MSE showing as dangerous in Google Chrome

Anne_Marie_2

Just a heads up that I am getting a warning from Google Chrome reporting this as a deceptive site and that details are not secure.

Unfortunately unable to copy and paste the full warning, but the gist is:-
Deceptive site ahead.
Attackers on c95735.ssl.cf3.rackcdn.com may trick you into something dangerous etc etc

Google Safe Browsing recently detected phishing on c95735.ssl.cf3.rackcdn.com etc. etc.

Firefox reports that logins could be compromised.

Safari doesn't show any problems that I can see.

MothballsWallet

This may or not be related, but I've been getting "Your connection to this site is not secure" when I click on the "i" symbol next to the site address in Chrome 59.0.3071.115 (64-bit version) ever since the last update took my system to that version.

Screenshot here:

pogofish

How many threads do we have on this now..?

MothballsWallet

Well, the official one that MSE Andrea posted is now on page 2, so it obviously can't be that important an issue.

Anne_Marie_2

pogofish wrote: »

How many threads do we have on this now..?

I hadn't seen any other threads regarding my issue, but I did have a quick check.
I did see the other thread which Mothballs has also posted on. However, I have not seen a thread regarding the huge full page red google chrome warning, which I had yesterday afternoon, warning of unsafe site.
The red page that I had yesterday is now gone this morning, but the "not secure" in forum url is still there, as per the other thread.
https://forums.moneysavingexpert.com/discussion/5595834

Jabba_flabba

Anne_Marie's right, this is a separate problem from the "no SSL issue" that there are a few threads on.

Anne_Marie: what you've seen is Google Chrome's Safe Browsing feature. Take a look at https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/google-now-warns-against-social-engineering-content

http://forums.moneysavingexpert.com/ is pulling its Museo Slab web fonts from https://moneysavingexpert.scdn3.secure.raxcdn.com
..but I can't see any references to the particular subdomain rackcdn.com URL you mention.

I guess it's either gone away because something changed at the site end, or perhaps your Chrome updated itself between when you reported the problem and now, yielding slightly more relaxed deception detection.

I believe the Chrome (v59) setting that pertains to Safe browsing is under 3 dots > Settings > Advanced > Privacy & Security > Protect you and your device from dangerous sites (toggle). For me it was off by default, but turning it on doesn't yield me the big red screen when I visit http://forums.moneysavingexpert.com/

As for the "Not secure" / "Your connection to this site is not secure" that's totally to be expected at the moment. For interest, the original thread I started on this dates to the back end of last year:
https://forums.moneysavingexpert.com/discussion/5567176

Anne_Marie_2

Thanks for all the detail there Jabba_flabba. Will have a look at those links.

I did know that the issue I had was different to that already reported.

Thought that I had better report it, as not everyone would go through checking through various browsers to check and would just not visit this site with such a warning.

Anyway, all good with me now. Thanks for taking the time to reply with useful information.

pogofish wrote: »

How many threads do we have on this now..?

One, as far as I know, unless you know of others, and you can point me in the right direction.

Former_MSE_Andrea

Hi Anne_Marie

I'm sorry for the delay replying.

Are you (or anyone else) still seeing this message?

Frogletina

Jabba_flabba wrote: »

I believe the Chrome (v59) setting that pertains to Safe browsing is under 3 dots > Settings > Advanced > Privacy & Security > Protect you and your device from dangerous sites (toggle). For me it was off by default, but turning it on doesn't yield me the big red screen when I visit http://forums.moneysavingexpert.com/

I had this issue and the setting was set at on. I amended the setting to off and was then able to get onto this site

frogletina

Former_MSE_Andrea

Thanks Frogletina!

MothballsWallet

I'm still getting the "i" symbol in the address bar and I don't want to turn the setting off.