I can't be bothered with hashtags

[Scrotnig]

This is for G****.

 

https://www.w.talknewsuk.com is an incorrect link.

I don't know how Google came to index it.

It's quite old since the preview text displays an anniversary notice we put up in May for the site birthday celebrations (it was a copy of the original notice on the very first iteration of the site).

 

It will throw a certificate error because it's not valid.

 

I don't know why it's there, it's clearly not new, and whilst I could create the 'domain' and redirect it, I have no great to desire to. It's Google's problem, not mine. I thought they didn't index sites without valid SSL certificates?

 

Any invalid subdomain of either talknews.co.uk or scrotnig.com will probably try and redirect to the parent domain which bowlandcentral.com. It's always been like that, but since the site went onto SSL it throws an error which is to be expected because the certs are not wildcards.

 

What is actually of more concern is that the site talknews.co.uk was offline for a while, and that is what I fixed, I do not yet know what the problem was and the cautious IT person within me suggests, as it's a low (as in, no) traffic site, that I take it offline until I've had it properly checked. So I might do that.

[SneakyDave]

Wong! Gary giving domain and SSL support advice is the best.

 

Gary, by the way, I tried to go to your site http://www.shitty.slowaf.phpbbsuite.website and it doesn't work. You need to fix it.

[Scrotnig]

Domain Default page

This now has its own stupid subdomain and cert.

 

I've also asked Google to take it out via the webmaster controls.

 

I have no idea if they'll bother but it now doesn't go anywhere so hopefully they'll take it down anyhow.

[Scrotnig]

It now has a suitable holding page in place.

[SneakyDave]

Ops! Wong! One too many asterisks.

[Scrotnig]

[ATTACH=full]2273._xfImport[/ATTACH]

 

G*** you do not understand what you're ranting on about.

 

There is no "security risk". All you are seeing is a standard certificate error when you try to visit a subdomain that doesn't exist.

 

I do not have 404 capture enabled at domain level. Never have. I don't want it or need it.

 

The certificates are not wildcards they are specific to www.domain.com in each instance. If someone chooses to go to whatasillyname.domain.com then they will get a certificate error because it doesn't exist. I could easily redirect incorrect subdomains to the correct but I don't and that is deliberate. The only exception is non-www to www, and that IS redirected.

 

Stop all this nonsense about security risks and hacking. You haven't the slightest clue what you're on about.

[Scrotnig]

And I was not 'hacked' either. FFS. It broke. I took it down and fixed it.

[Scrotnig]

All of that said - there certainly seems to be a vulnerability so until the patch comes out precautions have to be taken, and I've taken them today. The site is not vulnerable to whatever this thing is.

[Scrotnig]

And not withstanding THAT, I am having the site checked, just in case anything happened, because that's just sensible to do. Given it's a zero traffic demo, it might even be worth rolling it back a few days. Not like anything actually got posted or anything radical like that.

[Scrotnig]

FFS G***.

 

Firstly...it's really funny when you have a conversation with yourself as a guest. Gets me every time.

 

Secondly...I haven't been hacked. For the umpteenth time.

 

Thirdly....I have not even looked at the vB support forums tonight never mind deleted or banned anyone or whatever it is you think I've done in some villainous conspiracy.

 

Finally....ok here's what was broken.

A few days ago I upgraded the demo site to the as yet early alpha 5.5.5. You know what they say with early alphas? They might have bugs. Big bugs. So it was that all my search pages (eg recent posts etc) returned a great big error in the debug view, like this:

 

Template: widget_search_results => tag_editor

Controller: tags

Method: getNodeTags

Arguments: Array ( [0] => )

 

Additionally the memberlist shows no members, (bit like G***'s!!) although unlike G*** all the members exist. I have checked.

 

Of course, I'd been busy messing about with the new custom forum icon feature in 5.5.5, so I hadn't been on any of these broken pages.

 

Then when I realised it was broken, I also realised there was this big exploit. So let's turn the domain off completely for a bit while I work out what's happened, if anything, and whether I'm at risk, and whether these errors were in fact down to a compromise of some sort.

 

Pretty soon after, it dawned on me that what I *actually* had was an alpha bug. Phew! The bug is down to some work being done on how tags are handled, to allow more people to use them. Members list issue is related to that.

 

I downgraded it by one alpha version which restored the search functionality but not the member list.

 

But all things considered, with those bugs and today's exploit stuff, and a site with no traffic, what's to be lost by rolling it back a week? So that should get done tomorrow.

 

Absolutely nothing to get worked up about it, but that hasn't stopped G***.

[Sandyman]

G*** rumbled you again Mark!

[SneakyDave]

Not a lick of sense

 

You know what is funny Mark. You think the guest poster is me, but the guest poster is the same person who was: Sadiq

 

So guess that rules out him being you then. So either SneakyDave is "playing you for a fool" (seeing as Sandyman claimed he was Sadiq), or he's another person not from BASH at all. And if Sandyman was in fact his own person, not fake and is Sadiq (which I highly doubt) - then he's playing both sides of the fence.

 

Either way, the guest poster is none other than: Sadiq

[Scrotnig]

TalkNews has been rolled back to 18th September.

I forgot I'd subsequently changed the database password so it promptly went down for an hour or so, corrected now.

So its rolled back AND patched. All good.

 

I'm afraid G*** is demonstrating that he REALLY doesn't know what he's talking about. WHich is handly, for anyone who didn't already know.