Non-Certified (non-friend) users can apparently see photos/videos marked "Certified Only"

Replies

• BO

  

  Bob

  Mar 13, 2017

  John,

  I am certified, but you are not on my list of friends (I guess we never got around to that.)

  If you put up a picture and flag it as friends only, let me know and I will try to look at it. I have seen many profiles that have pictures masked saying for friends only.

  I am curious if the counter is showing actual views only or is also counted blocked attempts.

  Thanks,
  Bob

  ReactReply
• JO

  

  JohnOriginal Poster

  Mar 13, 2017

  From what I've seen, the "Friends Only" works. (I assume "Certified Friends" works correctly, but haven't tested that theory as I didn't have any photos flagged that way). The issue is non-certified, non-friends being able to see "Certified Only" photos. I'd already documented the ability of non-certified friends to see "Certified Only". Not sure I agree that should happen, but at least I was aware of it.

  From previous years of coding, I know it is difficult to make it work the way you want, but this is a clear violation. TN does need to put a Boolean explanation with all the options to explain who it includes and who it excludes. Be careful of non-certified you "friend", and be aware that the system is always fallible. Having said that, security should be priority one, and should be thoroughly tested before new changes are released to the system.

  I remember as a system admin trying to explain to users that the Windows file "Right" called "Nobody" meant NOBODY, even if the user had full access to the file, they would be denied access unless they had administrator access (which they didn't) and could take ownership and remove the "Nobody" flag.

  John aka cobeachbum

  ReactReply
• DE

  

  DesertRat

  Mar 13, 2017

  I'm an idiot when it comes to computers because I can never find anything that I'm looking for. Went to my Home Page and could not find Status any where there. Please tell me how to find this thing Thank you.

  ReactReply
• PA

  

  Paul

  Mar 13, 2017

  You sound like me as it is a case of hitting the right button to find what you want and then remembering the order you do it in for the next time.

  If it is what I think you are looking for go to your home page and click on your user name next to the bell sign and then click on ''My feed'' and this might produce what you are looking for as this page is more like the old site home page.

  ReactReply
• GU

  

  Guy

  Mar 13, 2017

  So would it be wrong to send a message to the person or persons to thank them for viewing your profile?

  ReactReply
• JO

  

  JohnOriginal Poster

  Mar 14, 2017

  That's the second place I found it. The way I got to it originally is to click the TrueNudists logo in the top left corner, then over to the right are two columns of information (Status and Statistics). The last item under Status column is View System with "Enabled" to the right. Click on Enabled. Takes you to the same place.

  John AKA Cobeachbum

  ReactReply
• DA

  

  Dave

  Mar 14, 2017

  [quote]I just perused the list of those that have looked at our profile, and what pics they have looked at. Not one of our Certified Friends Only pics has been looked at.[/quote] I am curious how it is really working. Does that mean that Certified Friends Only might not be viewable at all? I was thinking of setting up some photos with different view privileges. I have different bird photos posted that would be easy to identify. But I see that all who are posting here are certified, so you can't test as non-certified. I will change some photo settings if it would help identify the issue. Dave

  ReactReply
• ME

  Member

  Mar 18, 2017

  You can only view the 'View' data if you are a paid member of TN. https://www.truenudists.com/members/views/ Views All Views This feature is only available to paid users Our view system is a tracking system, that allows you to see who is viewing your profile and media (photos/video) in real time.All unpaid users are automatically enrolled in this system, while paid members have the option to opt out of the system completely.Paid UsersPaid users can enable/disable of this program You can see who has viewed your profile (if you have this feature enabled) You can see who has viewed your media (if you have this feature enabled) Paid Profiles you visit will be able to see your visit/media view (if you have this feature enabled)Unpaid UsersYou can not disable/enable this feature When someone views me You will not know who viewed your profile You will not know who viewed your media When I view someone They will be notified that you viewed their profile (if they have this feature enabled) They will be notified that you viewed their media (if they have this feature enabled)

  ReactReply
• JO

  

  JohnOriginal Poster

  Mar 22, 2017

  As of today, the media problem has NOT been fixed. Non-certified members can still view media marked "Certified Only". They cannot see "Certified Friends Only", Non-Certified Friends can see "Certified Only" however.

  John aka cobeachbum

  ReactReply
• GI

  

  Gilan

  Mar 25, 2017

  I would love to have site moderator power to go through every profile on TN and any profile that isn't certified after 60 days gets deleted. I will never understand why the owners of this site would want to keep anyone that isn't a certified paying member after allowing a 60 day trial period of the site. Just doesn't make sense

  ReactReply
• JO

  

  JohnOriginal Poster

  Mar 30, 2017

  Problem is still not fixed, and TT1/TT2 has made no effort to notify users of this major security issue.

  John aka Cobeachbum

  ReactReply
• DR

  

  dropbare

  Mar 30, 2017

  Through trial and error I have found non certified people can view my certified-only photos too. However if I set my privacy settings to having all my photos only viewable by friends (certified and non-certified) then the privacy settings applied to each individual photo will work properly.

  My profile is still visible but the profile pic is the only photo non friends can see. Until this is fixed I'll be keeping the "users that are not friends to view my photos/videos" setting on Don't Allow.

  I think there is also a bug which allows anybody to see a recently uploaded photo on your feed regardless of privacy settings until it is approved. Then your chosen settings seem to activated.

  ReactReply
• JO

  

  JohnOriginal Poster

  Apr 6, 2017

  Issue(s) still not fixed.....

  John aka cobeachbum

  ReactReply
• JO

  

  JohnOriginal Poster

  Apr 29, 2017

  Two months, still not fixed, still no notification to the users that this is an issue.

  John aka cobeachbum

  ReactReply
• PA

  

  Paul

  May 11, 2017

  I think the problem is now fixed and the right click has also gone as well for the photos like it was on the old site.

  ReactReply
• JO

  

  JohnOriginal Poster

  May 21, 2017

  It's not fixed. I have left one benign photo marked 'Certified Only', and non-certified profiles can still view it. I will try and change the flags to see if updates.

  John aka cobeachbum

  ReactReply
• ME

  Member

  May 21, 2017

  I had no idea that non-certified can see certified only pictures. Here I thought it was wacky that I'd get the "Certified Only" block when I've been certified since the day I made my profile....

  ReactReply
• JO

  

  JohnOriginal Poster

  May 21, 2017

  [quote]I think the problem is now fixed and the right click has also gone as well for the photos like it was on the old site.[/quote] And for the 'right click', using scripts just made this harder, but not impossible. I won't educate the picture collecting pervs here, but it is possible still. This picture is captured from my profile. I was going to do a benign one from yours, but you don't have any benign ones ;) )John aka cobeachbum

  ReactReply
• PA

  

  Paul

  May 22, 2017

  [quote]I think the problem is now fixed and the right click has also gone as well for the photos like it was on the old site. And for the 'right click', using scripts just made this harder, but not impossible. I won't educate the picture collecting pervs here, but it is possible still. This picture is captured from my profile. I was going to do a benign one from yours, but you don't have any benign ones ;) ) John aka cobeachbum[/quote] There is another site which you can't even do what I think you are on about to save the photos for your own use, and could be spread about on the net as well. On this site it was most likely done like this so people can't find the fake profiles so easy.

  ReactReply
• JO

  

  JohnOriginal Poster

  Jun 12, 2017

  I have found another major issue with media on this site. When you delete a picture/video from your profile (and I assume a group and/or the gallery) the picture/video isn't really deleted from the server, just the link to it is. (For those computer nerds out there, I know the difference between "deleted" and truly erased, that's not what I'm talking about). I have verified several times across multiple profiles that the picture remains on the server. I (and others) have sent in bug reports with no response and no fix.

  Be aware, when you post a picture or video to the media server, it is apparently there forever, even if you delete it from your profile, group, and/or the gallery.

  John aka cobeachbum

  ReactReply