Online Security when joining a club

TheEnglishman

Call me old fashioned, but I'm looking to join a local road cycling club of good standing and reputation. They're a nice, welcoming bunch. So where's the problem, you say? Well it's to do with their application process. Everything is done online (what isn't these days) and you have to enter your home address. And it seems that every member can see every other members address once you've joined. Now that's the old fashioned bit - I'm not desperately keen on this as you wouldn't need to even hack the website (another source of concern as it's Joomla based, which doesn't have a great reputation what with all the dodgy plug ins that are out there) to gain access to a large list of locations of nice, shiny, most likely expensive, bicycles. Thieves love an easy life and to me investing £15 to get an up to date list of target locations would be money well spent.

Would you join? Would you even think of this? Am I just being overly cautious in my old age?

y33stu

Its a good point and worth the concern. Not sure bike thieves are that intelligent though. May be wrong. Would make me think twice.

red255

I guess this is a risk and reward question. You mention that the information you are supplying is name and address, that is little more than anyone can get on 192.com!!!

However, Your concerns are well founded, especially considering the potential of information leakage...I.e. your name, address, your are a cyclist, maybe a username that is the same as a ride mapping site, leads to regular ride times, etc, etc.

Joomla, is a cms, which you clearly know, but the problem with popular cms's like joomla and Drupal is the vulnerabilities are well known, and if the site admin does not maintain the latest version, they are very vulnerable.

Risk, loose your basic details, reward, join a good club ..... Maybe you could volunteer to become the Infosec officer

Tony

neddie

I'm a Club Secretary

And it seems that every member can see every other members address once you've joined

that is against data protection act unless every member has agreed and signed a wavier (to protect the club officials).

had this at ours because some twat said it was against his human rights NOT to know who was a member of the club, so he could go and pester them about how the club is run ( Its a model aircraft club btw).

Solicitors are expensive

team47b

False address

correct post code, wrong house number

parents address, assuming you don't live at home

any address where you don't keep a shiny bike

completely false name and address

my address :shock:

TheEnglishman

team47b wrote:

my address :shock:

red255

Or, to get some other cyclists address and bike info...Goto connect.garmin.com, find someone less concerned about information privacy (or less suspecting/knowledgable), choose the "ride home" route thy have publically visible. Look at the front door using google street view to get the house number and spend the next half hour wondering if any sites you use have the public tick box on as default.