That’s a good point Shirley – market statistics. We don’t have them. I have to cobble them together from here and there, and find ways to piece them together into a logical format. That’s not appropriate.

That’s a good point Shirley – market statistics. We don’t have them. I have to cobble them together from here and there, and find ways to piece them together into a logical format. That’s not appropriate.

The timeout issue also puzzling as I don’t fathom any good reason why you would timed out any different from a PC user except to create an incentive to move to a PC. Weird answer from Rap’s support staff.

My point on Rap’s choice of security solutions is simple: it works fairly well in environments where people would NOT give out IDs and passwords (banking). Your situation is opposite where people are, unfortunately, giving out IDs and passwords. Different problem, different solution required.

Have a great weekend and I hope things do get better (although hope is not a very good strategy).

The timeout issue also puzzling as I don’t fathom any good reason why you would timed out any different from a PC user except to create an incentive to move to a PC. Weird answer from Rap’s support staff.

My point on Rap’s choice of security solutions is simple: it works fairly well in environments where people would NOT give out IDs and passwords (banking). Your situation is opposite where people are, unfortunately, giving out IDs and passwords. Different problem, different solution required.

Have a great weekend and I hope things do get better (although hope is not a very good strategy).

Yes, Rapattoni can reconfigure the application timeouts. It’s – I believe – two hours with PC users, but because they underestimated the number of Mac users in the New River Valley (was told this by a member of their support staff) they’ve restricted it to somewhere between 10-12 minutes. Some users have found 10, personally I’ve found 12. Nevertheless, it’s too short.

The saga continues. Can I interest anyone in a Yugo?

Yes, Rapattoni can reconfigure the application timeouts. It’s – I believe – two hours with PC users, but because they underestimated the number of Mac users in the New River Valley (was told this by a member of their support staff) they’ve restricted it to somewhere between 10-12 minutes. Some users have found 10, personally I’ve found 12. Nevertheless, it’s too short.

The saga continues. Can I interest anyone in a Yugo?

Not unsecure as it offers a degree of security stronger than relying on IDs and passwords only as well as heightens awareness of security for the entire user population. But… and this a big one… Rapattoni’s claim of strong authentication simply falls flat when you match up the security requirements against their application of the RSA adaptive authentication. The claim made by them is it is used by financial institutions which is true. Here comes another .but…. the financial institution is trying to protect against fraud from stolen credentials without an expectation of the end user actively sharing the login credentials with another person.

In NRV situation as in many other subscription-based online service models, the issue is the active (and potentially passive) sharing of login credentials. MLS participants sharing access to the MLS system for one reason or another (all bad reasons, btw).

My point was aimed more at the unfortunate misapplication of a security solution rather than a shot at the security solution itself. “can’t blame MasterLock if someone hangs one of their locks on the handle of the Yugo and expects the Yugo to be theft-proof.”

From an application timeout standpoint, 12 minutes does sound like a very short time and should be something immediately addressed by your MLS committee. As a balance between convenience and security, we suggest a 30 min inactivity timeout as a reasonable compromise for most MLS customers. I believe, but don’t quote me, the Rapattoni MLS system is configurable for application timeouts.

Again – full disclosure – Clareity Security provides the industry standard for Real Estate information security with many successful integrations including protecting customers using the FBS’ flexMLS system.

Not unsecure as it offers a degree of security stronger than relying on IDs and passwords only as well as heightens awareness of security for the entire user population. But… and this a big one… Rapattoni’s claim of strong authentication simply falls flat when you match up the security requirements against their application of the RSA adaptive authentication. The claim made by them is it is used by financial institutions which is true. Here comes another .but…. the financial institution is trying to protect against fraud from stolen credentials without an expectation of the end user actively sharing the login credentials with another person.

In NRV situation as in many other subscription-based online service models, the issue is the active (and potentially passive) sharing of login credentials. MLS participants sharing access to the MLS system for one reason or another (all bad reasons, btw).

My point was aimed more at the unfortunate misapplication of a security solution rather than a shot at the security solution itself. “can’t blame MasterLock if someone hangs one of their locks on the handle of the Yugo and expects the Yugo to be theft-proof.”

From an application timeout standpoint, 12 minutes does sound like a very short time and should be something immediately addressed by your MLS committee. As a balance between convenience and security, we suggest a 30 min inactivity timeout as a reasonable compromise for most MLS customers. I believe, but don’t quote me, the Rapattoni MLS system is configurable for application timeouts.

Again – full disclosure – Clareity Security provides the industry standard for Real Estate information security with many successful integrations including protecting customers using the FBS’ flexMLS system.