Security Certificate

[MrLongbeard]

It's done gone run out by the looks of it

[Yorick]

deleted as it then throws a cert issue too lol.

[Felix]

Me three

[KungFooBob]

It's not expired, it's just the wrong certificate on the server.

[weeksy]

I know. Bit weird.

It's due to renew on 17th march, so I'm guessing something wrong on their side rather than ours.

I've logged a call with them so hopefully it'll resolve by morning.

I'm off to bed so I won't know till 6ish.

[weeksy]

Hello,

We're aware of this issue and we're doing our best to fix it

Regards,
Den K.
Customer Support Team

[Cousin Jack]

We are all doomed. China has hacked the site, and we will all be held to ransom.

[weeksy]

Well interestingly if i go to their portal, that too is unsecured via SSL, so it's deffo not just our site, but an overall thing within their hosting. I thought this would have been sorted overnight though i must admit.

Funnily, fz07 forum and singletrackworld have been having a load of issues lately too, different to this, but issues all the same.

[weeksy]

wtf, less than 2 mins after this, it seems to be working again ? confused lol.

You'll need to close your window and re-open it on some devices for it to take effect.

[weeksy]

Well fixed it seems was a loose term as they've fucked it up again

[weeksy]

And is fixed again lol

[Taipan]

I keep getting the message below and beware of hackers warning etc blah. Got it again a couple of minutes ago and now its gone secure again?? When this happens, how bad a risk is it for users?



upload image

[weeksy]

If you transferred your bank details at that given time to this website i'd say it would be a risk. But that's it..

This doesn't mean someone can see your PC or browse your stuff....

[Taipan]

Thanks. Knowing this, I shall continue to contribute my invaluable thoughts and insight!

[weeksy]

Thanks. Knowing this, I shall continue to contribute my invaluable thoughts and insight!

Well you shouldn't have it now ?

I can't say you won't ever again... but right now you should be OK.

I initially assumed it was because we're at 'that time' when things are renewing... but happily it wasn't my fault, it was their end.

https://www.techfunnel.com/information- ... ompromised.

If you do not have an SSL certificate on your website, then all the confidential information on your site might be accessed by hackers. This may lead to leakage of personal data of your customers, including payment details which may be compromised. These days, hackers can easily recognize vulnerable sites and cause disruptions which can be catastrophic for your business.

Now the thing is, our passwords are stored in an encrypted database, no-one has ever sent me payment details as we use Paypal, so the danger really is completely minimal. I guess if the cert wasn't there someone COULD potentially steal your password.... potentially.... maybe... if they knew, if they were looking and if they had the right software... maybe.. lol.

[Yorick]

wtf, less than 2 mins after this, it seems to be working again ? confused lol.

You'll need to close your window and re-open it on some devices for it to take effect.

I've shut the windows and noticed they need cleaning again.

[weeksy]

One thing i do like about our forum, and i hope you guys like is that you're kept informed.

Not necessarily of every single thing that ever goes on behind the scenes, but certainly 99% of them

https://singletrackworld.com/forum/

That one for example was down for 10-12 hours yesterday with various "we're working on it" type messages and then 8 hours of an error on main page and nothing...

This morning... nothing, no update, no reason, no discussion.... it came back and that's it.

I do try and keep you lot informed as to what and why though.

[Mussels]

Now the thing is, our passwords are stored in an encrypted database, no-one has ever sent me payment details as we use Paypal, so the danger really is completely minimal. I guess if the cert wasn't there someone COULD potentially steal your password.... potentially.... maybe... if they knew, if they were looking and if they had the right software... maybe.. lol.

The problem is hackers grab the passwords as they are sent across the net from a public hotspot and then try them on other more damaging websites so anyone who uses the same password across many websites should worry, but as we are all securty savvy none of us do that do we.

[weeksy]

Now the thing is, our passwords are stored in an encrypted database, no-one has ever sent me payment details as we use Paypal, so the danger really is completely minimal. I guess if the cert wasn't there someone COULD potentially steal your password.... potentially.... maybe... if they knew, if they were looking and if they had the right software... maybe.. lol.

The problem is hackers grab the passwords as they are sent across the net from a public hotspot and then try them on other more damaging websites so anyone who uses the same password across many websites should worry, but as we are all securty savvy none of us do that do we.

Yes i get that... if the hacker is monitoring... if they are active... if they know about the site and the issues.... which is... fairly unlikely.

[Mussels]

Now the thing is, our passwords are stored in an encrypted database, no-one has ever sent me payment details as we use Paypal, so the danger really is completely minimal. I guess if the cert wasn't there someone COULD potentially steal your password.... potentially.... maybe... if they knew, if they were looking and if they had the right software... maybe.. lol.

The problem is hackers grab the passwords as they are sent across the net from a public hotspot and then try them on other more damaging websites so anyone who uses the same password across many websites should worry, but as we are all securty savvy none of us do that do we.

Yes i get that... if the hacker is monitoring... if they are active... if they know about the site and the issues.... which is... fairly unlikely.

They don't need to know about the site or the issues, they connect to a public wifi and capture any unencrypted usernames & passwords sent across it. This site could have the most perfect security in the world and it wouldn't help as it's not this site they are getting details from.
If you are connected to a station or coffee shop wifi there's a fairly good chance someone is monitoring it, even if it's just for sport. From home I only have my kids to worry about.