obtain a dump of the database, from which private messages can be easily read. You don't need backend access for this, just access to the admin panel :)

Ah I stand corrected.. I will create one and take a look. I was fairly sure that you could not do this without a mod, but if you say then obviously it is possible.

I just installed a copy on my server then... but could not see the option to dump the db from the admin panel. I mean obviously I can from phpmyadmin or from the command line on my server, but am just overlooking it in the ACP.


......

Okay got it ;)
delphiandomineThreads: 42
Posts: 9,954
Joined: Nov 25, 08 ♂ [Suspended] 		 Dec 5, 09, 17:29    #97
mateinone:
Okay got it ;)

It's actually quite a major flaw with phpBB - anyone who gains access to the admin account (and there's been *plenty* of idiot-proof exploits to gain access to the admin account) can effectively read PM's at will. I'm not smart enough to be able to figure out what to do with the dump asides from reading the raw data though.

I believe passwords are one-way encrypted with MD5, though.

The best advice for forums is never, ever to post confidential information on them - as you say -

mateinone:
Others have mentioned the integrity of those with "God" access and at the end of the day, you simply have to trust people in charge or you should not be accessing a site.

Nuff said, really. :)
dtaylor5632Threads: 49
Posts: 4,459
Joined: May 2, 09  Pictures: 3 ♂ 		 Oct 12, 10, 23:45    #98
Merged thread:
Mods?

Do you normally go through members Private messages?
SeanusThreads: 22
Posts: 30,158
Joined: Dec 25, 07 ♂ 		 Oct 12, 10, 23:48    #99
Why would you say that, Davie? They have said no before. Do they even have the technical means?
delphiandomineThreads: 42
Posts: 9,954
Joined: Nov 25, 08 ♂ [Suspended] 		 Oct 12, 10, 23:51    #100
Seanus:
Do they even have the technical means?


Depends on how the forum software is written and how the PM's are stored in the database. For instance, with phpBB, it's a piece of cake to read private messages. I used to do it all the time when I was a forum admin ;)

It should always be assumed on internet forums that PM's can be read easily.
dtaylor5632Threads: 49
Posts: 4,459
Joined: May 2, 09  Pictures: 3 ♂ 		 Oct 12, 10, 23:52    #101
Seanus:
Do they even have the technical means?

Yes they do.
SeanusThreads: 22
Posts: 30,158
Joined: Dec 25, 07 ♂ 		 Oct 12, 10, 23:53    #102
Well, can they mask that they have been doing it? You know, cover their traces. What purpose would it serve? That would be more paranoid than the Russian government or the RCC. Sheesh!
dtaylor5632Threads: 49
Posts: 4,459
Joined: May 2, 09  Pictures: 3 ♂ 		Edited by: dtaylor5632  Oct 12, 10, 23:56    #103
Well i just wait for them to answer. Its kinda important.
SeanusThreads: 22
Posts: 30,158
Joined: Dec 25, 07 ♂ 		Edited by: Seanus  Oct 12, 10, 23:58    #104
I think it might be a long wait.

There was no response to my random thread post which exposed the hypocrisy which got me suspended. You must stay on topic but get caught out if you do according to the rules.
delphiandomineThreads: 42
Posts: 9,954
Joined: Nov 25, 08 ♂ [Suspended] 		 Oct 12, 10, 23:59    #105
Seanus:
Well, can they mask that they have been doing it? You know, cover their traces. What purpose would it serve? That would be more paranoid than the Russian government or the RCC. Sheesh!


Well, a database dump wouldn't leave any traces that we could see.

I wouldn't discuss anything of secrecy over PM's, that much is certain.
dtaylor5632Threads: 49
Posts: 4,459
Joined: May 2, 09  Pictures: 3 ♂ 		 Oct 12, 10, 23:59    #106
A simple yes or not would be fine.
SeanusThreads: 22
Posts: 30,158
Joined: Dec 25, 07 ♂ 		 Oct 12, 10, 23:59    #107
Why don't you write to them individually, Davie?
dtaylor5632Threads: 49
Posts: 4,459
Joined: May 2, 09  Pictures: 3 ♂ 		Edited by: Moderator  Oct 13, 10, 00:02    #108
Seanus:
Why don't you write to them individually, Davie?

Id like to know, but think it would be important that everyone knows.
dtaylor5632Threads: 49
Posts: 4,459
Joined: May 2, 09  Pictures: 3 ♂ 		 Oct 13, 10, 00:09    #109
Well still no answer if the mods can look at your pm's or not...
espanaThreads: 40
Posts: 2,233
Joined: Feb 28, 07  Pictures: 3 ♂ 		Edited by: espana  Oct 13, 10, 00:25    #110
dtaylor5632:
dtaylor5632

Seanus:
Seanus

Like it or not the moderators are the Captains of this ship.
don't question the moderators or they will ban you
SeanusThreads: 22
Posts: 30,158
Joined: Dec 25, 07 ♂ 		 Oct 13, 10, 00:27    #111
This is not China, espana. Some seem to know the rules better than others. It comes through training and awareness.
convexThreads: 46
Posts: 7,185
Joined: Nov 25, 09  Pictures: 2 ♂ 		 Oct 13, 10, 00:28    #112
Seanus:
This is not China, espana. Some seem to know the rules better than others. It comes through training and awareness.

It's not China, but it is a dictatorship. Just how it is.
Bratwurst BoyThreads: 11
Posts: 14,563
Joined: Apr 2, 07 ♂ 		 Oct 13, 10, 00:45    #113
Damn...they could read all my perv PM's???

No wonder they stole my helmet... :(
WroclawThreads: 77
Posts: 7,404
Joined: Apr 1, 06  Pictures: 3 ♂ [Moderator] 		 Oct 13, 10, 15:32    #114
dtaylor5632:
Well still no answer if the mods can look at your pm's or not...


mods don't have the tools to read pm's other than their own.
SeanusThreads: 22
Posts: 30,158
Joined: Dec 25, 07 ♂ 		 Oct 13, 10, 15:39    #115
As I thought. It wouldn't make sense to snoop.
A JThreads: 19
Posts: 4,639
Joined: May 21, 10 ♂ 		 Oct 13, 10, 16:00    #116
Bratwurst Boy:
Damn...they could read all my perv PM's???


Trust me, you've got nothing to worry about once you've read mine.

;)
sledzThreads: 29
Posts: 3,202
Joined: Sep 19, 06 ♂ 		Edited by: sledz  Oct 13, 10, 22:43    #117
dtaylor5632:
Well still no answer if the mods can look at your pm's or not..

Dude, if its really private,I wouldnt post it if I were you!

Remember when I was suspended for busting that former Mod out?

Although, I think the Mods now are honest:)
pawianThreads: 90
Posts: 5,395
Joined: May 30, 08  Pictures: 2 ♂ 		 Oct 13, 10, 23:15    #118
jump_bunny:
Can Admin and Moderators read Private Messages?



Yes, of course. The site surely needs clever supervision/control, there are various FREAKS, even terrorists who might plot their nasty activities in the free world through PM system in the Polish forums.
beckskiThreads: 19
Posts: 2,148
Joined: May 15, 07  Pictures: 3  Gold Member MEMBER ♀ 		 Oct 14, 10, 04:11    #119
SzwedwPolsce:
Can Admin and Moderators read Private Messages?


This is what you guys need to do. Send someone a PM, speaking about Adm or Mods in a very negative manner. If you end up getting suspended... well then you have your answer!

A sincere thanks PF, for putting up with me FIVE terrific years, muah!
EurolaThreads: 6
Posts: 2,647
Joined: Dec 2, 06 ♀ 		 Oct 14, 10, 05:34    #120
beckski:
This is what you guys need to do. Send someone a PM, speaking about Adm or Mods in a very negative manner. If you end up getting suspended... well then you have your answer!

lol. Excellent idea Becks. D'ya wanna try it? Not exactly my style, but let's use the worst vocabulary we can come up with! I've never been suspended before... :)

page 4 of 4:  « Prev  1  2  3  4

Home / FAQ, Feedback / Unanswered [this forum] | Similar


Similar discussions:

(Important) forum note. Keeping threads on topic.  What is your suggestion to make PF more enjoyable ?


Random: Looking for Polish immigration lawyer in Sydney

Only registered and logged-in users may post here. Please log in or register.


48 [Guests - 34 / Members - 14] users on live forums now


Home | Unanswered | Archives | Random | Statistics Time in Poland: 11:30 / May 26

About Us | Contact Us | Rules, Privacy | Poland Advertising
© 2005-12 PolishForums.com