Repo site tagged as "Dangerous" by chrome

Discussion in 'Site Feedback' started by ptitSeb, Jan 6, 2019.

  1. ptitSeb

    ptitSeb Serial Porter

    Joined:
    Aug 15, 2012
    Messages:
    8,204
    Location:
    France, near Lyon
    I don't know if it's just me, but may Chrome on Windows has tagged the site repo.openpandora.org as Dangerous:
    upload_2019-1-6_22-49-43.png
    a site that can upload Trojan and other stuff to my computer...
     
    Tags:
  2. levi

    levi Still fresh, damnit!

    Joined:
    Oct 6, 2008
    Messages:
    10,128
    Location:
    Somewhere off the coast of the EU
    Just to be sure, you are going to the https version of the repo right? I see that I can use either, and the plain http version doesn't redirect me to the https version, so it hasn't been infected by https everywhere yet.

    Otherwise, while it can contain trojans uploaded, so can any website. I don't think it has ever contained a trojan as such though.
     
  3. ptitSeb

    ptitSeb Serial Porter

    Joined:
    Aug 15, 2012
    Messages:
    8,204
    Location:
    France, near Lyon
    I am logged in on the repo, and yes, https version.
    I have a full red warning screen when I connect, chrome doesn't want me to go there...

    something like that:
    upload_2019-1-6_23-1-55.png
     
  4. Farox

    Farox Certified Guru

    Joined:
    Jan 8, 2009
    Messages:
    1,996
    Location:
    Italy
    No problem with Firefox 64 (i'm just logged in)
     
  5. Wally

    Wally I am a banana! Staff Member

    Joined:
    Jan 31, 2006
    Messages:
    2,903
    Location:
    Melbourne, Australia
    I see it on Safari, looks like a google false positive.
     
  6. sm0kew0n

    sm0kew0n Very Active Member

    Joined:
    Apr 13, 2016
    Messages:
    321
    Location:
    Earth
  7. levi

    levi Still fresh, damnit!

    Joined:
    Oct 6, 2008
    Messages:
    10,128
    Location:
    Somewhere off the coast of the EU
    Still on firefox 63 here, and I see no warning. That report page from google suggests that perhaps someone's set a homepage that's become naughty over the years since though.
     
  8. PowerGod

    PowerGod Advanced Member

    Joined:
    Jun 20, 2011
    Messages:
    2,824
    Vivaldi says nothing bad (secure connection, valid certification)

    also http redirects always to https

    EDIT:

    Just remembered that I disabled all the Google services from Vivaldi, including the phishing/malware one, and seems like I had a reason to do that
     
    Last edited: Jan 6, 2019
  9. sm0kew0n

    sm0kew0n Very Active Member

    Joined:
    Apr 13, 2016
    Messages:
    321
    Location:
    Earth
    and I got it again when reloading this site, I think there is something ED can do to whitelist the domain, I got redirected here
     
  10. ptitSeb

    ptitSeb Serial Porter

    Joined:
    Aug 15, 2012
    Messages:
    8,204
    Location:
    France, near Lyon
  11. LineOf7s

    LineOf7s Active Member

    Joined:
    May 23, 2006
    Messages:
    674
    Location:
    Brisbane, Australia
    Yeah, I just got it visiting "https://boards.openpandora.org" (which is where I always go to get here) on Firefox. Took a bit of convincing for Google to let me come here.
     
    Last edited: Jan 7, 2019
  12. levi

    levi Still fresh, damnit!

    Joined:
    Oct 6, 2008
    Messages:
    10,128
    Location:
    Somewhere off the coast of the EU
    Looks like I already disabled firefox's malware checks (specifically the option under 'Deceptive Content and Dangerous Software Protection' on the privacy section of the preferences), probably when I read up about it sending my browsing data to google. Seems like if I hadn't have done that, I'd be getting the same errors as elsewhere.
     
    klapse likes this.
  13. GizmoTheGreen

    GizmoTheGreen Active Member

    Joined:
    Jul 27, 2009
    Messages:
    828
    Location:
    Tokyo, Japan
    getting this on THIS site right now :S
     
  14. ible

    ible one using vim and i3

    Joined:
    Mar 24, 2014
    Messages:
    2,102
    Location:
    Thrice in CA, twice in ND, once in the NL
  15. bubblebee

    bubblebee Member

    Joined:
    Mar 27, 2012
    Messages:
    30
    Same security warning here. Using Firefox 64.0
     
  16. Silent-Hunter

    Silent-Hunter Advanced Member

    Joined:
    May 29, 2010
    Messages:
    2,878
    This is really bad, it could make people think the Pyra isn't a legitimate project. If a new potential customer tries to come here to look for information about the Pyra, and sees that, they'll likely not order one, and may speak badly about the Pyra if anyone they know mentions it.
    --- Double Post Merged, Jan 7, 2019, Original Post Date: Jan 7, 2019 ---
    @EvilDragon should look into this.
     
  17. Wally

    Wally I am a banana! Staff Member

    Joined:
    Jan 31, 2006
    Messages:
    2,903
    Location:
    Melbourne, Australia
    I've notified ED, he's looking into it now :)
     
    pimaster likes this.
  18. Xcl4m4t10n

    Xcl4m4t10n Very Active Member

    Joined:
    Dec 18, 2009
    Messages:
    997
    Firefox Developer Edition (64-bits) also throw me the message when entering on the boards.
     
  19. kuru

    kuru Irate Pyrate

    Joined:
    Jan 13, 2009
    Messages:
    1,725
    Location:
    the mockracy
    Here Opera complains about the repo, but not about the boards.
     
  20. EvilDragon

    EvilDragon Administrator Staff Member

    Joined:
    Mar 4, 2003
    Messages:
    19,483
    Location:
    Ingolstadt
    Thanks for the info, here's a quick update:

    1. The boards were easy to fix: Google provided an URL. We implemented the old Pandora HTML5 website YEARS ago into the new site using an iframe - and this is now considered to be harmful. This has now been fixed. A review can take up to 72 hours and I can't update the SSL certs until then, so it can take a bit until we're back to normal.

    2. The repo might be a bit more complicated: Google doesn't even REPORT what's considered to be harmful there. The site has not been compromised and doesn't have a virus (just checked it), but for some reason, Google dislikes something about it. I've requested a review, hopefully this will solve things.

    I'm all for securing the web, but what Google is doing there (first forcing to https even for sites where you don't even enter any data) and now something like this is ridiculous. Do they want to break the web?
    --- Double Post Merged, Jan 7, 2019, Original Post Date: Jan 7, 2019 ---
    Yeah, they don't like iframes.

    https://bookmarks.openpandora.org was fully made of bookmarks - so I have to disable it for now, otherwise, it affects all other openpandora.org sites as well :(

    Google IS breaking the internet now!
     

Share This Page

Loading...