1. #1
    Corey
    Watching all of Justin7's SBR.tv videos
    Corey's Avatar Become A Pro!
    Join Date: 11-25-08
    Posts: 85
    Betpoints: 42

    Sports Interaction's web login page no longer uses SSL!

    Right! I was surprised too! I just noticed it this month! What that means is instead of seeing https:// and having your password and login encrypted, you see http:// and a hacker in between me and sports interaction could get all my info.

    I emailed them and they replied with this bull reply:

    Dear XXXXXXXXX,
    Thank you for contacting Sports Interaction.
    I am following up with you today relating the security of our website. I've spoken with our developers and received a response from them as follows:
    The login forms are submitted via https (protecting username/password) but once we’ve processed the login we immediately redirect the client to the normal (non-secure) homepage. Hence, unless the client is using web developer tools, or looks at the html source, they wouldn’t realise that https is being used (it doesn’t appear in the browser address bar at any stage during login).
    We're constantly looking at ways to ensure transparency and security to our customers, as we realize this is of importance. Our developers are currently looking at ways to help ease your concerns relating to the display of the login process over https.
    As always, we appreciate customer feedback as it helps us to continue to serve our loyal customers such as yourself.
    Sincerely,
    Hawi
    Sports Interaction Support Team
    North America: 1-888-922-5575
    International: +1-450-635-5575
    I posted this to twoplustwo but I don't think anybody cares. (I make my money playing poker, and I enjoy the fact that SIA can still send me a check in about 10 days for a mere 5 bucks, even after black friday). Could Justin or one of the founders here at SBR look into this and contact SIA's management? They won't listen to me, they are just making a BS-email to try and tell me "everything's all right, keep playing with us".

    In the meantime, I recommend that if you still play at SIA, change your password there to be one that is totally unique, and unrelated to any other password. Notice how they cop out and try to say that as soon as you enter your login you are redirected to an https - no you are not - you start with http and end with http! Even when you're logged in it's still http! This is driving me crazy!

    Did web developers find a way to hide the "s"? I don't think they did. This is the way I've been taught how the internet works since day 1 I used the web.
    Last edited by Corey; 09-14-11 at 01:50 PM.

  2. #2
    rfr3sh
    Blind Knucklehead
    rfr3sh's Avatar Become A Pro!
    Join Date: 11-07-09
    Posts: 10,229
    Betpoints: 604

    im sure a hacker isnt targeting your SIA account

  3. #3
    Bill Dozer
    @BillDozer110
    Bill Dozer's Avatar Become A Pro!
    Join Date: 07-12-05
    Posts: 10,894
    Betpoints: 21705

    I think they are telling you that the frame for logging in is https but you don't see it in the page you start from.

    Look at facebook. It's the same. https://www.facebook.com/login.php?login_attempt=1 but then when you are in it is http://www.facebook.com/

    Their login form isL form action="https://secure.sportsinteraction.com/" method="post" name="login" id="loginform" class="clientLoginForm

  4. #4
    SportsMushroom
    SportsMushroom's Avatar Become A Pro!
    Join Date: 09-28-10
    Posts: 4,177
    Betpoints: 6839

    you sound like a paranoid lunatic

    their response makes sense to me

  5. #5
    pavyracer
    MOLON LABE
    pavyracer's Avatar SBR PRO
    Join Date: 04-12-07
    Posts: 82,189
    Betpoints: 410

    Pay attention guys. When all you do is watch Justin7's videos you turn into a paranoid like this tool.

  6. #6
    bigboydan
    bigboydan's Avatar Become A Pro!
    Join Date: 08-10-05
    Posts: 55,425

    Quote Originally Posted by SportsMushroom View Post
    you sound like a paranoid lunatic

    their response makes sense to me
    That might be however I can understand this gentlemen's concern regarding security type issues sir. I can't fault anyone for being extra careful especially when I've heard horror stories over the years where players have had there accounts hacked into.

  7. #7
    Corey
    Watching all of Justin7's SBR.tv videos
    Corey's Avatar Become A Pro!
    Join Date: 11-25-08
    Posts: 85
    Betpoints: 42

    I was wondering if a new http innovation allowed for this. I miss the old days when there was an icon (the locked lock) which showed that your session was encrypted. Just trying to figure out if this is all OK. Glad that Bill Dozer took me seriously enough to reply unlike the rest of you guys. I wish HTML and browsers were like they were, but they aren't. (Newer isn't always better)

    If you think this can't happen, or the probability is so low that a hacker would happen to be looking at your connection when you actually login, well, Cake Poker had 2 problems with SSL. First of all their VIP Points store had no SSL and people noticed it. Second of all their actual poker software failed to encrypt ANYTHING for YEARS until someone at PokerTableRatings looked into it and found that out. Cake then patched their software. Ultimate Bet had the same problem pre-black friday. So this CAN happen! Just because the probability of an exploit is very low (but not zero) is not a reason to dismiss it!

    So Thanks again for your reassurances Bill Dozer
    Last edited by Corey; 09-15-11 at 07:28 PM.

  8. #8
    Corey
    Watching all of Justin7's SBR.tv videos
    Corey's Avatar Become A Pro!
    Join Date: 11-25-08
    Posts: 85
    Betpoints: 42

    Quote Originally Posted by pavyracer View Post
    Pay attention guys. When all you do is watch Justin7's videos you turn into a paranoid like this tool.
    LOL, I gave up on trying to figure out sports betting a few years back. Forgot about that tagline in my promo. I wish I was as smart as Justin7 so that I could make money betting sports, but I'm not

    So be fair to Justin, has nothing to do with that.

Top