Announcements

Announcements

  • Mentoring Platform Maintenance - July 12 & 13

    Hello community, 

    In order to implement some new backend changes to the platform's reporting functionality, our mentoring platform will be down temporarily between 11:00 PM - 2:00 AM on both July 12th & 13th. 

    I don't anticipate this will impact many (if any) of you, as I'd hope you'd all be getting ready to go to bed at this point, however I still wanted to let you all know as it is a planned outage. 

    Justin
  • Security Update RE: User Uploaded Images

    We strive to continuously improve our online services in both functionality and security. To that end, our vendor who provides with with this online communities service performs regular security audits against software and 3rd party libraries.

     

    A recent audit produced two findings regarding images.

     

    The first finding relates to user-uploaded images; it has never been our practice to modify user contributed data. As such, any included Exchangeable Image File Format (EXIF) data was left intact. When a user takes a picture with a camera, supplemental metadata is stored in addition to the picture itself, such as the date, time, and camera settings. Bad actors could potentially glean a lot of information about a user from this data. To address this privacy concern, we are now removing this data by default. Please note this change will only apply to images uploaded after this release.

     

    The second change affects the HTML that can be added via the WYSIWYG editor. A bad actor could manually create an <img> tag link with a malicious tracking URL. After the fix is released, only images uploaded directly via the WYSIWYG editor will be displayed. If you would like to allow additional trusted image sources (such as Dropbox, for example) please reach out to me.

    The fixes for these issues will be released to this site in the first two weeks of March. If you have additional questions about this change, please feel free to reach out to me at any time.

    Justin

  • Scheduled Maintenance on 2/18/22

    Hello Community: 

    Our next scheduled maintenance for our community platform is coming up on February 18 from 11:00 PM to 3:00 AM EST .

    We typically perform these regular maintenance each quarter. This allows us to provide stable and secure systems for our members using this platform.

    The Online Community may experience sporadic connectivity during this maintenance window – but hopefully you are enjoying a well-earned weekend during these updates.