CIS 560 Assessing Discussion Forum Access Controls
Assessing Discussion Forum Access Controls
Objective: The goal of this exercise is to evaluate the process of joining a discussion forum group to analyze their “access controls.”
Note: Do not use your primary, personal email address to sign up for the forum you select for this exercise. It is a good idea to have a secondary email address that can be used for this type of testing. Finally, please make sure that your virus and malware protection is up to date before you start this exercise.
The tools required to complete this exercise are an Internet browser and a search engine of your choice.
- Suggested browsers: Chrome, IE, and Firefox.
- Suggested search engines: Yahoo, Bing, Google, and Duckduckgo.
Please read all the instructions prior to starting this exercise.
- Using your favorite search engine, type in one of the following search requests:
- Forum best video card.
- Forum parenting tips.
- Forum best hikes.
- Alternatively, you can choose something in which you are very interested and on which you might want some additional insights. Once you have located an acceptable forum, please go to the folder or “thread,” where other users are discussing your selected topic. Make sure you are on a forum that asks you to “join” or “register” before you can create new posts or respond to posts created by other users.
- Pay close attention to the forum’s registration process. The steps that follow will help you chronicle your experience of gaining access to the forum. Note:You will be required to take screenshots for several of the following steps.
- Create a Word document. In the document, briefly state the topic you selected for your search and why you selected that topic. Then, provide the exact Web address of the forum where you registered to post.
- Briefly describe the forum as well as the types of discussions or questions being asked by the other users.
- Take screenshots of the verification process and paste the screenshots into your document. Did it have a CAPTCHA? Did it require two-factor identification? Do not proceed if you are not comfortable with sharing the information the site is asking you to provide. If this occurs, please select another topic or forum.
Locate the End User License Agreement (EULA) on your selected forum and paste it in the document. This is the legal document to which you are agreeing when you join. You can read it in all cases, and in some cases, you can also download it. In either case, make sure you include it with your submission