Export thread

Security complaints

#1

Dei

Dei

Chrome on my phone is bitching that halforums is unsafe to access. No issue if I load it through tapatalk.


#2

Dei

Dei



#3

Terrik

Terrik

Im getting that too on my phone.


#4

MindDetective

MindDetective

Ditto on my tablet


#5

PatrThom

PatrThom

Hmm. My address bar says I'm successfully using https:// to connect to the forum, but I don't see any option to validate any certificate, nor do I see the lock icon.
Interesting.

--Patrick


#6

CrimsonSoul

CrimsonSoul

Yeah I get this too


#7

Dei

Dei

Yeah when I use Firefox on my PC it's telling me that it's blocking something unsafe as well, but it still works. Unlike my phone browser, which says I can bypass protection, but it's UNSAFE!


#8

Dave

Dave

The fuck? Is it the whole site or just certain parts of the site?


#9

Dei

Dei

As far as I can tell it's everything.


#10

Dave

Dave

Gas, you got any ideas off the top of your head? I changed nothing.


#11

Chad Sexington

Chad Sexington

Everything loads fine for me, but Chrome says different threads are differently secure. No idea if this is useful, but here's a screenshot. First one is a screenshot from what it says on threads with a yellow (warning) lock, the latter from ones that are green (OK). More threads are yellow than green based on a quick, unscientific sample of clicking a dozen or so in my New Posts.

security.png


#12

Celt Z

Celt Z

Yep, same here.


#13

Bowielee

Bowielee

I'm not getting this on any of my browsers.


#14

PatrThom

PatrThom

The page at https://www.halforums.com/xenforo/threads/security-complaints.31184/#post-1195262 ran insecure content from http://www.google.com/jsapi?_v=3fdfa9dc.
security-complaints.31184:58:103The page at https://www.halforums.com/xenforo/threads/security-complaints.31184/#post-1195262 ran insecure content from https://www.halforums.com/forumrunner/detect.js.
security-complaints.31184:389:215The page at https://www.halforums.com/xenforo/threads/security-complaints.31184/#post-1195262 displayed insecure content from http://img3.wikia.nocookie.net/__cb20140407034631/payday/images/1/17/RainbowDash.gif.
security-complaints.31184:650:165The page at https://www.halforums.com/xenforo/threads/security-complaints.31184/#post-1195262 displayed insecure content from http://tapatalk.imageshack.com/v2/15/02/28/5ca50d95cd5d292df389934eb8a8399b.jpg.
security-complaints.31184:3985[Warning] The page at https://www.halforums.com/xenforo/threads/security-complaints.31184/#post-1195262 ran insecure content from http://www.google.com/uds/?file=search&v=1. (jsapi, line 21, x2)
[Warning] The page at https://www.halforums.com/xenforo/threads/security-complaints.31184/#post-1195262 ran insecure content from http://www.wowhead.com/widgets/power.js. (security-complaints.31184, line 0)
[Warning] The page at https://www.halforums.com/xenforo/threads/security-complaints.31184/#post-1195262 ran insecure content from http://www.google.com/uds/api/search/1.0/23952f7483f1bca4119a89c020d13def/default en.css. (jsapi, line 21)
[Warning] The page at https://www.halforums.com/xenforo/threads/security-complaints.31184/#post-1195262 ran insecure content from http://www.google.com/uds/api/search/1.0/23952f7483f1bca4119a89c020d13def/default en.I.js. (jsapi, line 21, x2)
The page at https://www.halforums.com/xenforo/threads/security-complaints.31184/#post-1195262 ran insecure content from http://www.wowhead.com/widgets/power.js.
xenforo.js:221:190
Click to expand...
Is that useful? It's from my error console.

--Patrick


#15

GasBandit

GasBandit

Dave said:
Gas, you got any ideas off the top of your head? I changed nothing.
Click to expand...
Started happening immediately after the downtime the other day, when they had to go swap servers. I'm guessing they don't have all their SSL ducks in a row on the new server.

Also, helps to page @GasBandit instead of saying "gas" out loud :p


#16

Ravenpoe

Ravenpoe

GasBandit said:
Started happening immediately after the downtime the other day, when they had to go swap servers. I'm guessing they don't have all their SSL ducks in a row on the new server.

Also, helps to page @GasBandit instead of saying "gas" out loud :p
Click to expand...
What about saying gas three times in a mirror at midnight?


#17

PatrThom

PatrThom

Ravenpoe said:
What about saying gas three times in a mirror at midnight?
Click to expand...
Might be time to cut down on your fiber if that's happening.

--Patrick


#18

Jay

Jay

Gives me this shit too when uploading pictures.


#19

Dave

Dave

Ticket opened with host.


#20

Dave

Dave

SSL cert has been reinstalled. Please let me know if this helps.


#21

MindDetective

MindDetective

Not yet for me. Is it something that needs to propagate?


#22

PatrThom

PatrThom

I'll check for it again tomorrow.

--Patrick


#23

Dave

Dave

MindDetective said:
Not yet for me. Is it something that needs to propagate?
Click to expand...
That I don't know. I think it did when we switched so we'll give it until tomorrow.


#24

PatrThom

PatrThom

Still no change.
Site URL shows "https://" but the icon showing "a secure connection has been established" is not present.

--Patrick


#25

MindDetective

MindDetective

Yup


#26

Charlie Don't Surf

Charlie Don't Surf

I'm really bad at tech stuff, but I had this happen on another couple sites and I fixed it by changing my date on my computer back and forth. Maybe it had something to do with the end of February date or something making things look expired?


#27

PatrThom

PatrThom

Charlie Don't Surf said:
I'm really bad at tech stuff, but I had this happen on another couple sites and I fixed it by changing my date on my computer back and forth. Maybe it had something to do with the end of February date or something making things look expired?
Click to expand...
If your computer's battery runs out or it somehow otherwise loses the date, SSL won't work, so any site using https:// for connection will fail.
Fixing the date on your end will solve that, but if the server is set to the wrong date, you wouldn't be able to use SSL unless you broke your date to match.

--Patrick


#28

Charlie Don't Surf

Charlie Don't Surf

Yeah, I have it set back now to normal and everything works.


#29

Celt Z

Celt Z

Not that it's a big deal, but I'm still getting the message Dei posted above from Chrome, and this is after a bunch of restarts. I can still get around it to the site, but I thought you might want to know.


#30

Dave

Dave

The host has reset/reloaded the SSL. Not sure what else can be done. I'll let him know. maybe he'll have an idea or three.


#31

Eriol

Eriol

Still happening here. Only on my phone, not desktop Firefox.

Good luck fixing cert errors. They really suck.


#32

Bubble181

Bubble181

Most of the main pages are OK for me, some threads (like this one) still aren't.


#33

PatrThom

PatrThom

I still don't see a certificate validation happening.
It's not a huge deal. It just means my password is being sent in the clear, work can still intercept all the NSFW images (even when they're within a spoiler tag), you know. Nothing serious.

--Patrick


#34

GasBandit

GasBandit

Well, the server's back up, obviously. Looks like there was a teensy rollback, nothing too big. SSL still isn't working quite right yet, but miraculously I can now upload pictures from work again, which I haven't been able to do in weeks.


#35

PatrThom

PatrThom

GasBandit said:
Looks like there was a teensy rollback, nothing too big.
Click to expand...
Sez you. Now I gotta go and put my movie review back in from memory.
Otherwise there will be no proof that I watched another movie.
I saved it in a text document on my computer before I posted it, but once it posted I think I threw it out. D'oh!

--Patrick


#36

Bubble181

Bubble181

Oh, sure, now that my shift at work is over, it comes back on line! Typical! Pfuh!


#37

Bowielee

Bowielee

Posts lost in time and space.


#38

Terrik

Terrik

I was traumatized, guys.


#39

Dave

Dave

I was, too. Good thing my work kept me busy today![DOUBLEPOST=1430172515,1430172482][/DOUBLEPOST]Dynomite still doesn't work any longer, though. :(


#40

bhamv3

bhamv3

My Avengers 2 review is gone! Gooooooone!


#41

PatrThom

PatrThom

bhamv3 said:
My Avengers 2 review is gone! Gooooooone!
Click to expand...
So are my posts with next week's lottery numbers!

--Patrick


#42

PatrThom

PatrThom

FWIW, I do notice that the password database did not roll back. I changed my password probably 2-3 days ago and the forum still requires that newest one to get in.

--Patrick


#43

Ravenpoe

Ravenpoe

PatrThom said:
Sez you. Now I gotta go and put my movie review back in from memory.
Otherwise there will be no proof that I watched another movie.
I saved it in a text document on my computer before I posted it, but once it posted I think I threw it out. D'oh!

--Patrick
Click to expand...
This is why this happened. The universe cannot exist in a state in which you've seen something, and so had to auto-correct that with a rollback.


#44

Bubble181

Bubble181

bhamv3 said:
My Avengers 2 review is gone! Gooooooone!
Click to expand...
...."it was pretty neat, I enjoyed it"? Even I can retype your review from memory :p


#45

Dave

Dave

I didn't read it anyway because I can't see it until the 8th or so. I'm going to avoid it until my son and I can go this next week.


#46

Gruebeard

Gruebeard

Nick posted a rant about work, I replied with helpful advice. Actual, 100% helpful advice. For the first time ever here.

I think maybe I broke the forum, caused it to travel back in time. Sorry your review was one of the casualties, Pat.


#47

PatrThom

PatrThom

Meh, I'll put it back when I can sit down for 20min with a keyboard again.

--Patrick


#48

Gruebeard

Gruebeard

I'm not really concerned about your review, I just wanted to moan that my one attempted good deed here went punished.


#49

Dave

Dave

The North Remembers.


#50

Dei

Dei

I'm still getting this problem on my mobile Chrome. Any chance this will ever get fixed? :/


#51

Shakey

Shakey

I dunno if this would have anything to do with it, but you could pass it on to the host. http://serverfault.com/questions/62...-my-sites-security-certificate-is-not-trusted


#52

Dave

Dave

Shakey said:
I dunno if this would have anything to do with it, but you could pass it on to the host. http://serverfault.com/questions/62...-my-sites-security-certificate-is-not-trusted
Click to expand...
I will try that. I don't know what else to do.


Sent from my iPad using Tapatalk


#53

GasBandit

GasBandit

Yeah, nothing I can help with unfortunately... it's something the hosting has to get worked out.


#54

Eriol

Eriol

Extremely intermittent, but not gone. Unfortunate, and annoying, but not your guys' fault.


#55

GasBandit

GasBandit

I haven't seem to have had the problem for several days now.


#56

Shakey

Shakey

Same here.


#57

Dei

Dei

My phone just complained that the site's cert expired yesterday.


#58

Terrik

Terrik

I'm getting it too


#59

bhamv3

bhamv3

Getting it on desktop, Firefox 51.0.1.


#60

drifter

drifter

Yep, Firefox 51.0.1


#61

GasBandit

GasBandit

Dave is aware, there's an issue with hosting, could take a while to resolve.


#62

Dave

Dave

The SSL cert came up for renewal and I paid for it - TWICE!! Turns out that for some reason there were FOUR certs on our site! Have no fucking clue why. That was the old host who did that to us. I had to do some stuff to get a new cert issued from the ones that I bought and I installed them. Seems to have done the trick.


#63

PatrThom

PatrThom

Dave said:
The SSL cert came up for renewal and I paid for it - TWICE!! Turns out that for some reason there were FOUR certs on our site! Have no fucking clue why. That was the old host who did that to us. I had to do some stuff to get a new cert issued from the ones that I bought and I installed them. Seems to have done the trick.
Click to expand...
Well maybe this explains why visiting the site would sometimes throw a cert error but then work immediately after with no explanation.

--Patrick


#64

Dave

Dave

Yeah right now I have ONE cert on the site and three inactive.


Top