e-CAS Trucker-

[doctorkb]

Again, a lack of understanding of two things are being shown:

1. there is nothing worth being too private about on e-CAS
2. the actual mechanism for "security"

Just because you have "transactional encryption" when you access e-CAS doesn't mean your data is secure.  It just means it's secure from someone between you and the e-CAS servers eavesdropping your session.

The system you're using could be compromised (especially if it is your employer's or an internet cafe's -- those systems often have screen capture software installed to monitor for illicit behaviour).  Alternatively, an individual could make a hacking attempt directly on the CIC's servers and likely find more information than e-CAS even displays.

While I can see how there might be a slight concern, technically, there is no need for one.  This forum site does not use such encryption... yet you still posted to it (and also described your application dates and methods).

Are you on Facebook?  If so, there's more information about you there than you'd ever find in Matthew's site or in e-CAS.

All I'm suggesting is that you THINK a little first...

[MandiF]

Everyone has to make their own decision about whether or not to use Matthewc's eCas Tracker. If you don't feel comfortable don't use it.

He has put together a great programme to try and help others out from the craziness of checking eCas everyday and i think its great and thank you Matthewc for putting this together.

But he is not making anyone use it, if you want to use it do, have an easier life, if you don't trust it or have concerns about security, don't!

Easy!

 

[Cdagal]

Ok...maybe I am just tired..long day..but has this forum really become an area for racial bashing and berating each other? Did we regress to grade school? Of all the places, I would have expected a higher level of respect here. It is one thing to have a differing opinion - that is the primary reason that we are here...to share our personal views and experiences. Leave the rudeness outside, it is hardly necessary.

[odin2404]

I'm showing you an amazing amount of restraint.  What you are showing me is that, culturally, the India call centre experience is actually a problem of cultural differences.

You show a distrust of anything someone more knowledgeable could say -- "nothing you say is gonna make me..." and furthermore, refuse to acknowledge that the personal information shown in e-CAS is hardly "personal" any more.

If you don't want to share it, fine... your loss.  But I would really hate to see Matthew get discouraged from the accusations you (and others) have made, either intentionally or unintentionally, on this thread and shut down his VERY useful site.  At least he's contributing to society!

I'm just gonna drop it (coz you cannot)... it seems sharing of views and opinions is alright just as long as it pleases doctorkb.

And for the last time ....

I HAVE NOTHING AGAINST MATTHEW OR HIS TRACKER. IT IS A SECURITY CONCERN AS FAR AS I AM CONCERNED. I ONCE AGAIN APOLOGIZE TO MATTHEW IF MY REMARKS SEEM DISCOURAGING!

[matthewc]

Oh please people, find something more productive to do, even if you are bored waiting for PR.

The security certificate is from Start-SSL. https://ecas.carroll.org.uk shows no errors for me in any browser I've tried. If you're getting a warning somewhere else, e.g https://carroll.org.uk that's because my personal site isn't designed to be used over a secure connection by most people, so it doesn't matter if I'm using a self-signed certificate there. I actually went to the extra effort of using a Start-SSL certificate to get rid of any warnings, even though - get this - is makes NO DIFFERENCE to the level of security. To understand why, you need to understand how PKI certification works, and the difference between encryption and trust, and I'm not really in a teaching mood. Go google. Suffice to say, information transmitted between your browser and the tracker signup form is as secure as your bank, and *substantially* more secure than anything facebook does. Same goes between the tracker system and e-CAS when it checks e-CAS for you. SSL all the way.

The tracker intentionally stores the bare minimum amount of information necessary for it to work. That is by design. People might actually find it useful if it stored more (e.g. a record of what your e-CAS said when) but I really don't want to be storing all that extra personal information.

I really couldn't care less if anyone individually doesn't want to use the tracker, but please don't spread misinformation. If you're still intent on doing so, ask yourself "has anyone ever complained after using the tracker". You can be absolutely certain that if there was a problem, all the immigration forums would be plastered with first-hand warnings. It's been running 3 years, and over 1400 people have used it. The real irony is that if I charged for it, people would probably pay and be less suspicious.

The world is a fun place... go outside and experience it. Or if you're really in need of something to do online, how about sharing what you - as new Canadians - would want to see change in this country.

http://leadnow.ca

Matthew

[pyramid777]

Nice talk matthew... Don't mind those misinformed guys.

[dudebr]

WOW! way to go Matthew. 

[odin2404]

Wow Matthew very Eloquent

[j2m]

I was one of those neurotic people who had to check e-cas no less than 10 times a day. Even though I knew they only updated on Tuesdays. It was a horrible compulsive desire I could not help! Anyway, I signed up for e-cas tracker and it gave me my life back (LOL). It is AWESOME, I would recommend to anyone. As soon as I signed up I was able to breathe easier. BTW I got my notification from e-cas tracker at 4AM on "decision made".

[patiently_waiting]

Oh please people, find something more productive to do, even if you are bored waiting for PR.

The world is a fun place... go outside and experience it. Or if you're really in need of something to do online, how about sharing what you - as new Canadians - would want to see change in this country.

http://leadnow.ca

Matthew

Matthew you already know how much I appreciate your tracker so I know I don't have to tell you    Next time please don't suggest a discussion as to what people want to see change in this country.. I think a better subject such as a discussion as to how to integrate into this country would be much more suitable 

PS, I still think you are a legend for developing this site

[Tiggilicious]

I signed up a couple of weeks ago, and am thankful for him providing this free service to share with those who WANT to use it.

[dlmt]

Ok...maybe I am just tired..long day..but has this forum really become an area for racial bashing and berating each other? Did we regress to grade school? Of all the places, I would have expected a higher level of respect here. It is one thing to have a differing opinion - that is the primary reason that we are here...to share our personal views and experiences. Leave the rudeness outside, it is hardly necessary.

Couldn't have been said better - here, here!!!! 

[dlmt]

Oh please people, find something more productive to do, even if you are bored waiting for PR.

The security certificate is from Start-SSL. https://ecas.carroll.org.uk shows no errors for me in any browser I've tried. If you're getting a warning somewhere else, e.g https://carroll.org.uk that's because my personal site isn't designed to be used over a secure connection by most people, so it doesn't matter if I'm using a self-signed certificate there. I actually went to the extra effort of using a Start-SSL certificate to get rid of any warnings, even though - get this - is makes NO DIFFERENCE to the level of security. To understand why, you need to understand how PKI certification works, and the difference between encryption and trust, and I'm not really in a teaching mood. Go google. Suffice to say, information transmitted between your browser and the tracker signup form is as secure as your bank, and *substantially* more secure than anything facebook does. Same goes between the tracker system and e-CAS when it checks e-CAS for you. SSL all the way.

The tracker intentionally stores the bare minimum amount of information necessary for it to work. That is by design. People might actually find it useful if it stored more (e.g. a record of what your e-CAS said when) but I really don't want to be storing all that extra personal information.

I really couldn't care less if anyone individually doesn't want to use the tracker, but please don't spread misinformation. If you're still intent on doing so, ask yourself "has anyone ever complained after using the tracker". You can be absolutely certain that if there was a problem, all the immigration forums would be plastered with first-hand warnings. It's been running 3 years, and over 1400 people have used it. The real irony is that if I charged for it, people would probably pay and be less suspicious.

The world is a fun place... go outside and experience it. Or if you're really in need of something to do online, how about sharing what you - as new Canadians - would want to see change in this country.

http://leadnow.ca

Matthew

Thank you so much for creating the tracker system - it worked beautifully for me and provided valuable information. I also felt like I had won the lottery last week when I received a message from the tracker at 5:24am advising that a "decision had been made" - we landed yesterday. Thanks!!!!

[bonbon9]

Oh please people, find something more productive to do, even if you are bored waiting for PR.

The security certificate is from Start-SSL. https://ecas.carroll.org.uk shows no errors for me in any browser I've tried. If you're getting a warning somewhere else, e.g https://carroll.org.uk that's because my personal site isn't designed to be used over a secure connection by most people, so it doesn't matter if I'm using a self-signed certificate there. I actually went to the extra effort of using a Start-SSL certificate to get rid of any warnings, even though - get this - is makes NO DIFFERENCE to the level of security. To understand why, you need to understand how PKI certification works, and the difference between encryption and trust, and I'm not really in a teaching mood. Go google. Suffice to say, information transmitted between your browser and the tracker signup form is as secure as your bank, and *substantially* more secure than anything facebook does. Same goes between the tracker system and e-CAS when it checks e-CAS for you. SSL all the way.

The tracker intentionally stores the bare minimum amount of information necessary for it to work. That is by design. People might actually find it useful if it stored more (e.g. a record of what your e-CAS said when) but I really don't want to be storing all that extra personal information.

I really couldn't care less if anyone individually doesn't want to use the tracker, but please don't spread misinformation. If you're still intent on doing so, ask yourself "has anyone ever complained after using the tracker". You can be absolutely certain that if there was a problem, all the immigration forums would be plastered with first-hand warnings. It's been running 3 years, and over 1400 people have used it. The real irony is that if I charged for it, people would probably pay and be less suspicious.

The world is a fun place... go outside and experience it. Or if you're really in need of something to do online, how about sharing what you - as new Canadians - would want to see change in this country.

http://leadnow.ca

Matthew

I couldn't wait for you to answer, Matthew. Thanks for putting order here
And thanks a lot for the awesome tracker!