Repo site tagged as "Dangerous" by chrome


ptitSeb

Serial Porter
Joined
Aug 15, 2012
Messages
9,306
Age
51
Location
France, near Lyon
I don't know if it's just me, but may Chrome on Windows has tagged the site repo.openpandora.org as Dangerous:
upload_2019-1-6_22-49-43.png

a site that can upload Trojan and other stuff to my computer...
 
Just to be sure, you are going to the https version of the repo right? I see that I can use either, and the plain http version doesn't redirect me to the https version, so it hasn't been infected by https everywhere yet.

Otherwise, while it can contain trojans uploaded, so can any website. I don't think it has ever contained a trojan as such though.
 
I am logged in on the repo, and yes, https version.
I have a full red warning screen when I connect, chrome doesn't want me to go there...

something like that:
upload_2019-1-6_23-1-55.png
 
Still on firefox 63 here, and I see no warning. That report page from google suggests that perhaps someone's set a homepage that's become naughty over the years since though.
 
Vivaldi says nothing bad (secure connection, valid certification)

also http redirects always to https

EDIT:

Just remembered that I disabled all the Google services from Vivaldi, including the phishing/malware one, and seems like I had a reason to do that
 
Last edited:
and I got it again when reloading this site, I think there is something ED can do to whitelist the domain, I got redirected here
 
Just remembered that I disabled all the Google services from Vivaldi, including the phishing/malware one, and seems like I had a reason to do that
Looks like I already disabled firefox's malware checks (specifically the option under 'Deceptive Content and Dangerous Software Protection' on the privacy section of the preferences), probably when I read up about it sending my browsing data to google. Seems like if I hadn't have done that, I'd be getting the same errors as elsewhere.
 
This is really bad, it could make people think the Pyra isn't a legitimate project. If a new potential customer tries to come here to look for information about the Pyra, and sees that, they'll likely not order one, and may speak badly about the Pyra if anyone they know mentions it.
[doublepost=1546824256,1546824114][/doublepost]@EvilDragon should look into this.
 
Firefox Developer Edition (64-bits) also throw me the message when entering on the boards.
 
Thanks for the info, here's a quick update:

1. The boards were easy to fix: Google provided an URL. We implemented the old Pandora HTML5 website YEARS ago into the new site using an iframe - and this is now considered to be harmful. This has now been fixed. A review can take up to 72 hours and I can't update the SSL certs until then, so it can take a bit until we're back to normal.

2. The repo might be a bit more complicated: Google doesn't even REPORT what's considered to be harmful there. The site has not been compromised and doesn't have a virus (just checked it), but for some reason, Google dislikes something about it. I've requested a review, hopefully this will solve things.

I'm all for securing the web, but what Google is doing there (first forcing to https even for sites where you don't even enter any data) and now something like this is ridiculous. Do they want to break the web?
[doublepost=1546829935,1546828718][/doublepost]Yeah, they don't like iframes.

https://bookmarks.openpandora.org was fully made of bookmarks - so I have to disable it for now, otherwise, it affects all other openpandora.org sites as well :(

Google IS breaking the internet now!
 
Back
Top