Repo site tagged as "Dangerous" by chrome


ptitSeb

Serial Porter
Joined
Aug 15, 2012
Messages
8,852
Age
48
Location
France, near Lyon
I don't know if it's just me, but may Chrome on Windows has tagged the site repo.openpandora.org as Dangerous:
upload_2019-1-6_22-49-43.png

a site that can upload Trojan and other stuff to my computer...
 

levi

Still fresh, damnit!
Joined
Oct 6, 2008
Messages
14,057
Location
Somewhere off the coast of the EU
Just to be sure, you are going to the https version of the repo right? I see that I can use either, and the plain http version doesn't redirect me to the https version, so it hasn't been infected by https everywhere yet.

Otherwise, while it can contain trojans uploaded, so can any website. I don't think it has ever contained a trojan as such though.
 

ptitSeb

Serial Porter
Joined
Aug 15, 2012
Messages
8,852
Age
48
Location
France, near Lyon
I am logged in on the repo, and yes, https version.
I have a full red warning screen when I connect, chrome doesn't want me to go there...

something like that:
upload_2019-1-6_23-1-55.png
 

levi

Still fresh, damnit!
Joined
Oct 6, 2008
Messages
14,057
Location
Somewhere off the coast of the EU
Still on firefox 63 here, and I see no warning. That report page from google suggests that perhaps someone's set a homepage that's become naughty over the years since though.
 

PowerGod

Hardcore Member
Joined
Jun 20, 2011
Messages
3,877
Vivaldi says nothing bad (secure connection, valid certification)

also http redirects always to https

EDIT:

Just remembered that I disabled all the Google services from Vivaldi, including the phishing/malware one, and seems like I had a reason to do that
 
Last edited:

sm0kew0n

Very Active Member
Joined
Apr 13, 2016
Messages
370
Location
Hiigara
and I got it again when reloading this site, I think there is something ED can do to whitelist the domain, I got redirected here
 

levi

Still fresh, damnit!
Joined
Oct 6, 2008
Messages
14,057
Location
Somewhere off the coast of the EU
Just remembered that I disabled all the Google services from Vivaldi, including the phishing/malware one, and seems like I had a reason to do that
Looks like I already disabled firefox's malware checks (specifically the option under 'Deceptive Content and Dangerous Software Protection' on the privacy section of the preferences), probably when I read up about it sending my browsing data to google. Seems like if I hadn't have done that, I'd be getting the same errors as elsewhere.
 

Silent-Hunter

Hardcore Member
Joined
May 29, 2010
Messages
3,459
This is really bad, it could make people think the Pyra isn't a legitimate project. If a new potential customer tries to come here to look for information about the Pyra, and sees that, they'll likely not order one, and may speak badly about the Pyra if anyone they know mentions it.
[doublepost=1546824256,1546824114][/doublepost]@EvilDragon should look into this.
 

Xcl4m4t10n

Advanced Member
Joined
Dec 18, 2009
Messages
1,210
Firefox Developer Edition (64-bits) also throw me the message when entering on the boards.
 

EvilDragon

Administrator
Staff member
Joined
Mar 4, 2003
Messages
29,718
Age
43
Location
Ingolstadt
Thanks for the info, here's a quick update:

1. The boards were easy to fix: Google provided an URL. We implemented the old Pandora HTML5 website YEARS ago into the new site using an iframe - and this is now considered to be harmful. This has now been fixed. A review can take up to 72 hours and I can't update the SSL certs until then, so it can take a bit until we're back to normal.

2. The repo might be a bit more complicated: Google doesn't even REPORT what's considered to be harmful there. The site has not been compromised and doesn't have a virus (just checked it), but for some reason, Google dislikes something about it. I've requested a review, hopefully this will solve things.

I'm all for securing the web, but what Google is doing there (first forcing to https even for sites where you don't even enter any data) and now something like this is ridiculous. Do they want to break the web?
[doublepost=1546829935,1546828718][/doublepost]Yeah, they don't like iframes.

https://bookmarks.openpandora.org was fully made of bookmarks - so I have to disable it for now, otherwise, it affects all other openpandora.org sites as well :(

Google IS breaking the internet now!
 
Top