Mods and admin

Status
Not open for further replies.
However mods/admin should not overstep the mark with this, it can be belittling for members to have things changed and that is not what DW is about!

Regards
Mick

Ouch...busted!
 
He forgot to mention that the USER would have to give mods and admin permission and THEIR Password!

Private messages are not read on here by any staff, that is just WRONG!

Apologies for coming into this one late, I might be slow on the uptake, but I'd like to clear something up as I'm not quite sure I understood it completely.

Accessing user IP's, and changing avatars is pretty much a bog-standard, easy process for any self-respecting Mod/Admin. I'd be surprised if this didn't happen on a regular basis (it's no big deal really).

Accessing user PM's however is a different matter altogether. I think we would all agree that to do so would be wrong and unethical (unless requested to do so under RIPA).

That being said, although it is wrong under normal circumstances to do so, is it possible for any of the Mod/Admin yeam to access users PM's without obtaining consent from the user?

--

I'm not attempting to stir anything up here, I'm just looking to understand more clearly what really is private, and what level of access to users accounts do the Mod/Admin team have.
 
I'm not attempting to stir anything up here, I'm just looking to understand more clearly what really is private, and what level of access to users accounts do the Mod/Admin team have.

It's a forum FFS...

...I run some forums (apologies to the pedants who studied Latin) - there is no 'private', end of :)
 
It's a forum FFS...

...I run some forums (apologies to the pedants who studied Latin) - there is no 'private', end of :)

OK, just to clarify things (I'm dense ya knows). EVERYONE'S PM on this forum can be read by the Mod/Admin team with impunity?
 
No member of staff (Admin or Moderators) can read anyones PM
unless the member forwards it to us or lets us access there account by providing us with the password

we can not read PMs by any other means


:)
 
There is an addon for vbulletin which allows you to log on using other members details but its not used here,

also all your private info is on the server, it doesn't just float around the cloud waiting for you to access it, so in theory could be accessed, but is not

Nothing on the internet is 100% private or secure, you as a user just decide who you trust

Sent from my X10i using Tapatalk
 
Changing avatars has always been part of the fun of being a mod!! As for pms then aren't they stored in the db and so visible to anyone with access to the database or backups
 
A few years back I used to admin a small gaming forum and with admin privileges I could do the obvious (edit sigs usernames etc) but the only way, if I wanted to that is, to read someone's pm would be to change their password and login as them. I highly doubt any of the admin team here would do that, for a start, what would be the point? In hope that someone may have pm'ed another member the keys to nagra 3? Or a naked picture of digi? Exactly. There is no point and running a site as busy as this with the amount of members there are I doubt there's any time either! :)
 
to be honest i wouldnt care if mods or admin read my pm's .maybe am 1 of them ppl that realy dont give a feck.. these guys do a great job and for nothink in return but mostly grief of us lot. cant be doing with all this privacy shouts.. if u dont like it there's the door lol not like we send member's messages that could hurt or kill any 1
 
As has been said, there are mods/add-ons that would allow admin etc to read pm's but has also been said that it's not used on this site. As far as I'm concerned it may be morally wrong for staff to read your pm's but there's no god given right for people to start claiming their human rights have been violated... it's a private website and the owner can run it however he likes. If there was ever a need for staff to check pm then I'd personally slip a clause into the terms and conditions when registering, or an update to any terms and conditions posted on the site for users benefit.
 
It's technically possibly even without an addon as most content in a MySQL database isn't encrypted, but the only person that is going to be able to do this is the one who owns the server/host. It's a moral choice as to whether they do or not, but even if there was a reason then to be fair they have every right to given it's their site. Mod's and other admin's won't have access.

Although the legal aspect is quite different and it's subject to clauses etc. It's the same in your workplace with email. This is a little bit of an extreme explanation, but it's just to compliment the message.

If an electronic mail (e-mail) system is used at a company, the employer owns it and is allowed to review its contents. Messages sent within the company as well as those that are sent from your terminal to another company or from another company to you can be subject to monitoring by your employer. This includes web-based email accounts such as Yahoo and Hotmail as well as instant messages. The same holds true for voice mail systems. In general, employees should not assume that these activities are not being monitored and are private. Several workplace privacy court cases have been decided in the employer's favor.

If your employer intends to monitor emails or internet use, it should inform you it intends to do so. This could be done in your employment contract or employee handbook, or some other kind of workplace email policy.

The policy should:


  • set out clearly the circumstances in which you may or may not use work email and internet for private communications;
  • make clear the extent and type of private use that is allowed;
  • explain why your employer monitors emails, the extent of the monitoring, and the means used;
  • outline how the policy is enforced and the penalties you can expect if you breach the policy;
  • inform you of the extent to which information about your internet access and emails is retained in the system and for how long.

However, the Regulation of Investigatory Powers Act 2000 prohibits intentional "interception" of emails without "lawful authority". As a general rule, this means employers cannot read an email without the consent of both the sender and recipient.

The Telecommunications (Lawful Business Practice) (Interception of Communications) Regulations 2000 lists a number of exceptions to this general rule, however, which include intercepting business emails to:


  • ascertain regulatory compliance;
  • detect unauthorised use; and
  • prevent/detect criminal activity.

Your employer should confine itself to looking solely at the address/heading of your business emails unless it is absolutely essential for a valid and defined reason to examine the content (e.g., to prevent a crime). Moreover, to minimise intrusion, employers should as far as practicable utilise automated systems to monitor email.

If you are allowed to access your personal email account at work, your employer may monitor such emails only in exceptional circumstances (e.g., to investigate criminal activity).
 
Last edited:
While we are talking about Mysql databases and reading the PM's in general as that leads to me as sysop.

I run my own business outside of DW, I have been for the last 5 years now, plus I have a wife and 3 kids.

Do you think I for one have the time to run around reading peoples PM's... I could not give a **** what you argue about in private or talk about for that matter.

The only time I would consider that the PM's should be read or looked into, would be if there is reason to believe paedophiles are operating on this board then I would be hell bent on finding out who and giving the details to the police!!!!

And I would not care what privacy law that broke or what member that pissed off!

So please accept my word (for what that is worth) and believe I do not read PM's, we do not have a PM reading software installed on DW.

If a member was abused in a PM then i would first of think GROW some balls and tell them to **** off.

But if they wanted to give there login to mods/admin then fine do that, and under the current rules the member would be infracted or banned depending on there account status.

Mick
 
FFS - most forums are SQL-based. PMs are not encrypted. Give me half a sniff and I'll read 'em all, no problem. MySQL, MSSQL, PostgreSQL, Firebird...

...if ya don't want it read, don't PM it. That said, I've got a thousand better things to do...
 
FFS - most forums are SQL-based. PMs are not encrypted. Give me half a sniff and I'll read 'em all, no problem. MySQL, MSSQL, PostgreSQL, Firebird...

...if ya don't want it read, don't PM it. That said, I've got a thousand better things to do...

So are you saying You could read my pms?
 
The key phrase was 'given half a sniff'...

...PMs are in plain text, SQL databases are easy to read but you need a 'hole' in security to do it. Break the security and you can read whatever you want, end of.

sample.png

Above is a sample of what a MySQL PM looks like in a phpBB forum...

...no problem :)

That said, I'm sure that DW have it covered and I can't be arsed to check ...
 
Status
Not open for further replies.
Back
Top