Using VPN? Why?

[Glenn]

Guys,

Just because your anti-virus software keeps prompting you to use their VPN doesn't mean you should.  Nowadays, all sites use https - a secure communication method with your computer.  That is sufficient security in most instances, except public wi-fi such as libraries, hotels, and restaurants. In which case, you SHOULD use a VPN.

 

Otherwise, turn it off. It's not necessary.

 

Why?

 

Our site uses sophisticated security methods to block hackers and spammers, who often use VPNs to cloak their IP addresses.  The thing is, VPNs are often blocked due to this security risk.  Ergo, if you use a VPN, you risk being blocked from BassResource!

 

The Details

 

Hackers and bad bots continue to evolve and are becoming more sophisticated and designed to evade detection of less sophisticated bot protection solutions. Evasive Bad Bots account for the majority of bad bot traffic (65.6%). This breed of bot is a grouping of both moderate and advanced bad bots that can evade common defenses. They use the latest evasion techniques, including cycling through random IPs, entering through anonymous proxies, changing their identities, mimicking human behavior, delaying requests, and more.

 

Many of these bots use the same VPN IP's and anonymous proxies you may use to hide your browsing behavior. BassResource blocks these IP's and proxies.  This means sometimes you may be blocked as well.

 

I strongly urge you to whitelist BassResource.com if you use these systems to avoid using blocked IPs or proxies when visiting BassResource.

 

How To Secure Your Account On BassResource

BassResource has offered optional two-factor authorization (2FA) for several years. 2FA requires an additional login credential – beyond just the username and password – to gain account access. 2-Step Verification provides stronger security for your BassResource Account by requiring a second step of verification when you sign in. With 2FA, a potential compromise of just one of these factors won’t unlock the account. So, even if your password is stolen or your phone is lost, the chances of someone else having your second-factor information is highly unlikely.

 

Enabling 2FA For Your Account

To enable 2FA, click your name on the upper right, then click "Account Settings", then click "Security and Privacy". You will be prompted for your password.

 

Next, choose which 2FA method you prefer.  In addition to your password, you can use one of two options to enable 2FA:

• You can answer a question you created and only you will know the answer, or
• Enter a code generated by the Google Authenticator app on your phone.

Click "Enable" and follow the prompts to set up 2FA.

 

Both of these options were presented to you if you created your account after 2015, or you were notified when we initially enabled these protocols if your account is older than that. However, after that occurred, you were not reminded that 2FA was available.  Today, that changes.

 

Upon initial login of a new session, you will be reminded to use 2FA if you do not currently use it.  2FA is optional and you are not required to use it, but note the reminder will appear each time you login.  We believe this notification will help you keep your account secure, and give you peace of mind that BassResource is keeping your best interests in mind - as we always have throughout the decades.

 

Hope that helps!

 

Glenn May

Founder/Owner

BassResource.com

[immortl]

My use case is using VPN (proton VPN) on my phone when I'm on a cellular network to block ads and for general  security when on Verizon's network.  I do a lot of reading on my phone and don't get how folks deal with the constant barrage of ads (not here on bassresource, but elsewhere).  Other times I'm on VPN for work.  Don't have issues with the work VPN, but Proton, sometimes I do.

 

I fully understand that the 'common' public IP I'm behind when on Proton VPN specifically sometimes causes me issues accessing sites if the IP has been blocked.  I usually run into the issue here as you stated, losing my ability to browse bassresource when I'm out and about with family at doc appointments etc...  Note - VPN also screws with android auto wireless connectivity.  Sometimes I get through to bassresource, usually I'm blocked.  I get it.  If I need my fix I'll turn VPN off while browsing the site, otherwise I browse when back home where I don't run VPN because pi-hole takes care of ads for me.

 

Depending on how paranoid one is, it could be argued that VPN does help prevent your ISP from tracking your browsing habits.  Instead your VPN provider gets to track it if they do.  I am a network security engineer, so I sometimes get into the weeds a bit 'covering my tracks' and configuring things to limit data tracking and collating and whatnot.

 

Note - the ad blocking does NOT seem to block ads here and the ads here are not intrusive like everywhere else on the internet.

[Glenn]

Thanks @immortl  If anything, you just bolstered the reason why nobody needs to access BassResource via a VPN, and that ads on BassResource don't need to be blocked.

 

 

[Cgolf]

On 5/23/2023 at 6:23 PM, Glenn said:

Thanks @immortl  If anything, you just bolstered the reason why nobody needs to access BassResource via a VPN, and that ads on BassResource don't need to be blocked.

 

 

 

Curious, I am posting now from my work computer that has VPN setup to access network drives at work when working remotely. Should I not be using that computer to post? Until my latest thread I would have never seen this because I live on the tackle thread.

[Glenn]

I'm not saying you CAN'T use it, but you may have issues accessing the site if you do.  

[MN Fisher]

^ Depending on your VPN service - some of the IPs they assign your 'secure' connection will show up in lists that HTTPS servers have flagged. So those IPs won't be able to access BR at all.

 

 

[Glenn]

^^ this ^^

[padlin]

Glenn, you mention the extra login security available , what would be the reason/s for worrying about someone stealing my info or logging on as me here on the forum? It’s not like you have access to my financial or health info. Thanks

[Glenn]

That's a good question.  There really isn't any risk to your critical personal information, however some folks are very careful about everything they do online, and this provides them the option to add that extra security layer.