# Orgones Forum security details **URL:** \ **Category:** Forum Tips and Feedback\ **Created:** [August 23, 2018, 11:11pm UTC](https://forum.orgones.co.uk/t/orgones-forum-security-details/40 "2018-08-23T23:11:00Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![Adam](https://forum.orgones.co.uk/user_avatar/forum.orgones.co.uk/adam/32/3_2.png) [@Adam](https://forum.orgones.co.uk/u/Adam)\ **Post date:** [August 23, 2018, 11:11pm UTC](https://forum.orgones.co.uk/t/orgones-forum-security-details/40/1 "2018-08-23T23:11:00Z")
For one reason another, orgone and orgonite forums have been maliciously targeted in the past, often with disastrous consequences. We take security very seriously, and have deployed a host of features designed to prevent disruption. ## DDoS mitigation ![](https://forum.orgones.co.uk/uploads/default/original/1X/b0e9f75797503fa27f7ceb4cb8a70985acdd2fe6.png) > A distributed denial-of-service (DDoS) attack is a malicious attempt to disrupt normal traffic of a targeted server, service or network by overwhelming the target or its surrounding infrastructure with a flood of Internet traffic. DDoS attacks achieve effectiveness by utilizing multiple compromised computer systems as sources of attack traffic. Exploited machines can include computers and other networked resources such as IoT devices. From a high level, a DDoS attack is like a traffic jam clogging up with highway, preventing regular traffic from arriving at its desired destination. > [_Source_](https://www.cloudflare.com/learning/ddos/what-is-a-ddos-attack/) We employ [cloudflare](https://www.cloudflare.com/learning/ddos/ddos-mitigation/) to mitigate any attempted DDoS attacks. ## Two Factor Authentication [https://forum.orgones.co.uk/uploads/default/original/1X/b3543bb6942fb37b06286fdd1d06b5945e597bca.mp4](https://forum.orgones.co.uk/uploads/default/original/1X/b3543bb6942fb37b06286fdd1d06b5945e597bca.mp4) We offer users the option of securing their account via Two Factor Authentication (2FA). This can be enabled it in your _user preferences_, and simply involves using a free Android or iOS authenticator app such as _Google Authenticator_ on your smartphone to authorise any sign-in attempts, as demonstrated in the above video. This stops anyone who may have your password from being able to sign in to your account. Currently this option is optional for forum users, but we strongly recommend enabling it. All Leaders, Admins and Moderators on this forum have to use 2FA. ## 100% open source platform ![22](https://forum.orgones.co.uk/uploads/default/original/1X/08d9afd20255152cc380b6434207183b663f3bfe.png) We have partnered with [Discourse](https://www.discourse.org), who publish the [source code](https://github.com/discourse) for the forum software publicly. This primarily stimulates development, but also ensures that there are no nasty hidden things going on. ## Security exploit bounty program ![31](https://forum.orgones.co.uk/uploads/default/original/1X/ddca14dcd1255b690fc78ab30a19828a48134279.png) Going one step further than only publishing the source code, Discourse offer [bounty payments](https://hackerone.com/discourse) for security holes found in the forum software. This results in security experts continuously pouring over the source code looking for potential exploits. If one is found, a bounty is paid by Discourse to the person who found it, and Discourse release a security patch. ## Secure password storage The PBKDF2 algorithm is used to encrypt salted passwords. This algorithm is blessed by NIST. Security experts [tend to agree that PBKDF2 is a secure choice](https://security.stackexchange.com/questions/4781/do-any-security-experts-recommend-bcrypt-for-password-storage). The hashing algorithm used is sha256 and number of iterations to run is 64000. ## On-site and off-site daily backups There are measures built into the forum to restore content and data should anything ever happen to corrupt it, but as a last resort we can fully restore the forum from backups that are made both on-site and off-site every day. ## And much more… [Browser exploits, XSS and CSRF](https://github.com/discourse/discourse/blob/master/docs/SECURITY.md) are all mitigated against as standard. ---
**Author:** ![Adam](https://forum.orgones.co.uk/user_avatar/forum.orgones.co.uk/adam/32/3_2.png) [@Adam](https://forum.orgones.co.uk/u/Adam)\ **Post date:** [August 23, 2018, 11:17pm UTC](https://forum.orgones.co.uk/t/orgones-forum-security-details/40/2 "2018-08-23T23:17:38Z")