Straighterline security holes - no SSL/TLS encryption?!?!
|
Straighterline security holes - no SSL/TLS encryption?!?!
|
01-24-2012, 01:28 PM
I just now noticed that Straighterline is not using any type of encryption when I sign into my account. I have a lot of personal information there and being sent in plain text is a big problem for me. Anyone can intercept my data and steal it.
Anyone else notice this?
01-24-2012, 02:18 PM
Good point, I never looked at that. Thats something to call about.
AAS Environmental Safety and Securities Technologies Dec-2011
Working on BA Intellegence Studies Counterterrorism at AMU! Aleks: Beginners Algebra 72%, College Algebra 83%, Intermediate Algebra 88%, Pre-Calculus 75%, Business Stats 73% FEMA: 51 Completed ACE Credits: 18 Military AARTS: 18 24 UoP Credits: GEN200, IT105, COM120, COMM215, HIS145, SCI100, MATH208, MATH209, DSST-Here's to Your Health--423 (PASS) AUG 15, 2011 DSST Technical Writing--49 (PASS) SEP 01, 2011 StraighterLine: Economics I Macroeconomics 89.7% Economics II Microeconomics 90.2%, Intro to Biology with lab 90.6%, Western Civ I 77.5%, US History I 82% All Done!
01-24-2012, 03:14 PM
Wow, I usually look very closely at that, but never did with SL. I agree that is very scary, especially with all the info they require such as SS# and CC#. In this day and age it is very irresponsible to collect that type of data without ensuring it is secure. Great catch, thanks for posting!
Completed 2/09 - 5/13
RHIA Post-Bac Cert - Stephens - 5/13 MHA - Bellevue Univ - 3/12 BSHS - Excelsior 12/10 BSLS - Excelsior 3/10 ASLS - Excelsior 4/09 ECE - A&P - B ECE - Found. of Gerontology - B ECE - Ethics: Theory & Practice - B ECE - Psych. of Adulthood & Aging - A ECE - Social Psych. - B ECE - Abnormal Psych. - B ECE - HR Management - B ECE - Research Methods of Psych. - B ECE - Pathophysiology - A CLEP - American Govt - 58 CLEP - Intro. to Sociology - 63 CLEP - A & I Lit - 70 DSST - Fund. of Counseling - A (65) DSST - Org. Behavior - A (67) DSST - Environment & Humanity - A (62) DSST - Found. of Education - A (64) DSST - Here's to Your Health - 461 (Pass) DSST - Substance Abuse - 460 (Pass) DSST - Principles of Supervision - A (61) DSST - Lifespan Developmental Psych - A (59) DSST - Criminal Justice - 443 (Pass) DSST - MIS - 415 (Pass) UExcel - Intro. to Psych (Beta)- Pass ALEKS - College Alg, Stats Straighterline - Medical Term, Pharmacology I & II FEMA - PDS + more
01-24-2012, 03:42 PM
Kinda odd that they tout being secure with that little McAfee icon, but then realize it just means they are not and don't link to malicious sites.
All i know is that in addition to SSL not being there, my error console is literally full of messages for some simple problems with their jquery css, which could be why the SSL is not working.
01-26-2012, 07:07 PM
HTTPS costs more
BSBA CIS from TESC, BA Natural Science/Math from TESC
MBA Applied Computer Science from NCU Enrolled at NCU in the PhD Applied Computer Science
01-26-2012, 10:15 PM
So, broken or negligence? If the latter they are putting their customers' livelihoods at risk.
Although in this day and age you should lock down your credit reports and subscribe to a "monitoring" service anyway.
Community-Supported Wiki(link approved by forum admin)
Complete: TESU BA Computer Science 2011-2013 completed all BSBA CIS requirements except 4 gen eds. 2013 switched major to CS, then took a couple years off suddenly. 2015-2017 finished the CS. CCAF: AAS Comp Sci CLEP (10): A&I Lit, College Composition Modular, College Math, Financial Accounting, Marketing, Management, Microecon, Sociology, Psychology, Info Systems DSST (4): Public Speaking, Business Ethics, Finance, MIS ALEKS (3): College Algebra, Trig, Stats UMUC (3): Comparative programming languages, Signal & Image Processing, Analysis of Algorithms TESU (11): English Comp, Business Law, Macroecon, Managerial Accounting, Strategic Mgmt (BSBA Capstone), C++, Data Structures, Calc I/II, Discrete Math, BA Capstone Warning: BA Capstone is a thesis, mine was 72 pages about a cryptography topic Wife pursuing Public Admin cert via CSU.
02-01-2012, 04:08 PM
You might get a kick out of their response, they do have https. Not when you login, but only after you add something to your cart and go to pay for it does it switch to HTTPS.
So I informed them, they have a legal obligation to protect private data, and are subject to lawsuit if they are not protecting the moment we login and that there is no way I was going to spend any money with them until they fix it. Which is sad because they finally released the physics I & II which is what I have been waiting on for months!! And my intent was to take CalcI &II, Phy I &II, as well as Eng Comp II. It's there loss not mine, I can clep or take correspondence elsewhere if they can't fix it.
DSST- General Anthropology - 52, Intro to Computer - 469, Technical Writing - 54, DSST Ethics in America - 59 (1996),
CLEP- Sociology -54, College Math - 550(1996), CLEP Principles of Management - 60 (1996) Aleks Beg Alg,
02-01-2012, 05:15 PM
Not going to make excuses for companies that don't use HTTPS properly, but I purposefully have a CC provider who will issue temporary CC#'s for this very reason. I use it on all sites that aren't major internet retailers.
02-03-2012, 10:22 AM
Below is their response.
Lets hope the comment about adding courses and features will take a temporary back seat to security. But note they are trying to add remote proctoring via webcam, I have not seen them announce this prior, so at least we know good things might be coming for those willing to risk the security issues. Thanks for your feedback. We're sorry that you are not satisfied with your experience with StraighterLine, because we'd love to have you as a customer. We've passed your technical concerns and recommendation along to our IT team and your suggestion has been added to the development cue. Since we are busy adding new courses and lots of other features -- including remote proctoring by webcam -- we cannot yet estimate when the change you've requested will be implemented, but we definitely appreciate your feedback. Our students' data security is very important to StraighterLine. Please let us know if there's any other way we can help.
DSST- General Anthropology - 52, Intro to Computer - 469, Technical Writing - 54, DSST Ethics in America - 59 (1996),
CLEP- Sociology -54, College Math - 550(1996), CLEP Principles of Management - 60 (1996) Aleks Beg Alg,
02-03-2012, 06:46 PM
No real excuse for this. SSL certs aren't prohibitively expensive and aren't difficult to install.
"He who loves practice without theory is like the sailor who boards ship without a rudder and a compass and never knows where he may cast" - Leonardo Da Vinci
"We are what we repeatedly do. Excellence then, is not an act, but a habit." - Aristotle "The shortest distance between two points is usually under repair." - Anonymous [SIZE="1"]CLEP/DSST/ACE credits (39), Total costs $1,383 Principles of Management (71), Principles of Supervision (446), Principles of Marketing (76), Management Information Systems (466), Human Resources Management (67), Intro to Computing (465), Environment & Humanity (69), Technical Writing (65), Intro to Business Law (75), Business Law II (80), Principles of Microeconomics (70), American Government (69), Straighterline Accounting II (90%) [/SIZE] |
|
« Next Oldest | Next Newest »
|
![[-]](https://www.degreeforum.net/mybb/images/collapse.png)