September 24, 2016 - Yahoo Confirms Massive Data Breach
It took 2 years for Yahoo to make it public, but they finally confirmed that credentials for about 500,000,000 Yahoo accounts were hacked and have been made available for purchase. If you are reading this, it is likely you are using ThreadThat to protect your digital communications. Are you safe? Well, that depends. Do you or did you have a Yahoo account? Did you use the same password for a Yahoo account as you use for TT? Is your TT username the same as your Yahoo email address? If you answer "no" to any of these, then no worries. Also, if you use TT's two-factor authentication, you are safe regardless. Have you registered a Yahoo email account with TT? What if someone gets control of that email account and tries to reset your TT password to get control of your TT account? You can prevent that too. Just disable password resets in your preferences. If you do this, just make sure you never lose your password, because even you won't be able to reset it.
August 30, 2016 - TT Automates Blocking of Hacking Attempts
TT is often a target of attempts to brute-force the password of its SQL Server back end. For the past year, I have been manually adding attacking IP addresses to a firewall rule that blocks further attempts. This is usually, however, after the attack is over. TT has two database servers and each has a complex, likely unbreakable, password. Regardless, it is unwanted network traffic and it must be dealt with. Most of the attacks appear to originate from China. As of today, all such attempts result in the offending IP address being instantly added to TT's firewall. This is just one more safeguard you get (for free) using TT.
July 31, 2016 - Email Address Verification
Many users have registered an email address on their TT account, but have not verified they own the email account. If your default TT email address has not been verified, you will be prompted to verify, change or remove it. This notification will display every time you visit the Threads page until corrective action is taken. To correct or remove an address, click the "My Addresses" tab in the menu bar from the Threads page. You are not required to have a registered email address to use TT, so if you cannot verify the one you specified when you created the account and don't have another you want to use, just delete it. If you need assistance, please contact me at email@example.com.
May 30, 2016 - NEW - Thumbnails
Now when you upload any image, a thumbnail is generated and stored in the TT database encrypted with the same key as the Thread itself. If you share your images via "untrusted" Threads (where the recipient clicks a link to get to your Thread without logging in), those users will now see thumbnails of your images instead of just a list of file names.
May 15, 2016 - NEW - Notification Email Preview Option
TT sends email notifications on your behalf to recipients of threads you create. Have you ever wanted to see how those are going to look before you click Send? Now you can. Once the "To:" and "Subject:" fields are entered, you can click the "Preview Notification Emails" button. A new window will be displayed with every email that is going to be sent by TT on your behalf. If you don't like what you see, then you can change the format of those emails (custom greeting, custom footer, suppression of TT generated text, etc.) from your preferences.
April 21, 2016 - Notification Email Enhancements
Email systems all over the world are being taught to reject or quarantine any email that even "hints" of SPAM. Often the email notifications sent by TT end up in the recipient's SPAM folder or are returned undeliverable. That means the recipient of your Thread might never see the notification. I have addressed that problem by making several configuration changes on the TT server as recommended by Google, Yahoo, AOL and Microsoft. New Thread notifications are now more likely to arrive in the user's inbox, although sometimes they may still end up in SPAM. As always, I recommend that you directly contact Thread recipients in the event that they do not open your Thread within a reasonable timeframe. If they don't see the TT notification, have them check their SPAM folder. Indicating to their mail client that the notification is not SPAM is often all that's necessary to make future notifications go to their inbox.
January 29, 2016 - Move to New Data Center Completed!!
The migration to the new Arvixe data center is complete. Sorry if this outage caused you inconvenience. The explanation from Arvixe is "This data center provides us with much better control over the whole hardware stack, including network and power options, which will result in improved stability and performance of the server".
December 2, 2015 - TT's Anniversary
December begins the 7th year that TT has been in operation. Since TT was moved to a virtual private server, it delivers 99% uptime and averages 1-2 seconds response from most countries. Although there are still sporadic attempts to break into the database servers, TT has never been breached. Every IP that attempts a break in is added to the firewall exception list which blocks future access. Thanks to all of you who continue to trust TT for your secure communications needs.
October 17, 2015 - Easy Thread Access Page Enhanced
If you use the "Untrusted" Thread option which allows users to share your Thread attachments without logging into TT, then you will be pleased to know that the page will now show who uploaded each attachment. This is especially helpful when collaborating on a project or using TT to share photos from multiple people. I have also made a few more improvements in the slideshow viewer. Now users that add images to a slideshow can permanently correct the orientation even if they don't own the Thread and correcting the orientation no longer halts the slideshow if it was in "Play" mode.
October 3, 2015 - Slideshow Viewer Enhanced
Now you can rotate images in the slideshow viewer! When uploading images from a mobile device, PC or tablet, the images may not be oriented properly when viewed via TT. Now you can change the image orientation in the slideshow viewer. The new orientation will be remembered for anyone else viewing the image via TT. A new button was added to the Add Attachment page to allow you to preview your images before you send out Thread notifications. While previewing the images, you can correct any orientation problems. Another convenient option I added is to reverse the display order (especially helpful when uploading many images for a slideshow).
September 13, 2015 - Thread Notifications Enhanced
If you have noticed that TT notification emails are being returned undeliverable even though the email address is valid, it may be that the recipient's email software is detecting that although the from address is yours, the server from where the email was sent has a domain of "@threadthat.com". Some email software considers that "spoofing". I have added an option to the Preferences page to resolve that problem. Simply fill in the Email "From" Override field. See the Preferences help for additional explanation and examples.
July 5, 2015 - File Upload Enhancement
When uploading files, you now have the option of replacing files with the same name. By default, if you do not check the "Allow Duplicate File Names" box, the file you upload will replace any file of the same name on that Thread.
May 30, 2015 - File Upload and Image Viewer Enhancements
TT no longer restricts the type of files that can be uploaded to a Thread. Also, when viewing a group of pictures via a TT Slideshow, users can now control the delay (2 to 60 seconds) and download images while viewing them by simply clicking the image name. Note that TT protects your privacy by not rendering thumbnails of your images. Doing so would require storing those thumbnails on the server unencrypted which TT never does. All other sites that show thumbnails do store them in a viewable format.
May 25, 2015 - File Upload Improvements
The file upload page was timing out if the uploads took longer than your timeout setting in Preferences. This has been resolved. Once the file upload and encryption are done, if you do nothing, you will be logged out automatically and the Thread will be saved as draft. So, you can initiate the uploads and walk away.
April 25, 2015 - Automatic Account Removal Option
What happens to abandoned online accounts when you can no longer get to them (e.g. incapacitation, incarceration, death)? Making plans for what happens after you're gone is really important for the people you leave behind. TT offers an option that allows you to specify how long your TT account can be inactive (7-365 days) before it is automatically removed. All Thread activity including attachments and responses to other's Threads will be deleted from TT's database. This eliminates all traces of your use of TT. Go to Preferences to change this setting which defaults to 365 days. This is just one of many ways TT protects your privacy.
April 23, 2015 - Passkey Delivery Option Fixed
You may have noticed that the "Passkey Delivery" option was not displaying when creating new "Passkey Protected" threads. This has been fixed. Sorry if you were incovenienced by this.
March 8, 2015 - Improved Thread Access Tracking and Image Sizing
Have you ever wanted to know how many times each person has read your Threads? Now you can. As of today, TT will track each time a user accesses your Threads and will display the count on the Thread Console next to their username (if they have an account) or email address (if they don't). You must open a Thread to see the count. TT does not track how many times the Thread owner accesses their Threads or views their attachments. Also, I have made significant improvements to the Slide Show viewer. Images are sized to the resolution of the monitor/device on which they are being displayed to take advantage of the entire screen while insuring that any comments you added to the image will be seen by the viewer.
February 7, 2015 - Auto Refresh Improvements
If you use the Auto Refresh to monitor Thread activity (refreshes console every 10 seconds), you may have noticed that not all activity was being reflected in the thread and attachment counters. This has been resolved. Regardless of how other users access your threads or attachments, the counters will update in Auto Refresh mode. Also, note that the TT server will automatically reboot daily at 3:01 AM EST to insure optimum server performance. Beware that users in TT at that time may experience a short delay or be forced to the login page.
January 4, 2015 - ThreadThat SSL Rating is "A"
I take security seriously. According to Qualys SSL Labs, ThreadThat's overall rating had been downgraded to "B" from "A" due to recent discovery regarding weakness of some SSL components (e.g. SSL3, RC4). While attempting to mitigate those weaknesses, the database server unexpectedly stopped allowing access (apologies if you were affected by this outage). That issue has been resolved. The good news is, ThreadThat's SSL security rating is now back to "A". This is a higher rating than most other web-based (those which require no software download or install of any kind) secure communication sites (e.g. hushmail(B), lockbin(B), safe-mail(F), safemess(B), burnnote(B), quickforget(A-), privnote(C), oneshar.es(F)). You can rest easy knowing that ThreadThat is protecting you from all known serious SSL weaknesses.
December 31, 2014 - Happy New Year!
A new option has been added to all pages where attachments are listed. If there is more than one attachment on a Thread, you will see a "Download All Attachments" link or button depending on the page. Clicking the link or button will initiate a download of all the listed attachments. Note that download behavior is different for every browser. Some will require that you confirm every file download. This feature is not available from Google Chrome as it will not allow more than one file download per user click.
December 14, 2014 - Enhanced Text Editor Support
As TT begins its 6th year of operation, it continues to evolve. All text entry boxes have been replaced. This was done to address usability issues reported by Chrome, iPad and iPhone users. The new text editor provides all the functionality of the old one except spellcheck. The new editor provides a limited set of emoticons. One huge advantage of this editor is that it functions on all mobile and non-mobile devices and eliminates the need to use Compatibility View in IE. If you use IE, you must go to Tools-->Compatibility View Settings and remove "threadthat.com" from the list. The new editor will not function properly in Compatibility Mode.
November 2, 2014 - Notification and Privacy Enhancements
TT now allows complete control over "New Thread" notifications. Just build your template in Preferences (click here for instructions) and check "I do not want ThreadThat to add anything to the above notification". This eliminates all text that TT normally adds to notifications. A new privacy option ("Anonymize All Inbound and Outbound Email Notifications") was added to preferences. Checking this option guarantees that no metadata (email address, mobile number or user name) will ever appear in a TT email or SMS notification that could be used to link you with another entity.
October 2, 2014 - New Thread Notification Improvements
If you use custom notifications, you may have noticed that TT was not always including a link to the Thread following your custom text. This has been corrected along with some minor notification formatting changes. When using the "Invite To Thread" option to add new participants to a Thread or "nudge" someone to view a Thread, you can now modify the subject and/or notification message.
August 9, 2014 - Unsecured Thread "Helper" Feature
Do you use unsecured Threads (i.e. recipient does not require a TT account)? Until now, addressees of unsecured Threads had to click the link in the notification email that was sent to them whenever they wished to access a Thread. If they deleted or lost a link, they could not get back to that Thread. If they were invited to several Threads, they had to save the link to every Thread they wanted to access. Now, they just need to view any unsecured Thread and TT will display a list of links to every unsecured Thread they have access to. As always, access to passkey-protected Threads requires a Passkey. TT recommends use of passkeys.
July 20, 2014 - Password Hash Now "Salted"
This may look funny to many of you, but if you are an infosec technophile, then this means something. To better protect your account from unauthorized access in the event of a database breach (however unlikely that is), TT is now salting passwords during hashing. For existing users, this is done automatically during the next login and whenever a password is changed in the future. You will not see any visible difference, however the MD5 hash of your password will be salted in the TT database. Salting makes brute force dictionary-based password cracking impossible.
May 25, 2014 - Attachment Display Order
Have you ever wanted to control the order in which attachments on a Thread are displayed (e.g. Slideshows)? Now you can. On the "Upload and Encrypt Files" page, there is a new column labeled "Order". This will default to the order in which the files are uploaded, but can be updated to display the files in your preferred order. Existing Threads can also be updated to specify your preferred order.
May 19, 2014 - TT "HeartBleed" Update
You can now verify that ThreadThat is not vulnerable to the "HeartBleed" attack by clicking here. It is also a good way to verify that TT favors Perfect Forward Secrecy for SSL handshakes. I am doing everything possible to insure your privacy.
March 30, 2014 - "Add Thread" Page Simplified
The page used to add new Threads has been redesigned to reduce complexity. Although the page may look different, it still has the same functionality it did previously. Some changes were also made to provide better support for tablet devices such as the iPad.
March 16, 2014 - Mobile Device Support Expanded
I have considerably increased the number of mobile service providers. Most of the added providers are outside the United States. So, if you are using TT from outside the U.S. and would like to receive notifications via text message, log into TT, got to the Preferences page, scroll to the bottom of the page and you will find a place to enter your mobile number and select your provider. If you still do not see your provider, feel free to contact me and I will try to add it. Note that not all service providers offer text messaging via email.
February 16, 2014 - File Uploads Now Available To Untrusted Threads
Prior to this update, users had to be logged into a TT account to upload files to any Thread. If you are using Untrusted Threads to make TT easier for those with whom you share content, not only can invited users reply to those Threads, but now they can also add and delete files. A slideshow option has also been added for Untrusted Threads.
February 9, 2014 - New "Viewed Counter" Feature
You will notice a red box with a number in it displayed for every Thread. The number shown in white represents the number of times someone other than the Thread owner opened the Thread. Note that all old Threads start with a viewed count of zero as of the above date. This feature makes it easier to determine which Threads have been viewed.
February 2, 2014 - New "Print All" Feature
You will notice a new button on the Thread Console labeled "Print All". Clicking this button will cause all Threads listed to be decrypted and displayed in a single page. It is now quick and easy to display every Thread without selecting them one at a time. It also facilitates easy searching of all Thread messages (not attachments) using your browser's find function.
January 26, 2014 - TT Improves Anonymity Options
TT Users are no longer required to provide an email address when creating an account. TT now supports mobile numbers as well as email addresses when identifying the owner or participant to Threads. However, neither email addresses nor mobile numbers are required. Every TT account now has a virtual address of firstname.lastname@example.org for sending and receiving Threads. If you wish to avoid the collection of email metadata, you can now remove your email address from TT. Click the "My Addresses" tab from the Thread console. See the FAQ for more info. Several other improvements have been included in this update. Please report any site issues to email@example.com.
December 26, 2013 - More Enhancements
You can now store a footer that you want added at the end of all new Thread notifications. This can be used to add a confidentiality statement, for example, when required by your profession. Enter your footer text from the Preferences page. Another improvement is the ability to have the Passkey for a Secret Thread included in the new Thread notification email. Previously, the only option was to have TT send it in a separate email. Please be aware that while this may be more convenient for the recipient, it is not as secure as sending it in a separate email. Also, TT has been configured to use Perfect Forward Secrecy for all SSL traffic. See TT's Security Risk Analysis for more info.
December 8, 2013 - New "Clear" Button
Many users of TT like to reuse their Threads over and over. They do this by manually deleting the messages and files one at a time to clean up the Thread. Now there is an easier way to do this. If you own a Thread or have posted content to a Thread, you will see a "Clear" button next to the "Reply" button. Clicking the "Clear" button will give you a one-click option to remove messages and attachments from the Thread without deleting the Thread.
November 29, 2013 - Choose Your Preferred Date Format
You can now pick one of 3 preferred date formats (e.g. 2013-11-29, 11-29-2013, 29-11-2013). The first one is the default. If you prefer one of the other formats, just visit the Preferences page and select the one you want. Click the Submit button at the bottom of the page to save your selection. When you return to the Thread console, all dates will be displayed in your preferred format.
November 24, 2013 - ThreadThat Banner Removed From Email Notifications
All images have been removed from email notifications. Most, if not all, email programs suppress images unless you specifically ask to see them. In fact, some email programs state the images are unsafe giving recipients the impression that the email itself is unsafe. So, as of today, you will no longer see the TT banner image in any emails TT sends.
November 9, 2013 - ThreadThat Just Got Better!
One of the major barriers to using encryption is getting others to join you. Until now, users could create Anonymous Threads for users without TT accounts, but no replies were allowed by those users. Now you can choose your desired Security level ("Trusted" or "Untrusted") when creating a new Thread. Untrusted Threads (previously called Anonymous Threads) now allow replies. The "Added By" and "Read By" will show you which email account received the link that was used to access the Thread. Users without accounts can now request to be notified when their posts are read or someone adds a new message to the Thread. These improvements will make it easier for professionals to use TT for client communications. Alas, previously created Anonymous Threads will no longer be accessible via a link. You will need to resend these as "Untrusted" Threads. For more info click here.
September 21, 2013 - IP Address Logging Terminated
September 1, 2013 - Server Migration Complete!!
I have completed the migration of TT to a Virtual Private Server. Many code changes were required and I have tested all of the core functionality with all of the most popular browsers. If you find something that is not working properly, please send an email to firstname.lastname@example.org and I will fix it. The new server should be consistently faster and reliable. My goal is 99.9% uptime (1 hour down for every 999 up).
August 15, 2013 - TT Supports Mobile and Tablet Device File Uploads
I am happy to announce that TT users can now upload attachments to Threads from their iPad, iPhone and other mobile devices.
July 13, 2013 - Mobile Service Provider Directory Updated
100 mobile service providers have been added to TT's Preferences page. Using your mobile device for notifications and two-factor authentication will enhance your TT experience. Mobile device numbers entered on the Preferences page are encrypted in TT's database using your login password. You control the type of notifications that can be texted to you. TT now supports "Textfree" for TT notifications. Textfree is a free international texting app. Just enter your 10-digit Textfree number in Preferences and select Textfree as your provider.
July 7, 2013 - TOS Updated
Sections 3 and 4 have been updated. Please review as continued use of TT implies your agreement with the new terms.
July 4, 2013 - Maximum File Size Increased to 100MB
Maximum attachment size has been increased from 30MB to 100MB. There is no limit to the number of attachments that can be uploaded. Note that upload speeds are usually much slower than download speeds depending on your Internet provider. A 100MB attachment can take several minutes to upload.
June 16, 2013 - New Feature - Self-Destructing Threads
Now you can easily set your Threads to self-destruct a specified amount of time after your Thread is sent, read or has no activity. Your settings can be saved as a default so you don't need to enter it for every new Thread. This feature will make it easier to maintain your Thread list.
May 25, 2013 - Session State Loss - Issue Resolved
TT users have been inconvenienced by an intermittent problem where TT was losing session state and forcing a new login. This was particularly annoying if it occurred after typing a long thread message. The fix was implemented May 8th and I am now confident it has resolved this issue. Coming Soon: Self destructing threads.
May 4, 2013 - Terms of Service Update
The U.S. Department of Health & Human Services recently modified the HIPAA Privacy, Security, and Enforcement Rules mandated by the Health Information Technology for Economic and Clinical Health (HITECH) Act. The final rule became effective on March 26, 2013 and all covered entities have 180 days from that date to come into compliance. Rule #8 in the TT Terms of Service has been added to address HIPAA and HITECH compliance. If you are using TT to store and communicate Protected Health Information, please review the updated TOS Agreement. Continued use of TT is your implicit agreement to this change.
March 30, 2013 - New Security Option Available
Email accounts are hacked every day. Once in control of your email account, perpetrators can easily reset passwords on other accounts like Twitter, Facebook, bank accounts, etc. Now you have the option of disabling password resets on your TT account. Even if the email account you use for TT is compromised, your TT password cannot be reset. Log in and go to the Preferences page to activate this option. It is recommended that you download a password recovery file just in case you lose your TT password. Also, don't use the same password for TT and your email account.
February 16, 2013 - TT Multi-Factor Authentication Just Got Better
Now multi-factor authentication works like other sites you are familiar with (e.g. your bank, Gmail, Facebook, etc). Multi-factor authentication is only used when TT detects you are logging in from a location you have never logged in from before. Choose between email or text message to verify your identity. Visit your Preferences page to take advantage of this enhanced security feature. It is your best defense against hacking!
January 27, 2013 - TT Adds Passkey Generation Option
Passkey creation has just become as simple as checking a box. Now you can request that TT generate a universally unique 3,064 bit passkey for your Secret Threads. The passkey is generated using Microsoft's RSACryptoServiceProvider. There is no known technology that can crack a passkey this size. Managing your passkeys is simple and secure with TT's KeyBox technology.
January 1, 2013 - TT Adds Anonymous Thread Access Feature
TT now has a new feature that allows you to optionally share encrypted communication Threads with users that do not have a TT account (see new option on the "Add a Thread" page). Such anonymous access is much less secure because anyone with the link to such a Thread has read access without authentication. It is recommended that secret messages are used when allowing anonymous access such that all users are required to supply the correct pass key to read the Thread. Use of this feature may make it easier for those you share with, but it significantly reduces control of what you share.
January 22, 2011 - Server Move Complete
We have moved to a new, less expensive hosting plan so that we can continue to offer this service free-of-charge to all users. Our site has a relatively small user base and we do not expect any negative effect on response time or stability as a result of this move.
December 4, 2010 - We've Just Made Anonymous Messaging Possible
We have improved privacy once again. Opting not to reveal your email address now results in complete anonymity assuming your ThreadThat username does not reveal your identity. For a thorough explanation of how it works, click here.
November 28, 2010 - Secret Messaging Just Got Easier
As of today, the passkey needed to read a "secret" Thread can automatically be included in the notification email for new Threads. Possession of the passkey alone does not allow access to a Thread. Users must be invited to the Thread and must have a valid login in addition to the passkey. Therefore, sending passkeys via email does not materially increase risk of compromise and it makes secret messaging a snap.
November 7, 2010 - New Account Signup Process Revamped
We are pleased to announce that creating accounts on ThreadThat has been made much friendlier. The process is now quicker and easier, but still secure. We believe this will increase the willingness of your friends, family and coworkers to join you on ThreadThat. After all, what's the value of a communication service if you can't get others to use it. As a new user, our smart-start process will lead you through the initial steps of preparing your account for use.
October 31, 2010 - The following changes have been implemented:
September 29, 2010 - The following new features have been added:
- The draft option we added last month has been significantly improved. You can now fully address draft Threads and edit all aspects of a draft Thread with the exception of the privacy level. Once the Thread is saved, you can only change the privacy level by deleting the thread and re-creating it.
- We added a Gmail-like address suggestion feature for addressing Threads.
- If your session times out while creating a Thread, it's autosaved as a draft. Session timeout is an important security feature, but in the past, using this feature may have resulted in the loss of the Thread if you were interrupted and failed to get back to creating the Thread before your session timed out. That won't happen now.
- You can now create attachment-only Threads. Before, message text was always required to create a Thread even if you had nothing to say. For example, perhaps you just want to share a picture with someone. Now you can leave the message blank. The only information required to create a Thread is the subject line.
September 7, 2010 - Contact Lists Added
- Draft Threads - create Threads and address them later (improved in the October 31 release).
- Message Edit - change unread messages - before this release, if you wanted to change a post, you had to delete it and add the corrected version. Now, so long as no one has read the post, you can change it.
- Sent Confirmation - email confirmation when Thread is sent - if you choose this option, you will receive an email confirmation each time you send a new Thread. The email will include a list of users that were notified and the notification text that was included in the notification.
- Read Confirmation - email or SMS confirmation when messages are read - you can select individual posts for read confirmation. Each time someone new reads your post, you will receive a notification with the username of the ThreadThat user that read your post. You can opt for email, text message or both. Visit your preferences to update this option.
- Streamlined Process - notification customization is now optional - unless you want to change the default notification, you are no longer required to go to this page when a new Thread is sent.
We now support the use of contact lists. You can create and maintain contact lists from the "My Addresses" page. Contact lists make creating Threads a snap. Contact list names will appear in your address book and in the suggestion list when you start typing in the "To Address(es)" field.
August 1, 2010 - Smart Phone Support Added
As of August 1st, we have added support for smart phones. All functionality available via a non-mobile computer, with the exception of file uploads, will now work from your smart phone (e.g. iPhone, Droid, any phone running Opera Mini). Some data entry fields will appear differently on your mobile device than they do on your non-mobile computer. No app install is required.
July 25, 2010 - Thread Console Redesigned
In an effort to make the Thread Console more intuitive, we have redesigned it. The thread list has been changed from a paging window to a scrolling window. This makes it very easy to get to any thread in your list. The reply window no longer displays unless you are actually writing a reply. A reply button appears just left of the subject line of any thread you open. Clicking that button will open the reply window and position the page to that window. There are now 2 buttons below the reply window - one for posting your reply and the other for discarding your reply. Once you open the reply window, you must click one of these buttons before you will be allowed to take other actions (like selecting a new thread or deleting a message). This change resolves some of the issues that were reported with certain browsers. So, if you had trouble posting replies in the past, give it another try.
July 9, 2010 - Slideshow, Password Recovery, Auto Refresh Control
We changed the slideshow option to dynamically resize images before sending them to the browser. This makes large image files display as fast as small ones. You can still see your original image by clicking the image link or the green download arrow.
We added a password recovery feature. From Preferences, you can request a Password Recovery File which will contain instructions on recovering your password and an encrypted version of your current password. If you forget you password, there is a new option on the Account Assistance page that will let you tell us that you want to recover your password. When you click that option, an email will be sent to you with a link that authorizes you to recover your password. Clicking that link will take you to the Password Recovery page where you will supply the encrypted password string. We will determine whether that matches your current password and if so, will display the password to you on that page.
We also added a new feature that allows you to toggle Auto Refresh on or off. Auto Refresh is now off by default. To turn it on, just click the Refresh icon in the Thread List header. To turn it off, just click that icon again. We did this because some users are irritated by the screen refreshing every 30 seconds.
July 1, 2010 - Image Slideshow Feature
We are adding a new feature to allow you to view uploaded images in a slide show instead of opening the files one at a time. You will also be able to add captions to your image files that will display below the image during the slideshow. File extensions of bmp, jpg, gif and png will be supported. You can mix image and non-image files on a thread and the slideshow will select only the image files. The reason this feature is significant, besides the obvious one of convenience, is that, as a rule, your image files are never stored on ThreadThat's server unencrypted. That means each file must be decrypted by the slideshow viewer and presented in the browser without violating this rule. Most slideshow programs (e.g. Picasa, Flickr, Kodak) store your image files unencrypted using your actual file name. Anyone with access to the server (authorized or not) can open and view your image files. This is not the case with images uploaded to ThreadThat.com. Images are stored encrypted using file system generated file names with the extension "enc". These files are useless without the key that was used to encrypt them.
June 26, 2010 - Hiding Your Online Status and Email Address
You can now control whether your online status changes when you log into ThreadThat. To prevent others from knowing you are logged in, just go to the Preferences page and uncheck the "Show Online Status" box. You will always appear as "Not logged in".
You can now also control when your email address is shown to other users that do not already have your email address in their ThreadThat address book. Just go to the preferences page and uncheck the "Show Email Address" box and click Submit to save your change. Unless a TT user has your email address in their address book, your email address will display as "Email:Restricted" when they mouse over your online status icon.
June 4, 2010 - Account Deletion Changes
Previously, if you deleted your account, all threads that you created were deleted. However, threads you did not initiate, but posted to or uploaded files to, were not affected. They still displayed and were still attributed to your username. In addition, your email address remained in other user's ThreadThat address book. We have changed the account delete process to completely delete all external traces of your account. That means, any posts you made or files you uploaded to someone else's threads will be deleted and all of your email addresses will be removed from all address books in which they appear. The owners of those threads will not be alerted that you deleted your account. No breadcrumbs will be left behind to alert other users that something was removed. We believe this change will improve the privacy of ThreadThat.com.
Once an account is deleted, you can create a new one using the same username and email addresses as the account you deleted. Basically, you get to start over and no one can find you unless you want them to.