GHIN digital profile

[nsxguy]

2 minutes ago, ThinkingPlus said:

Why would you no longer get revision updates?

 

Your handicap changes every time you play.

 

I can't imagine the association would send out an email every time you record a score.  But then.

 

But if that becomes the case *I'll* mark them as spam.

[ThinkingPlus]

12 minutes ago, nsxguy said:

 

Your handicap changes every time you play.

 

I can't imagine the association would send out an email every time you record a score.  But then.

 

But if that becomes the case *I'll* mark them as spam.

Agree, but WHS has been in effect for a year with index changes (potentially) every day and I still get the revision updates.  All this variation in interaction we are seeing is state association specific.

[bladehunter]

54 minutes ago, nsxguy said:

 

 

So we've now gotten the culprit.

 

It's your local association who dropped the ball.

 

They send you DAILY emails so they had your email addy.

 

Yet they didn't coordinate with USGA/GHIN by giving them your CLUB members' email addresses.

 

Once GHIN GOT the email addy they notified you to set up your profile.

 

Case closed.

Oh yea. It was my idiots who didn’t tell anyone.  Sorry I didn’t mean to give them any slack.  
 

but until it was required, I didn’t want them to. Lol  and contemplated not keeping a handicap anymore and not giving it to them.    If it weren’t for the state and USga level qualifying requiring an index to support level of play , I wouldn’t have formed the login.   So the local association was doing what I preferred really.  To be left alone. Where they failed was In relaying the message that the requirements were changing.  

[jmkenn0]

The USGA was one "hack" away from having a mess on its hands - if I had the time and inclination I could have posted 20 69's (LOL) to every active GHIN # with a pretty simple script. 

 

Plus don't you guys have "burner" email accounts?

[bladehunter]

On 2/2/2021 at 8:17 AM, jmkenn0 said:

The USGA was one "hack" away from having a mess on its hands - if I had the time and inclination I could have posted 20 69's (LOL) to every active GHIN # with a pretty simple script. 

 

Plus don't you guys have "burner" email accounts?

What would I need a burner email for ? Another password to forget ? 

[BlackDiamondPar5]

55 minutes ago, bladehunter said:

What would I need a burner email for ? Another password to forget ? 

In case you didn't want to use your personal email-- you could just signup for a free Google acct like a user name like BladeGHIN or something (edit: I forgot to say and a simple unforgettable password) .... LOL

 

I know you don't like the change but seriously handicaps were at risk.  A prankster with a bit of computer savvy could have altered yours and thousands of others with a script and enter 20 bogus scores, which render handicaps useless.  That would be a nightmare and negligent on USGA's part.

 

Also in another thread I saw you complaining about you getting a bunch of emails from the USGA.  That's odd because my local association only sends 2 per month and it's about my handicap and any local events.  You can unsubscribe from any of them--- there is usually a link at the bottom of the email and you won't be bothered again.

Edited February 3, 2021 by BlackDiamondPar5

[sui generis]

50 minutes ago, bladehunter said:

What would I need a burner email for ? Another password to forget ? 

 

The password for burner email accounts is password. 😉

[bladehunter]

1 minute ago, BlackDiamondPar5 said:

In case you didn't want to use your personal email-- you could just signup for a free Google acct like a user name like BladeGHIN or something.... LOL

 

I know you don't like the change but seriously handicaps were at risk.  A prankster with a bit of computer savvy could have altered yours and thousands of others with a script and enter 20 bogus scores, which render handicaps useless.  That would be a nightmare and negligent on USGA's part.

 

Also in another thread I saw you complaining about you getting a bunch of emails from the USGA.  That's odd because my local association only sends 2 per month and it's about my handicap and any local events.  You can unsubscribe from any of them--- there is usually a link at the bottom of the email and you won't be bothered again.

Lol. I don’t have time for opting out . I have to go allocate some more bandwidth to my email account to take it back under storage quota ! ( true story ).  
 

 

I suppose it was possible. But sure did work fine for years as is. 
 

maybe I just don’t value the handicap enough. It’s not even in the top 10 things golf related that I value.  If somebody hacked mine I’d laugh.  Then go get the scores removed by the association admin. 

[bladehunter]

4 minutes ago, sui generis said:

 

The password for burner email accounts is password. 😉

Touché 

[nsxguy]

On 2/2/2021 at 8:17 AM, jmkenn0 said:

The USGA was one "hack" away from having a mess on its hands - if I had the time and inclination I could have posted 20 69's (LOL) to every active GHIN # with a pretty simple script. 

 

Plus don't you guys have "burner" email accounts?

 

You're assuming GHIN doesn't have a way to detect such things.

 

In the grand scope of things, a pretty simple script is also a pretty easy thing to detect - and stop.

[BlackDiamondPar5]

2 hours ago, nsxguy said:

 

You're assuming GHIN doesn't have a way to detect such things.

 

In the grand scope of things, a pretty simple script is also a pretty easy thing to detect - and stop.

Sure in a real, properly run It organization that would be the case. Remember the GHIN app was down for 3-4 weeks 3 years ago because someone lost the code or screwed it up. I'd bet they had no such ability to detect and block an attack. 

[nsxguy]

49 minutes ago, BlackDiamondPar5 said:

Sure in a real, properly run It organization that would be the case. Remember the GHIN app was down for 3-4 weeks 3 years ago because someone lost the code or screwed it up. I'd bet they had no such ability to detect and block an attack. 

 

Ahhhhhhh, a USGA "hater".

 

Gotcha. (But I'd take that bet )

[jmkenn0]

20 hours ago, nsxguy said:

 

You're assuming GHIN doesn't have a way to detect such things.

 

In the grand scope of things, a pretty simple script is also a pretty easy thing to detect - and stop.

 

Yeah - the group that just got around to putting in passwords in 2021 to enter transactional data was definitely on top of their cyber posture.

[nsxguy]

1 hour ago, jmkenn0 said:

 

Yeah - the group that just got around to putting in passwords in 2021 to enter transactional data was definitely on top of their cyber posture.

 

If you were in charge of protecting data that "nobody" cared about; that nobody else could make any $$$ off of, and data that contained, other than a person's name, zero personally identifiable information, I have to wonder how carefully you'd protect the data.

 

Then again, there's no evidence that this particular threat (software streaming hundreds of thousands of spurious transactions, one after the other), wasn't protected against anyway.

 

I believe it's extremely easy to detect something like that.

 

But maybe you're right,,,,,,,,,, I doubt it,,,,,,,,,, but it's possible. ¯\_(ツ)_/¯

[jmkenn0]

1 hour ago, nsxguy said:

 

If you were in charge of protecting data that "nobody" cared about; that nobody else could make any $$$ off of, and data that contained, other than a person's name, zero personally identifiable information, I have to wonder how carefully you'd protect the data.

 

Then again, there's no evidence that this particular threat (software streaming hundreds of thousands of spurious transactions, one after the other), wasn't protected against anyway.

 

I believe it's extremely easy to detect something like that.

 

But maybe you're right,,,,,,,,,, I doubt it,,,,,,,,,, but it's possible. ¯\_(ツ)_/¯

 

The USGA's annual revenue is $211 million - they are a non-profit entity.  They have been woefully behind the times from a technological standpoint.  But sure, they left an easily identified risk wide-open because they were proactively monitoring and could immediately respond to an attack using their own front-end?  ¯\_(ツ)_/¯

[nsxguy]

5 minutes ago, jmkenn0 said:

 

The USGA's annual revenue is $211 million - they are a non-profit entity.  They have been woefully behind the times from a technological standpoint.  But sure, they left an easily identified risk wide-open because they were proactively monitoring and could immediately respond to an attack using their own front-end?  ¯\_(ツ)_/¯

 

But we don't know whether or not the USGA left "an easily identified risk wide-open". The earlier poster posted an "idea".

 

"Woefully behind the times" or not I expect there are certain protections that every online site has built-in,,,,, whether they even know it or not.

 

Among them, I believe, would be a process to detect a flood of transactions coming from the same place - especially if a flood of transactions was not an expected event.

 

The site itself likely wouldn't have to do anything as their host's software should detect such a thing.

 

Presumably the host would contact the site owner if it happened. More likely a procedure would already be in place to protect against such an "attack" as proposed earlier.

 

But if not, surely the host would immediately contact the site owner.

 

I would expect this sort of procedure would be considered pretty basic but my experience in IT is mostly mainframe and MF communications so it does not extend to all things "internet". 👍

[GSDriver]

On 1/26/2021 at 8:33 AM, bladehunter said:

It irked me too.  I still haven’t created a login to get back in.  And may not. Makes me mad to Have to revamp something that was working at the touch of a button.  It’s a fix of something that wasn’t broken.  Why do i need my damn ghin account to  be more secure ? 
 

ill have to call in to get the ghin number , just a hassle.  

Yup done with USGA...not using their stupid app, not renewing membership ever again, as I refuse to play in tournaments due to ridiculously slow play, eff'em don't need their app or a handicap for that matter.

[BlackDiamondPar5]

On 2/7/2021 at 3:26 PM, nsxguy said:

 

Ahhhhhhh, a USGA "hater".

 

Gotcha. (But I'd take that bet )

Not a hater but not a bootlicker either. I'm objective enough to praise or criticize anyone or any entity for their actions. I don't chose sides based on affiliation, adoration or dislike. I just call each matter as I see it based on the preponderance of information.

[nsxguy]

7 hours ago, BlackDiamondPar5 said:

Not a hater but not a bootlicker either. I'm objective enough to praise or criticize anyone or any entity for their actions. I don't chose sides based on affiliation, adoration or dislike. I just call each matter as I see it based on the preponderance of information.

 

No problem, I think we all do.

 

But we I often find myself "bowing" to someone of greater experience in matters of opinion.

 

I've played golf for many many years and I have opinions on all things golf. That doesn't make ME right and the USGA wrong. I might be critical of something yet not know the ins and outs of the situation.

 

I worked for a car rental company for 20 years. Doesn't make me an expert on renting cars. ¯\_(ツ)_/¯

 

[rogolf]

22 minutes ago, nsxguy said:

 

No problem, I think we all do.

 

But we I often find myself "bowing" to someone of greater experience in matters of opinion.

 

I've played golf for many many years and I have opinions on all things golf. That doesn't make ME right and the USGA wrong. I might be critical of something yet not know the ins and outs of the situation.

 

I worked for a car rental company for 20 years. Doesn't make me an expert on renting cars. ¯\_(ツ)_/¯

 

It's very hard, if not impossible, for any national organization to please everyone.  Each organization has its own core values which they adhere to and may differ from any individual's personal values.