Question (security related) improvements for this Forum

[TotalSynthesis]

@HEISENBERG

I decided to post this publicly because it will be of interest for many of us.

One feature i really would like to have is something like a timer where i can set a time after which a specific pn will be deleted automatically.
pn discussions often times are more personal, maybe contain personal info which could help maybe being identified by law enforcement etc.
therefor i guess it would be a good addition to have the possibility of auto deletion, to keep the amount of possible traces low in case of data leaks or infiltration of this forum.

secondly:
About your server setup: Can you be transparent what kind of userdata will be logged exactly (system footprints, geolocation, ip address etc....)? How long are those things stored?

 

[HEISENBERG]

Hi. Any private message will be deleted 30 days after it is created. You can encrypt your conversations with a secret key. We only store these keys on the server until all parties to the conversation confirm that they have kept the key. We log only the information that is required for the normal operation of the forum, ip addresses, fingerprints, geo we do not log. In addition, you can use an onion domain for even more security.

 

[KokosDreams]

Yesterday night I had a strange happening:

While loging into the forum I was restricted from sending messages or commenting on posts and a message popped up saying that the site requires me to accept cookies.
I assume this was an error because it didn't apperead again when I got a new Tor identity but it was still strange.

 

[HEISENBERG]

If the error happens again, you can take a screenshot and send it to me, but I assume this error is due to the recent NoScript update

 

[KokosDreams]

Okay I will do that Thanks

 

[yin-yang]

You can always use PGP if unsure

 

[TotalSynthesis]

thx, i didnt realize my inbox getting cleaned automatically.

well, PGP is a viable option.

 

[HEISENBERG]

You can check for yourself, you will not find private messages older than 30 days.

 

[Saul]

Tor Browser's new update is causing 'potential identity leak' popups! You can ignore these popups

 

[KokosDreams]

Oh okay, thanks for letting me know.

Actually, it was a pop-up not coming from Tor browser, it was embeded in the Breaking Bad design. Still a pop-up but not from Tor.
Also, there was only a close button, which I clicked but nothing to agree or disagree to cookies.

 

[Fenster]

Are photos meta scrubbed?

 

[yin-yang]

yes, there was an update about auto metadata removing from the staff couple months back

 

[HEISENBERG]

Yes!