It is currently Thu Dec 05, 2019 12:08 pm

All times are UTC - 6 hours




Post new topic Reply to topic  [ 13 posts ] 
Author Message
 
 Post subject: C&F HACKED?
PostPosted: Fri Oct 04, 2019 3:58 pm 
Offline

Joined: Sun Jun 12, 2016 9:24 pm
Posts: 86
Today I got an email notification there was a response to one of my earlier posts. When I clicked the link I got a page warning me the site was not secure and some may be trying to steal information from me. Has anyone else encountered this?

_________________
A moment of carelessness, a lifetime of regret.
A lifetime of carelessness, a moment of regret.


Top
 Profile  
Reply with quote  
 
 Post subject: Re: C&F HACKED?
PostPosted: Fri Oct 04, 2019 5:05 pm 
Offline
User avatar

Joined: Tue Aug 30, 2011 5:39 pm
Posts: 2878
Location: Kinlochleven
Michael w6 wrote:
warning me the site was not secure

Because it's not https.

Quote:
and some may be trying to steal information from me.

But that doesn't mean it's been hacked or anyone actually is.

Basically, it's as safe as it ever was and, if you've been happy to use it up till now, you should still be happy.

_________________
And we in dreams behold the Hebrides.

Why I teach... and where
Master of nine?


Top
 Profile  
Reply with quote  
 
 Post subject: Re: C&F HACKED?
PostPosted: Fri Oct 04, 2019 5:14 pm 
Offline

Joined: Sun Jun 12, 2016 9:24 pm
Posts: 86
The page that had this warning would not allow me to access the C&F site. The link to this post worked so maybe it was some odd fluke. I was curious if other encountered it.

_________________
A moment of carelessness, a lifetime of regret.
A lifetime of carelessness, a moment of regret.


Top
 Profile  
Reply with quote  
 
 Post subject: Re: C&F HACKED?
PostPosted: Sat Oct 05, 2019 12:10 am 
Offline

Joined: Wed Sep 11, 2019 9:47 pm
Posts: 58
It was an expired certificate entity authentication* warning at my end. I’m guess Michael and I might be using the same browsers.


*) been dying to use that term since I read it yonks ago in this first rate free book: http://citeseerx.ist.psu.edu/viewdoc/do ... 1&type=pdf


Top
 Profile  
Reply with quote  
 
 Post subject: Re: C&F HACKED?
PostPosted: Sat Oct 05, 2019 3:55 am 
Offline

Joined: Mon Aug 14, 2017 5:47 am
Posts: 650
Location: Surrey/Hants border, England
I got it first this morning, now, about an hour later, I'm on the site as normal - likely it is something new to the browser, as I updated mine yesterday on this machine, but not the other one.

_________________
Keith.
Trying to do justice to my various musical instruments.


Top
 Profile  
Reply with quote  
 
 Post subject: Re: C&F HACKED?
PostPosted: Sat Oct 05, 2019 5:27 am 
Offline

Joined: Sun Jun 12, 2016 9:24 pm
Posts: 86
@bwat Yes, that is what I'm getting again today. I have to go to the C&F page directly to access the site.

_________________
A moment of carelessness, a lifetime of regret.
A lifetime of carelessness, a moment of regret.


Top
 Profile  
Reply with quote  
 
 Post subject: Re: C&F HACKED?
PostPosted: Sat Oct 05, 2019 7:05 am 
Offline
Moderator
User avatar

Joined: Wed Jan 14, 2009 5:21 pm
Posts: 12605
Location: Unimportant island off the great mainland of Europe
Sorry folks, but I'm moving this thread to the support forum. I can't see anything to do with whistles in here.

In answer to the question, by the way ... no.

Mod

_________________
"Only connect!"

https://youtu.be/ezbWVysJAOY
https://tapm.bandcamp.com/


Top
 Profile  
Reply with quote  
 
 Post subject: Re: C&F HACKED?
PostPosted: Wed Oct 09, 2019 2:43 am 
Offline

Joined: Wed Jun 06, 2012 6:23 am
Posts: 395
Location: Europe and Japan
I posted (or replied) to this in another forum.
But the short of it is that forums.chiffandfipple.com can be accessed via https:// too, not just http:// (I didn't know until today). But if you do you will run into an expired Let's Encrypt certificate (it expired on October 4). It should be a simple thing to fix - run a one-liner command on the server and get an updated certificate from Let's Encrypt.


Top
 Profile  
Reply with quote  
 
 Post subject: Re: C&F HACKED?
PostPosted: Wed Oct 09, 2019 9:42 am 
Offline
Moderator
User avatar

Joined: Wed Jan 14, 2009 5:21 pm
Posts: 12605
Location: Unimportant island off the great mainland of Europe
Tor wrote:
I posted (or replied) to this in another forum.
But the short of it is that forums.chiffandfipple.com can be accessed via https:// too, not just http:// (I didn't know until today). But if you do you will run into an expired Let's Encrypt certificate (it expired on October 4). It should be a simple thing to fix - run a one-liner command on the server and get an updated certificate from Let's Encrypt.

The site and the software are hosted, so I'm not sure we can do that. I'll look into it ...

_________________
"Only connect!"

https://youtu.be/ezbWVysJAOY
https://tapm.bandcamp.com/


Top
 Profile  
Reply with quote  
 
 Post subject: Re: C&F HACKED?
PostPosted: Fri Nov 29, 2019 1:06 am 
Offline
Moderator
User avatar

Joined: Wed Jan 14, 2009 5:21 pm
Posts: 12605
Location: Unimportant island off the great mainland of Europe
Well, that's interesting. I'm not getting the "expired certificate" notification any more. Previously, if I accessed the site using https instead of http, I did get the "expired certificate" notification, as others did, but that's gone. So I think the issue has resolved itself.

If access the site via https, I do get the "Only secure content is displayed" notice on each page, but that's normal whenever I access any site via https, in my experience.

_________________
"Only connect!"

https://youtu.be/ezbWVysJAOY
https://tapm.bandcamp.com/


Top
 Profile  
Reply with quote  
 
 Post subject: Re: C&F HACKED?
PostPosted: Fri Nov 29, 2019 2:54 am 
Offline

Joined: Mon Aug 14, 2017 5:47 am
Posts: 650
Location: Surrey/Hants border, England
I've just had a day of not being able to connect for some reason, a server malfunction(?) possibly, but it's back again, using the same book marked link. This has also happened to me a couple of times in the past too, it usually gets sorted out within a day or two, then I just have to catch up.

_________________
Keith.
Trying to do justice to my various musical instruments.


Top
 Profile  
Reply with quote  
 
 Post subject: Re: C&F HACKED?
PostPosted: Fri Nov 29, 2019 3:17 am 
Offline
Moderator
User avatar

Joined: Wed Jan 14, 2009 5:21 pm
Posts: 12605
Location: Unimportant island off the great mainland of Europe
fatmac wrote:
I've just had a day of not being able to connect for some reason, a server malfunction(?) possibly, but it's back again, using the same book marked link. This has also happened to me a couple of times in the past too, it usually gets sorted out within a day or two, then I just have to catch up.

There was an issue with the hosting service yesterday, which appears now to have been resolved, at any rate for now.

_________________
"Only connect!"

https://youtu.be/ezbWVysJAOY
https://tapm.bandcamp.com/


Top
 Profile  
Reply with quote  
 
 Post subject: Re: C&F HACKED?
PostPosted: Fri Nov 29, 2019 3:43 am 
Offline

Joined: Mon Aug 14, 2017 5:47 am
Posts: 650
Location: Surrey/Hants border, England
Thanks for the info, it's nice to be re assured. :thumbsup:

_________________
Keith.
Trying to do justice to my various musical instruments.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 13 posts ] 

All times are UTC - 6 hours


Who is online

Users browsing this forum: No registered users and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group
[ Time : 0.164s | 12 Queries | GZIP : On ]
(dh)