 |
|
|
|
|
|
| |
| |
|
|
From: Thomas de Groot
Subject: Re: Security issue of news.povray.org
Date: 11 Sep 2018 07:03:20
Message: <5b97a0f8@news.povray.org>
|
|
|
| |
| |
|
|
On 11-9-2018 11:48, Stephen wrote:
> On 11/09/2018 10:02, Thomas de Groot wrote:
>> On 11-9-2018 10:58, Stephen wrote:
>>> On 11/09/2018 07:28, Thomas de Groot wrote:
>>>> On 10-9-2018 16:51, Stephen wrote:
>>>>> On 10/09/2018 14:26, Bald Eagle wrote:
>>>>>> Stephen <mca### [at] aol com> wrote:
>>>>>>
>>>>>>> He only swashbuckles in safe environments.
>>>>>>
>>>>>>
>>>>>
>>>>> For comfort, I believe. ;)
>>>>>
>>>>
>>>> Mmm! hmmm! mpmmfff!....
>>>>
>>>> [foams at the mouth]
>>>>
>>>
>>> That's it Thomas. :)
>>> The men with their stovepipe hats and their ladies, have all paid
>>> there shilling. (6p for children under eight.)
>>> It is show time and there will be some old cheese in it, for you. :D
>>>
>>>
>>
>> To tell the truth: it is a tiring job. Can you now unlock the door
>> please?
>>
>
> The key is under the soap. ;-)
>
>
What?! I just flushed the soap away... no key...
--
Thomas
Post a reply to this message
|
|
| |
| |
|
|
|
|
| |
| |
|
|
On 11/09/2018 12:03, Thomas de Groot wrote:
> On 11-9-2018 11:48, Stephen wrote:
>> On 11/09/2018 10:02, Thomas de Groot wrote:
>>> On 11-9-2018 10:58, Stephen wrote:
>>>> On 11/09/2018 07:28, Thomas de Groot wrote:
>>>>> On 10-9-2018 16:51, Stephen wrote:
>>>>>> On 10/09/2018 14:26, Bald Eagle wrote:
>>>>>>> Stephen <mca### [at] aolcom> wrote:
>>>>>>>
>>>>>>>> He only swashbuckles in safe environments.
>>>>>>>
>>>>>>>
>>>>>>
>>>>>> For comfort, I believe. ;)
>>>>>>
>>>>>
>>>>> Mmm! hmmm! mpmmfff!....
>>>>>
>>>>> [foams at the mouth]
>>>>>
>>>>
>>>> That's it Thomas. :)
>>>> The men with their stovepipe hats and their ladies, have all paid
>>>> there shilling. (6p for children under eight.)
>>>> It is show time and there will be some old cheese in it, for you. :D
>>>>
>>>>
>>>
>>> To tell the truth: it is a tiring job. Can you now unlock the door
>>> please?
>>>
>>
>> The key is under the soap. ;-)
>>
>>
>
>
> What?! I just flushed the soap away... no key...
>
Maybe one of the fine ladies will take it into her head to rescue you. I
could sell her a key, for a price.
--
Regards
Stephen
Post a reply to this message
|
|
| |
| |
|
|
From: Thomas de Groot
Subject: Re: Security issue of news.povray.org
Date: 12 Sep 2018 07:10:42
Message: <5b98f432@news.povray.org>
|
|
|
| |
| |
|
|
On 12-9-2018 12:23, Stephen wrote:
> On 11/09/2018 12:03, Thomas de Groot wrote:
>> On 11-9-2018 11:48, Stephen wrote:
>>> On 11/09/2018 10:02, Thomas de Groot wrote:
>>>> On 11-9-2018 10:58, Stephen wrote:
>>>>> On 11/09/2018 07:28, Thomas de Groot wrote:
>>>>>> On 10-9-2018 16:51, Stephen wrote:
>>>>>>> On 10/09/2018 14:26, Bald Eagle wrote:
>>>>>>>> Stephen <mca### [at] aolcom> wrote:
>>>>>>>>
>>>>>>>>> He only swashbuckles in safe environments.
>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>> For comfort, I believe. ;)
>>>>>>>
>>>>>>
>>>>>> Mmm! hmmm! mpmmfff!....
>>>>>>
>>>>>> [foams at the mouth]
>>>>>>
>>>>>
>>>>> That's it Thomas. :)
>>>>> The men with their stovepipe hats and their ladies, have all paid
>>>>> there shilling. (6p for children under eight.)
>>>>> It is show time and there will be some old cheese in it, for you. :D
>>>>>
>>>>>
>>>>
>>>> To tell the truth: it is a tiring job. Can you now unlock the door
>>>> please?
>>>>
>>>
>>> The key is under the soap. ;-)
>>>
>>>
>>
>>
>> What?! I just flushed the soap away... no key...
>>
>
> Maybe one of the fine ladies will take it into her head to rescue you. I
> could sell her a key, for a price.
>
[Loop. See 5 messages earlier]
--
Thomas
Post a reply to this message
|
|
| |
| |
|
|
|
|
| |
| |
|
|
Chris Cason <del### [at] deletethistoopovrayorg> wrote:
>
> Thanks for pointing this out; this will teach me to test connections
> from outside my office as well as here ;). I hadn't enabled port 443 for
> that IP via the firewall, so it was blocked to anyone but me (my IP is
> whitelisted).
>
> Working now, I hope!
>
I just noticed that the newsgroup log-in page-- using the web interface (and
Firefox)-- is still not secure (no https there, as far as I can see, and the
little 'lock' logo has a line through it). Should it be secured as well?
Post a reply to this message
|
|
| |
| |
|
|
|
|
| |
| |
|
|
On 15/09/2018 04:33, Kenneth wrote:
> I just noticed that the newsgroup log-in page-- using the web interface (and
> Firefox)-- is still not secure (no https there, as far as I can see, and the
> little 'lock' logo has a line through it). Should it be secured as well?
Technically it was, but you needed to manually visit the HTTPS site
(i.e. https://www.povray.org/). I just tweaked the site config so that
anyone landing on http://www.povray.org/community gets redirected to the
secure version. Hopefully this won't have any unintended side-effects as
there's several other server rules that apply to that path. If you see
anything misbehaving please let me know.
-- Chris
Post a reply to this message
|
|
| |
| |
|
|
|
|
| |
| |
|
|
On 14/09/2018 19:47, Chris Cason wrote:
> On 15/09/2018 04:33, Kenneth wrote:
>> I just noticed that the newsgroup log-in page-- using the web interface (and
>> Firefox)-- is still not secure (no https there, as far as I can see, and the
>> little 'lock' logo has a line through it). Should it be secured as well?
> Technically it was, but you needed to manually visit the HTTPS site
> (i.e. https://www.povray.org/). I just tweaked the site config so that
> anyone landing on http://www.povray.org/community gets redirected to the
> secure version. Hopefully this won't have any unintended side-effects as
> there's several other server rules that apply to that path. If you see
> anything misbehaving please let me know.
>
> -- Chris
>
Sorry
The connection has timed out
The server at www.povray.org is taking too long to respond.
--
Regards
Stephen
Post a reply to this message
|
|
| |
| |
|
|
|
|
| |
| |
|
|
Stephen <mca### [at] aolcom> wrote:
> On 14/09/2018 19:47, Chris Cason wrote:
>
> ...Hopefully this won't have any unintended side-effects as
> > there's several other server rules that apply to that path. If you see
> > anything misbehaving please let me know.
> >
> > -- Chris
> >
>
> Sorry
>
>
> The connection has timed out
>
> The server at www.povray.org is taking too long to respond.
>
That's strange; everything is working OK for me. I tested both the original
unsecured
http://news.povray.org/groups/
page, and the new secured one. (That's generally how I get to the newsgroups.)
In both cases, when I fire-up a fresh Firefox, go to the 'groups' page, then go
to this particular message thread and log-in to leave a message (this one, in
fact!), the log-in page is now secure, and with no time-out. I also tried going
*directly* to an old POV-Ray message thread that I bookmarked-- thus by-passing
any other newsgroup related web pages-- and the new scheme still works.
[I have Firefox set to erase passwords and such when I exit it , if that has
anything to do with the problem. I don't keep the program active all the time.]
Or maybe it's a web-portal vs. newsreader problem?
Post a reply to this message
|
|
| |
| |
|
|
From: Thomas de Groot
Subject: Re: Security issue of news.povray.org
Date: 15 Sep 2018 02:41:25
Message: <5b9ca995@news.povray.org>
|
|
|
| |
| |
|
|
On 15-9-2018 0:35, Kenneth wrote:
> Stephen <mca### [at] aolcom> wrote:
>> On 14/09/2018 19:47, Chris Cason wrote:
>>
>> ...Hopefully this won't have any unintended side-effects as
>>> there's several other server rules that apply to that path. If you see
>>> anything misbehaving please let me know.
>>>
>>> -- Chris
>>>
>>
>> Sorry
>>
>>
>> The connection has timed out
>>
>> The server at www.povray.org is taking too long to respond.
>>
>
> That's strange; everything is working OK for me. I tested both the original
> unsecured
> http://news.povray.org/groups/
> page, and the new secured one. (That's generally how I get to the newsgroups.)
> In both cases, when I fire-up a fresh Firefox, go to the 'groups' page, then go
> to this particular message thread and log-in to leave a message (this one, in
> fact!), the log-in page is now secure, and with no time-out. I also tried going
> *directly* to an old POV-Ray message thread that I bookmarked-- thus by-passing
> any other newsgroup related web pages-- and the new scheme still works.
>
> [I have Firefox set to erase passwords and such when I exit it , if that has
> anything to do with the problem. I don't keep the program active all the time.]
>
> Or maybe it's a web-portal vs. newsreader problem?
>
Same here. It works without a glitch.
Be sure to delete the 'old' addresses to avoid confusion in you
bookmarks file.
--
Thomas
Post a reply to this message
|
|
| |
| |
|
|
|
|
| |
| |
|
|
On 15/09/2018 07:41, Thomas de Groot wrote:
> On 15-9-2018 0:35, Kenneth wrote:
>> Stephen <mca### [at] aolcom> wrote:
>>> On 14/09/2018 19:47, Chris Cason wrote:
>>>
>>> ...Hopefully this won't have any unintended side-effects as
>>>> there's several other server rules that apply to that path. If you see
>>>> anything misbehaving please let me know.
>>>>
>>>> -- Chris
>>>>
>>>
>>> Sorry
>>>
>>>
>>> The connection has timed out
>>>
>>> The server at www.povray.org is taking too long to respond.
>>>
>>
>> That's strange; everything is working OK for me. I tested both the
>> original
>> unsecured
>> newsgroups.)
>> In both cases, when I fire-up a fresh Firefox, go to the 'groups'
>> page, then go
>> to this particular message thread and log-in to leave a message (this
>> one, in
>> fact!), the log-in page is now secure, and with no time-out. I also
>> tried going
>> *directly* to an old POV-Ray message thread that I bookmarked-- thus
>> by-passing
>> any other newsgroup related web pages-- and the new scheme still works.
>>
>> [I have Firefox set to erase passwords and such when I exit it , if
>> that has
>> anything to do with the problem. I don't keep the program active all
>> the time.]
>>
>> Or maybe it's a web-portal vs. newsreader problem?
>>
>
> Same here. It works without a glitch.
>
I get onto the site now. Maybe three of us were trying to access it at
the same time. ;)
> Be sure to delete the 'old' addresses to avoid confusion in you
> bookmarks file.
>
>
I changed them to https instead
--
Regards
Stephen
Post a reply to this message
|
|
| |
| |
|
|
|
|
| |
| |
|
|
Stephen <mca### [at] aolcom> wrote:
>
> I get onto the site now. Maybe three of us were trying to access it at
> the same time. ;)
>
Network overload!!
Post a reply to this message
|
|
| |
| |
|
|
|
|
| |
