59678178
Tom Native New Yorker
Premium
join:2001-12-12
Marietta, GA
| site question
On this page>> »/who?cat=Administrators
It states quote:
These "super" users have global read access to all data on the website.
Since the term 'all data' is italicized, it means all data including the instant messaging system can be read by these three persons, doesn't it?
--
If it offends you, it MUST be true! |
|
fatness
subtle
Janitor
join:2000-11-17
fishing
 ·EarthLink
Host:
Earthlink DSL
TekSavvy
Forum Feature Requ..
Need Site Help?
Rants, Raves, and ..
| That came up recently. Here are the replies:
»Re: Alowing Attachments in IM/PM's
»Re: Alowing Attachments in IM/PM's
said by fatness  :
I would assume you're referring to the 3 admins on the site --- justin , nil , and myself. I cannot read any IM's but my own. I've heard this several times recently and I want to correct the misinformation. I would assume justin can see whatever he wants to see, and I do not know what nil can see.
said by nil :
While yes, technically I could read IMs, the answer is no, I don't and wouldn't even if asked.
--
Female monkeys often utter loud, distinctive calls before, during or after sex.. |
|
59678178
Tom Native New Yorker
Premium
join:2001-12-12
Marietta, GA | reply to 59678178
so technically according to nil, all three have the capabilities of viewing all members IMs. same for buddies list and favorite forums a user has selected?
--
If it offends you, it MUST be true! |
|
fatness
subtle
Janitor
join:2000-11-17
fishing
1 edit | Where did she say that? It appears you're making things up. |
|
nil
Java Geek
join:2000-11-27
Host:
Webmasters and Dev..
Forum Feature Requ..
| reply to 59678178
The information is stored in a database. An administrator with database access can access all that information, yes. That would be myself and justin .
Lucky for us, we both have a life and don't spend it selecting random info out of the db.
--
Life is too short to be boring |
|
La Luna
Surviving Ashraful
Premium
join:2001-07-12
Warwick, NY
clubs:
 ·Optimum Online
 ·Vonage
| said by nil :The information is stored in a database. An administrator with database access can access all that information, yes. That would be myself and justin . Lucky for us, we both have a life and don't spend it selecting random info out of the db. Good thing I'm not in your place, as I have no life. I could spend lots of time reading and giggl....oh, nevermind. 
--
11,262 DEADLY TERROR ATTACKS SINCE 9/11~~SARAH BRIGHTMAN SYMPHONY WORLD TOUR |
|
justin
Australian
join:1999-05-28
Brooklyn, NY
Host:
IPv6
Business Connectiv..
Home/Office setup ..
Console/Handheld g..
Console Tech
| reply to 59678178
What nil said.
Ultimately anyone who can administer mysql (or the unix file system) can select and read any info stored in it. Even if the IM table were encrypted we'd also have access to the key used by the program to decrypt it. Imagine how many individuals in google can read your gmail inbox - at least theoretically.
However the only times I've done selects in the instant message table are cases where users have been accused of ban-worthy offenses via IMs and I want to verify the extent of the problem before kicking them off, so in that case I'd do something like "select count(*) from im where fuid=X and msg like '%generic drugs%'" or whatever. |
|
