Author Topic: What is going on with the mobile version?  (Read 2047 times)

Offline fsgrecofolk

  • World Silver
  • *****
  • Posts: 2164
    • View Profile
What is going on with the mobile version?
« on: July 02, 2016, 02:50:46 pm »
Is anyone else being redirected when accessing the forum on a mobile?

Offline Bob H.

  • I Need More Hobbies
  • *****
  • Posts: 3860
    • View Profile
Re: What is going on with the mobile version?
« Reply #1 on: July 02, 2016, 02:51:57 pm »
I couldn't get on for the last 24 hours or so from either my work or home computers.

Offline fsgrecofolk

  • World Silver
  • *****
  • Posts: 2164
    • View Profile
Re: What is going on with the mobile version?
« Reply #2 on: July 02, 2016, 03:20:26 pm »
I was having access issues and also being redirected to porn, phony anti virus, and dating sites.  It was wierd.

Offline Ray Brinzer

  • Ipse Dixit
  • Administrator
  • Get a Job
  • *****
  • Posts: 7036
    • View Profile
    • http://ray.brinzer.net/
Re: What is going on with the mobile version?
« Reply #3 on: July 02, 2016, 05:08:08 pm »
So, briefly, a few important points:

  • I am no longer the tech guy for the site(s)
  • The people who are responsible for that are aware of the problems

Both the JavaScript exploits afflicting mobile users and the database errors are real problems. I expect they'll go away soon.

Offline Ray Brinzer

  • Ipse Dixit
  • Administrator
  • Get a Job
  • *****
  • Posts: 7036
    • View Profile
    • http://ray.brinzer.net/
Re: What is going on with the mobile version?
« Reply #4 on: July 05, 2016, 02:50:40 pm »
Update: if you get a redirect again with a mobile device, please report it here.

Offline brycemus

  • LXP
  • Get a Job
  • *
  • Posts: 32241
    • View Profile
Re: What is going on with the mobile version?
« Reply #5 on: July 06, 2016, 01:04:34 pm »
I just tried on my phone which as recently as Monday was still sending me elsewhere.  It was good to go.
Corey Clark: 2016-2017 Hawkeye Hammer

Offline leglace

  • Get a Job
  • *
  • Posts: 6166
    • View Profile
Re: What is going on with the mobile version?
« Reply #6 on: July 28, 2016, 10:58:27 am »
Mobile looks exploited again
When all else fails, do the opposite...

Offline FalconWrestlingKY

  • Get a Job
  • *
  • Posts: 6021
    • View Profile
Re: What is going on with the mobile version?
« Reply #7 on: July 28, 2016, 11:02:13 am »
Mobile looks exploited again

same here
Topics Falcon doesn't know anything about- Cars, Binary, Accounting, and 13th Century Polish Literature

Offline Ray Brinzer

  • Ipse Dixit
  • Administrator
  • Get a Job
  • *****
  • Posts: 7036
    • View Profile
    • http://ray.brinzer.net/
Re: What is going on with the mobile version?
« Reply #8 on: July 28, 2016, 11:03:34 am »
Yes. I now have server access. I have found the problem, and will fix it as soon as I have all the audit information I need.  Should be within the hour.

Offline Ray Brinzer

  • Ipse Dixit
  • Administrator
  • Get a Job
  • *****
  • Posts: 7036
    • View Profile
    • http://ray.brinzer.net/
Re: What is going on with the mobile version?
« Reply #9 on: July 28, 2016, 11:19:42 am »
I believe I have fixed the problem.  If you still get redirects, please report it here.

Offline ViseGrip

  • LXP
  • Get a Job
  • *
  • Posts: 32678
    • View Profile
Re: What is going on with the mobile version?
« Reply #10 on: July 28, 2016, 03:50:59 pm »
Edit function?
"The first lesson of economics is scarcity: There is never enough of anything to satisfy all that want it. The first lesson of politics is to disregard the first lesson of economics" -Thomas Sowell

Offline fsgrecofolk

  • World Silver
  • *****
  • Posts: 2164
    • View Profile
Re: What is going on with the mobile version?
« Reply #11 on: July 31, 2016, 03:52:32 pm »
What causes the redirects?

Offline Ray Brinzer

  • Ipse Dixit
  • Administrator
  • Get a Job
  • *****
  • Posts: 7036
    • View Profile
    • http://ray.brinzer.net/
Re: What is going on with the mobile version?
« Reply #12 on: July 31, 2016, 05:15:17 pm »
What causes the redirects?

It's hard to give a simple answer, but I'll try.

The software which serves web pages, and which runs on the server, is called Apache.  Apache is very configurable.  If someone is able to mess with that configuration, they can do naughty things.

There is a main configuration file for Apache, which normally sits outside the directories full of web pages that Apache serves.  Apache also supports per-directory configuration files, which sit in the directories they configure.  These are called .htaccess files.

The .htaccess files in the top-level directory of each website on the server had been modified.  Rules were added which told Apache to detect whether a request was coming from a mobile client, and if so, issue a redirect.

I fixed that problem, and locked those files down so it probably won't happen again.  That doesn't explain how it happened; the fact something on the server tried to modify those files confirms that there's a vulnerability somewhere in the system.  Locking down those files is like locking your bedroom door at night; if that's what keeps you safe, your house is not secure.  But it's no longer my system.
« Last Edit: July 31, 2016, 05:18:41 pm by Ray Brinzer »

Offline fsgrecofolk

  • World Silver
  • *****
  • Posts: 2164
    • View Profile
Re: What is going on with the mobile version?
« Reply #13 on: September 23, 2016, 08:56:51 pm »
Mobile has been compromised again

Offline FalconWrestlingKY

  • Get a Job
  • *
  • Posts: 6021
    • View Profile
Re: What is going on with the mobile version?
« Reply #14 on: October 16, 2016, 03:15:25 pm »
There appears to be some sort of cookie on my phone that's identifying my password as incorrect and won't log me back in.

I am pretty certain it's a cookie because it lets me log in just fine on inprivate but claims my password is incorrect when I do it normally

Might be related, might not
Topics Falcon doesn't know anything about- Cars, Binary, Accounting, and 13th Century Polish Literature