Handy Cap - Check your handicap history on Android... and now iOS!

[Shreko]

Yeah I heard through the grapevine a while back that this may be coming in. Will just have to wait and see how it pans out I guess. Certainly doesn't look good for the future of Handy Cap though sorry guys. Bit of a shame, I was halfway through re-writing it from scratch with a heap of new features.

Is a bloody great APP mate, typical that something this good gets possibly made redundant by others looking to profit!!!!

[BGH]

App seems to still be working for now after the GA change. Fingers crossed.

[BUSHY]

App seems to still be working for now after the GA change. Fingers crossed.

Not sure it has been turned on yet as they say...

"The first time you use the handicapping service on www.golf.org.au from Tuesday 4 September you will automatically be presented with a short on-line form that you will need to enter a few details into (including your email address)."


I just logged in and wasnt presented with any short form. Typical GA i suppose

[BGH]

Not sure it has been turned on yet as they say...

"The first time you use the handicapping service on www.golf.org.au from Tuesday 4 September you will automatically be presented with a short on-line form that you will need to enter a few details into (including your email address)."


I just logged in and wasnt presented with any short form. Typical GA i suppose

For me is only seems to happen once you actually try to check your handicap.

[Sydney Hacker]

Mine is still coming up without logging in, so finger crossed, but you might like to hold off on the champers just yet.

[Steve57]

Mine is still coming up without logging in, so finger crossed, but you might like to hold off on the champers just yet.

Mine is exactly the same!

[PeteyD]

Mine prompted a registration form, filled in and now can't get on. Stupid thing.

[henno]

My golflink page also prompted a registration, and I have concerns about their backend security. The password can only be letters or numbers and cannot contain any special characters and they are actively rejecting the form submission if you try to include them. This is a real security oversight in this day and age; 8-digit alphanumeric passwords are notoriously weak for brute force attacks, particularly using rainbow tables.

With an rookie oversight like that, I wouldn't at all be surprised if their backend is not properly salting and hashing passwords in the database either and even storing them in plaintext. I'd highly recommend using a password unique to golflink, and a very long one as length always trumps complexity. Definitely don't use a common password you use elsewhere (not that you should ever do that anyway).

[LeftyHoges]

My golflink page also prompted a registration, and I have concerns about their backend security. The password can only be letters or numbers and cannot contain any special characters and they are actively rejecting the form submission if you try to include them. This is a real security oversight in this day and age; 8-digit alphanumeric passwords are notoriously weak for brute force attacks, particularly using rainbow tables.

With an rookie oversight like that, I wouldn't at all be surprised if their backend is not roperly salting and hashing passwords in the database either and even storing them in plaintext. I'd highly recommend using a password unique to golflink, and a very long one as length always trumps complexity. Definitely don't use a common password you use elsewhere (not that you should ever do that anyway).

Jesus, really!?!?

****ing morons.

[henno]

Jesus, really!?!?

****ing morons.

Really. I am somewhat hoping they are storing passwords in plain text as I submitted mine as 'YourPasswordSecuritySucksAbout100Dicks'.

[Maxbxl]

App is still updating h'caps. So far so good.

[BUSHY]

Really. I am somewhat hoping they are storing passwords in plain text as I submitted mine as 'YourPasswordSecuritySucksAbout100Dicks'.

I’m gonna try that too. Dickheads.

[coalesce]

Really. I am somewhat hoping they are storing passwords in plain text as I submitted mine as 'YourPasswordSecuritySucksAbout100Dicks'.

I’m gonna try that too. Dickheads.

We just need your email addresses now to be able to log in and do nothing with with your handicap information!

[BUSHY]

We just need your email addresses now to be able to log in and do nothing with with your handicap information!

The point is about using similar passwords, if security is shit they can quite easily get into other things that use the same email.

[WBennett]

My golflink page also prompted a registration, and I have concerns about their backend security. The password can only be letters or numbers and cannot contain any special characters and they are actively rejecting the form submission if you try to include them. This is a real security oversight in this day and age; 8-digit alphanumeric passwords are notoriously weak for brute force attacks, particularly using rainbow tables.

With an rookie oversight like that, I wouldn't at all be surprised if their backend is not roperly salting and hashing passwords in the database either and even storing them in plaintext. I'd highly recommend using a password unique to golflink, and a very long one as length always trumps complexity. Definitely don't use a common password you use elsewhere (not that you should ever do that anyway).

Henno, I am going to borrow this and hit the GA Facebook page. They are ****tards

[henno]

Henno, I am going to borrow this and hit the GA Facebook page. They are ****tards

I've already posted there earlier this morning. Look in the 'Visitors Posts' if you want to get on board.

EDIT: Linky: https://www.facebook.com/GolfAust/po...06399149411399

[WBennett]

Thanks Henno. I've also let their surprisingly active social media team know via twitter.

[henno]

Thanks Henno. I've also let their surprisingly active social media team know via twitter.

Mucho irony, from the bowels of 2012:

[PeteyD]

****ing useless heap of shit.

[PeteyD]

Has anyone actually registered? Email and mobile phone number is a bit ****ing much.

[henno]

Updates:




Reference imagery:

[BUSHY]

[Dcanto]

Ultimate rush job. 🙄

[Ferrins]

Got me off 35hcp, bring on the Champs!

[Daves]

What a Total FU.

I register, and then try to login. Tells me my user name or password are invalid. I persist without result, so try forgot password, only to find they are supposed to send a validation email apparently, which I still haven't got??