NetGalley

Author Topic: Browser SEcurity/Sertificate warning -- Merged thread  (Read 813 times)  

Offline BillyDeCarlo

  • Status: Jane Austen
  • ***
  • Posts: 365
  • Gender: Male
    • View Profile
    • Billy DeCarlo, Author
Browser SEcurity/Sertificate warning -- Merged thread
« on: January 25, 2018, 02:27:59 AM »
I posted the below in the admin forum but wanted to post here also to warn authors about doing anything that could expose them, like taking an 'exception' for the browser security warning that started showing up for kboards yesterday (when the website's SSL/TLS security certificate expired). You only see it if you are using https (which you always should, especially when logging into any site or providing sensitive info). I hope the admins leave this message on the author's cafe board at least until the problem is fixed. I don't want to see anyone harmed by this.

I'm an IT security guy in my 'real' job. Just a warning that by not using SSL for sites that seem innocuous, like this one, can open you up to having your bank info stolen at some point.

I don't want to go into all the gory details, but you're leaving a door open for hackers, who may use that door to weasel their way eventually to your bank info or planting malware on your computer that can do all sorts of bad stuff. I use a browser extension called SSL Everywhere that forces SSL (really it's TLS these days) on all sites it can.

If you enter your login information without the protection of SSL (https) and verifying that the domain (kboards.com for example) is one you trust, you can bet that password is being sent over the internet 'in the clear' and is being captured by innumerable hackers. If it's the same userid and/or password info (or close) you use for your bank or other sites, you have given them info they need to hack into other sites using your credentials.

Administrators, when will you be installing an updated security certificate? You are putting your users at risk by encouraging really bad behavior such as creating permanent exceptions to security warnings their browsers are giving them.  PS Thanks for this site, it's great!


All available WIDE!
Billy DeCarlo | Website/blog | Facebook | Twitter | Google+ | Amazon | BookBub | Goodreads | LibraryThing | Patreon

Offline Doglover

  • Status: A A Milne
  • ******
  • Posts: 4979
  • Gender: Female
  • Huntingdon, United Kingdom
  • If you want real love, buy a dog.
    • View Profile
    • Margaret Brazear Author
Re: Browser Security/Certificate/SSL warning
« Reply #1 on: January 25, 2018, 02:37:37 AM »
I couldn't get in at all this morning, because my virus detector didn't approve. I still can't do much, only answer posts.


The past is another country; they do things differently there
Margaret Brazear | Website | Blog | Facebook | Readers Group | Newsletter

Offline antcurious

  • Status: Lewis Carroll
  • **
  • Posts: 168
    • View Profile
    • JK NEVE.COM
Re: Browser Security/Certificate/SSL warning
« Reply #2 on: January 25, 2018, 03:17:16 AM »
Just remembered I can get in via http instead of https. The security risk aside, I'm glad I could get my fix  ;D

JK Neve | Goodreads

Offline Ebook Proofreading

  • Status: Lewis Carroll
  • **
  • Posts: 128
    • View Profile
Re: Browser Security/Certificate/SSL warning
« Reply #3 on: January 25, 2018, 03:25:07 AM »
Just remembered I can get in via http instead of https. The security risk aside, I'm glad I could get my fix  ;D


Thank you for the tip!  :)
Flat rate per book:
proofreadebooks.com

Offline loraininflorida

  • Status: Jane Austen
  • ***
  • Posts: 458
    • View Profile
Kboard problem
« Reply #4 on: January 25, 2018, 07:28:42 AM »
Every time I try and log into Kboards it tells me that Kboards' security certificate has expired and then runs me 'round. Is anyone else having this problem or is it just me?

Lorain O'Neil

Offline TwistedTales

  • Status: Scheherazade
  • *****
  • Posts: 1228
    • View Profile
Re: Kboard problem
« Reply #5 on: January 25, 2018, 07:31:01 AM »
Not just you. I got it as well. They just need to renew the certificate and it doesnt mean youre dealing with a fake kboards...or are we?  :o

Offline Acheknia

  • Status: Arthur Conan Doyle
  • ****
  • Posts: 712
  • Gender: Female
  • UK
    • View Profile
Re: Kboard problem
« Reply #6 on: January 25, 2018, 07:33:21 AM »
Every time I try and log into Kboards it tells me that Kboards' security certificate has expired and then runs me 'round. Is anyone else having this problem or is it just me?
I just got this (well, not expired, it said invalid) but there was an 'Advanced' button, I clicked on that & agreed to override the exception. Problem solved :)

Online Seneca42

  • Status: Scheherazade
  • *****
  • Posts: 1197
    • View Profile
Re: Kboard problem
« Reply #7 on: January 25, 2018, 07:39:02 AM »
yep, basically unusable because any page click gives me that warning.

Offline BillyDeCarlo

  • Status: Jane Austen
  • ***
  • Posts: 365
  • Gender: Male
    • View Profile
    • Billy DeCarlo, Author
Re: Kboard problem
« Reply #8 on: January 25, 2018, 08:34:53 AM »
I just got this (well, not expired, it said invalid) but there was an 'Advanced' button, I clicked on that & agreed to override the exception. Problem solved :)

But by doing that you expose yourself to all kinds of hacks, ransomware, etc. Never a good idea. Problem solved, but new problems occur. Security certificates are for, well, security :-)

The kboards admins are aware and working on it. Until then, use http not https but don't ever log into a site that's not fully secured with https.


All available WIDE!
Billy DeCarlo | Website/blog | Facebook | Twitter | Google+ | Amazon | BookBub | Goodreads | LibraryThing | Patreon

Offline Jan Hurst-Nicholson

  • Status: Isaac Asimov
  • ********
  • Posts: 10780
  • Durban, South Africa
  • Don't let your emotions overpower your intellect
    • View Profile
    • www.just4kix.jimdo.com
Re: Kboard problem
« Reply #9 on: January 25, 2018, 10:45:48 AM »
Glad I'm not the only one with that problem. Resorted to using the f word - frustrating  :D

Fiction, family saga, humour, short stories, teen, children's
Jan Hurst-Nicholson | author website

Offline BillyDeCarlo

  • Status: Jane Austen
  • ***
  • Posts: 365
  • Gender: Male
    • View Profile
    • Billy DeCarlo, Author
Re: Kboard problem
« Reply #10 on: January 25, 2018, 11:13:45 AM »
Looks like the problem is fixed - yay!

But please folks, be careful out there. I use a browser extension called SSL Everywhere (I think that's the name) that forces SSL/TLS on every site that has it. This is what keeps your data safe (well one thing anyway, security must be in layers) and encrypts your data to and from the sites you are using. Make sure the lock symbol is on and the domain name (e.g. kboards.com) is the one you intended to visit (not a clever, easy to miss look-alike such as kboords.com as it would be in a phishing attack)

When your browser, firewall, antivirus, etc tells you there's something wrong, please don't override or ignore it. There's more real bad guys/girls out there than we have in our books!


All available WIDE!
Billy DeCarlo | Website/blog | Facebook | Twitter | Google+ | Amazon | BookBub | Goodreads | LibraryThing | Patreon

Offline Marian

  • Status: Scheherazade
  • *****
  • Posts: 1627
    • View Profile
Re: Kboard problem
« Reply #11 on: January 25, 2018, 11:19:43 AM »
I've been having a different problem for a long time. Even though I've checked "log in forever," I have to log in each time I go to kboards. Something isn't right.

Offline BillyDeCarlo

  • Status: Jane Austen
  • ***
  • Posts: 365
  • Gender: Male
    • View Profile
    • Billy DeCarlo, Author
Re: Kboard problem
« Reply #12 on: January 25, 2018, 11:25:05 AM »
I've been having a different problem for a long time. Even though I've checked "log in forever," I have to log in each time I go to kboards. Something isn't right.

You probably have the cookie settings for your browser set to not save cookies, or else to remove them when you close the browser. Cookies are just tiny files that save info from your browser sessions, such as your login info. If you're using this at work, sometimes companies have that set and you can't change it.


All available WIDE!
Billy DeCarlo | Website/blog | Facebook | Twitter | Google+ | Amazon | BookBub | Goodreads | LibraryThing | Patreon

Online Carol (was Dara)

  • Status: Isaac Asimov
  • ********
  • Posts: 11844
  • Gender: Female
    • View Profile
Re: Browser SEcurity/Sertificate warning -- Merged thread
« Reply #13 on: January 25, 2018, 12:24:05 PM »
I'm glad someone posted this, as I was having trouble with it yesterday. Glad to see it's all cleared up now. And thanks especially for posting it in the Cafe. I searched the site yesterday to see if others were having the same problem and, when I didn't see any threads on it, I figured the problem was just my computer. Didn't occur to me to look beyond the Writer's Cafe.

Online ShayneRutherford

  • Status: Dostoevsky
  • ******
  • Posts: 3654
  • Toronto, Ontario
    • View Profile
    • My Website
Re: Browser SEcurity/Sertificate warning -- Merged thread
« Reply #14 on: January 25, 2018, 12:32:29 PM »
I gave KBoards an exception or whatever it was called. Can someone tell me how to change it back?
     

Offline BillyDeCarlo

  • Status: Jane Austen
  • ***
  • Posts: 365
  • Gender: Male
    • View Profile
    • Billy DeCarlo, Author
Re: Browser SEcurity/Sertificate warning -- Merged thread
« Reply #15 on: January 25, 2018, 12:45:53 PM »
I gave KBoards an exception or whatever it was called. Can someone tell me how to change it back?

It varies based on what browser you use. In Chrome, it's Settings, Advanced, Privacy & Security, Manage certificates/Manage HTTPS/SSL certificates and settings I believe. Look in there for any exceptions you might have created. It would be something similar in other browser settings.


All available WIDE!
Billy DeCarlo | Website/blog | Facebook | Twitter | Google+ | Amazon | BookBub | Goodreads | LibraryThing | Patreon

Offline Acheknia

  • Status: Arthur Conan Doyle
  • ****
  • Posts: 712
  • Gender: Female
  • UK
    • View Profile
Re: Kboard problem
« Reply #16 on: January 25, 2018, 01:29:53 PM »
But by doing that you expose yourself to all kinds of hacks, ransomware, etc. Never a good idea. Problem solved, but new problems occur. Security certificates are for, well, security :-)

The kboards admins are aware and working on it. Until then, use http not https but don't ever log into a site that's not fully secured with https.

Thanks, not really tech savvy, I just assumed it would be fine (safe) as I've used the site so often before.
Hopefully my Bullguard kept me safe :)

Online ShayneRutherford

  • Status: Dostoevsky
  • ******
  • Posts: 3654
  • Toronto, Ontario
    • View Profile
    • My Website
Re: Browser SEcurity/Sertificate warning -- Merged thread
« Reply #17 on: January 25, 2018, 01:46:09 PM »
It varies based on what browser you use. In Chrome, it's Settings, Advanced, Privacy & Security, Manage certificates/Manage HTTPS/SSL certificates and settings I believe. Look in there for any exceptions you might have created. It would be something similar in other browser settings.


Thank you!