Forum Discussion

DanUK's avatar
DanUK
Streaming Star
2 years ago
Solved

Absurd security measures on this forum

I do not know who configured this forum but seriously WTF is up with the nanny state and security issues.

After being delayed by WE NEED TO CHECK YOU ARE HUMAN cloudfare **bleep**, we then have to go through approval by email.

This is a tech forum, there is no security issue of my data, I already confirmed my email when I signed up so why hassle users.

To make matters worse when you make a post you have to tick a box that says it has not been posted before, it already checked that it had not been posted before so WTF, then if you copy a username it stops you because is says you used HTML.

Considering that most people come here because they are already pissed off with Roku products failing them it does not exactly help their mood with all this shiite.

Your post has been changed because invalid HTML was found in the message body. The invalid HTML has been removed. Please review the message and submit the message when you are satisfied.
 
Correct the highlighted errors and try again. You already corrected it you Dum**uck
 

You have autosaved content from 07:13 AM.

Load or Discard
My topic hasn't been posted before
Please confirm to continue
  • Two Factor Authentication is something that many web sites use. True, Roku did just adopt it, but you can disable it under your user account settings. Just remember that 2FA greatly improves the security of your account.

    The checkbox to confirm you're human is an improvement over the Captcha image matching, and only takes a second, so I have no issues with that one. 

23 Replies

  • atc98092's avatar
    atc98092
    Community Streaming Expert

    Two Factor Authentication is something that many web sites use. True, Roku did just adopt it, but you can disable it under your user account settings. Just remember that 2FA greatly improves the security of your account.

    The checkbox to confirm you're human is an improvement over the Captcha image matching, and only takes a second, so I have no issues with that one. 

    • Emissary35's avatar
      Emissary35
      Roku Guru

      atc98092 

      You can disable the two step verification under your account settings where?

      Be specific.

      I'm sick and tired of having to check my email to click on a link to get into the forum AFTER I've already typed in my username and password!

      This is beyond ridiculous and annoying!

    • DanUK's avatar
      DanUK
      Streaming Star

      As I said, it is absurd.

      If this was a banking website then perhaps it might be relevant but what security exactly is at risk here?

      My ability to post a message, so someone else can post in my name if they are that sad, big deal, but they won't even be able to do that as my passwords are strong.

      As far as I am concerned if they need to prove I am human then their networking has inadequate security.

      Sure if someone tried to login from Russia or China then go at it, but no need and nothing to lose.

      Also, those who use nefarious means, have software that redirects such prompts to poor overworked people in Bangladesh and other countries, so totally pointless.

      TBH the people who want to create accounts for SEO purposes employ people so cheap that they can spend hours a day over weeks to make an account look legit.  Better to just ban all hyperlinks.

      Making us jump through all those hoops just shows amateur IT people.

      • andyross's avatar
        andyross
        Roku Guru

        The Roku forum account is tied to your Roku account. As noted, due to security issues, mainly with other sites and people reusing email/password combos, they enabled 2FA. If you have no payment information tied to Roku, then it's less of a security issue to disable 2FA. You can go into payment settings and remove any cards if you used one to sign up, but are not paying for anything through Roku.

        I only found out you could disable 2FA today. I have been semi-boycotting this forum and only checking in once a week or so. The email thing was annoying and often took several minutes or more to come in. I would use the "alternative" method by using part of a device's ID code.

    • DanUK's avatar
      DanUK
      Streaming Star

      PLEASE CEASE AND DESIST FROM MARKING MY THREADS AS SOLVED

      THAT IS NOT THE SOLUTION

      I DECIDE WHAT THE SOLUTION IS.

      THE CHECKBOX IS DISABILITY UNFRIENDLY AND SERVES NO VALID PURPOSE.  IT IS BETTER TO USE NETWORKING TOOLS TO DETERMINE THE TRAFFIC.

      SPAMMERS REDIRECT THE OUTPUT FROM THOSE DIALOGUES TO SWEAT SHOPS IN BANGLADESH.  SO WE ARE PUNISHED BUT THE SPAMMERS CARRY ON AS USUAL.

      ALSO THE WHOLE POINT OF THIS THREAD IS TO POINT OUT THAT IT IS NOT JUST ONE TICK IT IS NUMEROUS HURDLES AND ALL YOU ARE DOING IS MAKING CUSTOMERS THAT ARE ANGRY ABOUT YOUR OTHER FAILINGS EVEN MORE ANGRY.

      OF COURSE IT IS NOT AS BAD AS CAPCHA BUT SAYING IT IS BETTER IS LIKE SAYING BEING KNIFED IS BETTER THAN BEING SHOT, BOTH HURT.

      WHAT WAS USEFUL BUT NOT A SOLUTION IS TO POINT OUT THAT SOME THINGS CAN BE DISABLED IN THE ACCOUNT SETTINGS.

      A REASONABLE ADJUSTMENT WOULD BE TO DEFAULT TO NO TFA AND TO LET USERS KNOW THAT THERE IS A TFA OPTION.

       

       

      • atc98092's avatar
        atc98092
        Community Streaming Expert

        DanUK stop shouting. 

        Yes, the checkbox serves a purpose. It is unfortunate that it might be an issue for some users with disabilities. But it's an unfortunate truth that there are many people out there that are trying their "best" to steal from everyone possible. They want to steal your CC information, your personal information, and anything else they feel they can get money for. That is forcing sites such as this to increase security measures.

        It sounds like you take all necessary precautions for yourself, and that's great. Unfortunately, many people online simply don't take even the basic security steps, then scream their heads off if their information is breached online. Roku is doing their best to protect themselves and their customers.

        I agree it's best to not store any payment method within your Roku user account. But many people subscribe to things through Roku, so the payment method is required. 

        You have probably seen it elsewhere, but you can disable the two factor authentication on your Roku account. The setting is on your user home page at the bottom of the screen. That will stop the email that requires a second action to log in. It won't turn the checkbox off, however. Face it, in today's world it's simply something that has to be tolerated.