Verify it installed correctly; try loading the library:
library(AppliedPredictiveModeling)
If you also see “also installing the dependency ‘CORElearn’” in the console is because Applied Predictive Modeling requires CORElearn which should install automatically. If it already is installed you won’t see that message.
Clearly the first problem is that the logon page hasn’t been loaded over HTTPS, but then they’ve also gone and offered to “Send Password”. Now maybe that’s an example of the earlier mentioned colloquial use of the term, let’s dig a big further and see what happens:
2015
You will notice the logon page now loads over HTTPS, but there is a mixed content warning (see below).
The text “Enter your email address and we’ll send your password” clarifies that yes, they will be sending your password and not a reset link.
Logon page mixed content warning
Looks like it is the search form in the header:
1920×1040 image click to expand
They incurred the extra expense of a extended validation SSL certificate, you’d think they’d want it to display correctly on all pages.
Extended validation info before loading mixed content
So this tells us a couple of important things about usoutdoor.com:
They’re not hashing the password. At best they’re encrypting it but they’re quite possibly just storing it in the clear; we have no evidence to the contrary.
They’re sending a persistent password – one we can go back and keep using over and over – via an insecure channel.
2015
Clearly you can. Again, exactly the same.
Still no evidence whether the password is encrypted or stored in the clear, but it obviously isn’t being hashed.
Don’t worry, I changed the password after this analysis, which brought up a completely different set of usability issues I plan to detail later. Basically it boils down to disallowing characters and truncating passwords without warning. It was easy to discover the latter however, because they just email my password back upon request.
