TalkBass App To Be REMOVED/DELETED [security concerns]

[tradernick]

Unbelievable that anyone would even question this decision. Thanks Paul, for taking a tough decision in order to protect your users and protect yourself. These complainers have no clue what it means to run a business like this.

The hit that will be taken on page views is tiny because all those people who are saying 'omigod, omigod, I spent so much time here on the app, now I'm not going to be here at all' will be back within 48 hours on the mobile site.

 

[tradernick]

Not cool.

I, like many others had to pay for the Tapatalk app when the original TB app went away. I bought it specifically to use for TB. So now I wasted $3.99 or whatever it was?

Sigh.....

 

[beans-on-toast]

I reckon that it's better to lock the door than to leave it wide open. You have to do what is prudent to eliminate any weak security links. But at the end of the day, no system is impenetrable.

 

[Dave W]

Sigh.....

Problem?

 

[paul]

Turns out we killed another bird with this stone. Ever since we switched to XenForo in April, we started racking up around 1000-3000 "deadlock" errors every day from the database (http://dev.mysql.com/doc/refman/5.0/en/innodb-deadlocks.html). Most of the time these are not noticed by the end user and generated by deferred background processes. But sometimes a user would end up getting a "deadlock found when trying to get lock" error when submitting a reply. We've been working on-and-off with the xenforo dev team to find a solution, and they've tweaked the code to try to minimize these errors, but we couldn't pinpoint a cause.

Not a single error after uninstalling Tapatalk last night...

 

[Spuk]

I would donate if there was a good dedicated app. I think that this is a large enough community to make that happen.

 

[beans-on-toast]

Not a single error after uninstalling Tapatalk last night...

Sounds like system performance is going to improve.

 

[SteveC]

The thing I liked most about the app was being able to see new posts to threads I had posted in.

 

[Fiset]

While the security issue alone is enough to convince me Tapatalk had to go, there were also other reasons Paul outlined in the op. I think the totality of the problems makes this easily the correct decision.

 

[basmansam]

Couldn't get online - couldn't find browser on my phone

 

[Zephrant]

Really going to miss the app. I loved the simpleness of it. I really dislike that 50% or more of the web page is wasted space. (Wasted meaning anything that is not the text of a post).

I understand your reasons, but it will certainly impact my use.

 

[SunnBass]

Lunch breaks are gonna suck from now on.
Sad face.


Thanks for looking out for us though.
We appreciate it.

 

[El Spearo]

The thing I liked most about the app was being able to see new posts to threads I had posted in.

You still can

 

[SunnBass]

The thing I liked most about the app was being able to see new posts to threads I had posted in.

You still can
View attachment 529464

I believe he's actually referring to the "Participated" selection, as opposed to "Watched", which was a nice feature.

 

[El Spearo]

I believe he's actually referring to the "Participated" selection, as opposed to "Watched", which was a nice feature.

Right. Apologies. See my post on the beer drinking thread.
http://www.talkbass.com/threads/wha...-now-episode-iv.1015304/page-41#post-16753872

 

[Febs]

I believe he's actually referring to the "Participated" selection, as opposed to "Watched", which was a nice feature.

And you can still do that by setting preferences to automatically watch threads you post in.

 

[SunnBass]

And you can still do that by setting preferences to automatically watch threads you post in.

Yeah,that works.
This was different, sometimes I want to participate and observe, then just...let go.
Other times I want to full on subscribe.
It was nice to have a separation.
But, we'll all live through this.

 

[El Spearo]

Yeah,that works.
This was different, sometimes I want to participate and observe, then just...let go.
Other times I want to full on subscribe.
It was nice to have a separation.
But, we'll all live through this.

That has been my point throughout the whole experience... We will adapt, and carry on

 

[tradernick]

Problem?

With that post of yours that I quoted? The one where you complain about having spent $3.99 on the app? Where you describe this decision on Paul's part as 'Not cool'?

Yep.

 

[Outsider]

XenForo uses a salted double hash using either SHA1 OR SHA256. Yes, we're close to making https the default (because Google wants us to). Until then, HTTPS is fully functional if you put the "s" in https://. Or you can install a browser plugin to force SSL on TalkBass.

Awesome! Looking forward to https.
I would also recommend tweaking your ciphersuite: https://www.ssllabs.com/ssltest/analyze.html?d=talkbass.com

I think https://wiki.mozilla.org/Security/Server_Side_TLS has some good recommendations.