User avatar
ben_nuttall
Posts: 235
Joined: Sun Aug 19, 2012 11:19 am
Location: Cambridgeshire, UK
Contact: Website Twitter

Forum problems 10 April 2015

Fri Apr 10, 2015 9:43 am

Hi everyone

We were experiencing some issues with the forums this morning: Links from Google and links in forum emails were being broken.

These issues have now been resolved.
Former RPF staff. Author of gpiozero and creator of piwheels.

User avatar
RaTTuS
Posts: 10606
Joined: Tue Nov 29, 2011 11:12 am
Location: North West UK
Contact: Twitter YouTube

Re: Forum problems 10 April 2015

Fri Apr 10, 2015 9:48 am

Thanks ben - bet that was fun
How To ask Questions :- http://www.catb.org/esr/faqs/smart-questions.html
WARNING - some parts of this post may be erroneous YMMV

1QC43qbL5FySu2Pi51vGqKqxy3UiJgukSX
Covfefe

gkreidl
Posts: 6355
Joined: Thu Jan 26, 2012 1:07 pm
Location: Germany

Re: Forum problems 10 April 2015

Fri Apr 10, 2015 10:14 am

ben_nuttall wrote:Hi everyone

We were experiencing some issues with the forums this morning: Links from Google and links in forum emails were being broken.

These issues have now been resolved.
This morning? All day yesterday! And the RSS feeds are still not working: they have to be directed to https, I suppose, but that doesn't work right now.
Minimal Kiosk Browser (kweb)
Slim, fast webkit browser with support for audio+video+playlists+youtube+pdf+download
Optional fullscreen kiosk mode and command interface for embedded applications
Includes omxplayerGUI, an X front end for omxplayer

User avatar
Fidelius
Posts: 464
Joined: Wed Jan 01, 2014 8:40 pm
Location: Germany

Re: Forum problems 10 April 2015

Fri Apr 10, 2015 10:20 am

gkreidl wrote:And the RSS feeds are still not working: they have to be directed to https, I suppose, but that doesn't work right now.
I can confirm this problem.

plugwash
Forum Moderator
Forum Moderator
Posts: 3695
Joined: Wed Dec 28, 2011 11:45 pm

Re: Forum problems 10 April 2015

Sat Apr 11, 2015 2:03 am

ben_nuttall wrote: We were experiencing some issues with the forums this morning: Links from Google and links in forum emails were being broken.
That's something of an understatement,basically all links to forum pages other than those generated by the forum software itself were broken by a broken redirect from http to https which was incorrectly escaping things that should not be escaped (most notablly the equals signs in query strings). The problem also started much earlier than you implied.

User avatar
DougieLawson
Posts: 40194
Joined: Sun Jun 16, 2013 11:19 pm
Location: A small cave in deepest darkest Basingstoke, UK
Contact: Website Twitter

Re: Forum problems 10 April 2015

Sat Apr 11, 2015 9:22 am

Can someone explain the point of using HTTPS rather than HTTP (other than a way to slow the forum down)? It makes no sense to me.
Criticising any questions is banned on this forum.

Any DMs sent on Twitter will be answered next month.
All fake doctors are on my foes list.

Note: Any requirement to use a crystal ball or mind reading will result in me ignoring your question.

RobHenry
Posts: 452
Joined: Fri Sep 21, 2012 9:04 pm
Location: UK

Re: Forum problems 10 April 2015

Sat Apr 11, 2015 10:14 am

[quote="DougieLawson"]Can someone explain the point of using HTTPS rather than HTTP (other than a way to slow the forum down)? It makes no sense to me.[/quote]

It prevents NSA snooping and guarantees the authenticity of the forum content.

User avatar
DougieLawson
Posts: 40194
Joined: Sun Jun 16, 2013 11:19 pm
Location: A small cave in deepest darkest Basingstoke, UK
Contact: Website Twitter

Re: Forum problems 10 April 2015

Sat Apr 11, 2015 10:15 am

RobHenry wrote:
DougieLawson wrote:Can someone explain the point of using HTTPS rather than HTTP (other than a way to slow the forum down)? It makes no sense to me.
It prevents NSA snooping and guarantees the authenticity of the forum content.
And we need that because ...?
Criticising any questions is banned on this forum.

Any DMs sent on Twitter will be answered next month.
All fake doctors are on my foes list.

Note: Any requirement to use a crystal ball or mind reading will result in me ignoring your question.

RobHenry
Posts: 452
Joined: Fri Sep 21, 2012 9:04 pm
Location: UK

Re: Forum problems 10 April 2015

Sat Apr 11, 2015 10:19 am

DougieLawson wrote:
RobHenry wrote:
DougieLawson wrote:Can someone explain the point of using HTTPS rather than HTTP (other than a way to slow the forum down)? It makes no sense to me.
It prevents NSA snooping and guarantees the authenticity of the forum content.
And we need that because ...?
I didn't say we need that, but that's what we get...

ShiftPlusOne
Raspberry Pi Engineer & Forum Moderator
Raspberry Pi Engineer & Forum Moderator
Posts: 6259
Joined: Fri Jul 29, 2011 5:36 pm
Location: The unfashionable end of the western spiral arm of the Galaxy

Re: Forum problems 10 April 2015

Sat Apr 11, 2015 11:17 am

NSA is the last thing people should be concerned about. This prevents plain text data (like your password) from flowing across your network and to the server and also verifies that the site hasn't been hijacked.

Also, if the site is having issues, the best thing to do is to report it and then do something else. Getting nasty about it isn't helping anyone. When the foundation has Google's resources, upgrades may go more smoothly.

plugwash
Forum Moderator
Forum Moderator
Posts: 3695
Joined: Wed Dec 28, 2011 11:45 pm

Re: Forum problems 10 April 2015

Sat Apr 11, 2015 10:58 pm

DougieLawson wrote:Can someone explain the point of using HTTPS rather than HTTP (other than a way to slow the forum down)? It makes no sense to me.
More and more people use the internet on the move these days, and often connect over insecure connections (GSM encryption has been cracked, most public wifi is either unencrypted or running in psk mode with a key that is readilly available to attackers). Plain http makes it trivial for such attackers to sniff passwords and session cookies and hence potentially take over user accounts.

Using https makes it much harder for attackers to do this. Enabling strict transport security and key pinning would make things harder still for the attackers. I don't know if the rapsberry pi foundation have done this or plan to do so.

plugwash
Forum Moderator
Forum Moderator
Posts: 3695
Joined: Wed Dec 28, 2011 11:45 pm

Re: Forum problems 10 April 2015

Sat Apr 11, 2015 11:00 pm

gkreidl wrote:And the RSS feeds are still not working: they have to be directed to https, I suppose, but that doesn't work right now.
hmm, the rss feed for the blog seems ok to me (on http it redirects to https as expected) and I can't seem to find any evidence that rss feeds exist for the forum, am I missing something.

User avatar
morphy_richards
Posts: 1603
Joined: Mon Mar 05, 2012 3:26 pm
Location: Epping Forest
Contact: Website

Re: Forum problems 10 April 2015

Sat Apr 11, 2015 11:10 pm

A paranoid educational internet provider filters all https traffic because erm ...I don't really know why, something to do with politics. Google translate is now unuseable for me at work since they switched to https. It seems it might be used to access facebook in Esperanto.

Just to make it clear, I blame the filter service provider but its a potential issue for an educational foundation if they get filtered out by default.

gkreidl
Posts: 6355
Joined: Thu Jan 26, 2012 1:07 pm
Location: Germany

Re: Forum problems 10 April 2015

Sun Apr 12, 2015 3:53 am

plugwash wrote:
gkreidl wrote:And the RSS feeds are still not working: they have to be directed to https, I suppose, but that doesn't work right now.
hmm, the rss feed for the blog seems ok to me (on http it redirects to https as expected) and I can't seem to find any evidence that rss feeds exist for the forum, am I missing something.
Yes, you are missing the forum RSS. They are built into phpBB and my browser (Opera) shows them in the URL field. I just discovered the feeds a few weeks ago and it was a much better way to follow the forum for me (setting the update to 5 minutes). But now I don't get updates any more. Somebody has to fix this in the phpBB admin settings.
Minimal Kiosk Browser (kweb)
Slim, fast webkit browser with support for audio+video+playlists+youtube+pdf+download
Optional fullscreen kiosk mode and command interface for embedded applications
Includes omxplayerGUI, an X front end for omxplayer

User avatar
Paul Webster
Posts: 832
Joined: Sat Jul 30, 2011 4:49 am
Location: London, UK
Contact: Twitter

Re: Forum problems 10 April 2015

Sun Apr 12, 2015 7:00 am

The old semi-official link still works to get content
http://www.raspberrypi.org/forum/feed.php
Note - forum not forums and not https
However, clicking links within then has the http/http problem.

User avatar
r3d4
Posts: 984
Joined: Sat Jul 30, 2011 8:21 am
Location: ./

Re: Forum problems 10 April 2015

Sun Apr 12, 2015 7:22 am

Paul Webster wrote:The old semi-official link still works to get content
http://www.raspberrypi.org/forum/feed.php
Note - forum not forums and not https
However, clicking links within then has the http/http problem.
Just cicked a few and they worked ,so looks like any the gremlins have been exposed to th sunlight light.

gkreidl
Posts: 6355
Joined: Thu Jan 26, 2012 1:07 pm
Location: Germany

Re: Forum problems 10 April 2015

Sun Apr 12, 2015 8:13 am

r3d4 wrote:
Paul Webster wrote:The old semi-official link still works to get content
http://www.raspberrypi.org/forum/feed.php
Note - forum not forums and not https
However, clicking links within then has the http/http problem.
Just cicked a few and they worked ,so looks like any the gremlins have been exposed to th sunlight light.
At the moment the RSS feed is updating again, but it didn't yesterday.
Minimal Kiosk Browser (kweb)
Slim, fast webkit browser with support for audio+video+playlists+youtube+pdf+download
Optional fullscreen kiosk mode and command interface for embedded applications
Includes omxplayerGUI, an X front end for omxplayer

Bruny
Posts: 159
Joined: Fri Feb 06, 2015 5:22 pm

Forum problems Jun 2015

Wed Jun 24, 2015 11:32 pm

something new?
Your connection to [this forum] is encrypted with obsolete cryptography :!:

User avatar
kusti8
Posts: 3439
Joined: Sat Dec 21, 2013 5:29 pm
Location: USA

Re: Forum problems Jun 2015

Wed Jun 24, 2015 11:35 pm

Bruny wrote:something new?
Your connection to [this forum] is encrypted with obsolete cryptography :!:
Yeah, looking at chrome, it says:
Chrome wrote:Your connection to www.raspberrypi.org is encrypted using an obsolete cipher suite.

The connection uses TLS 1.2.

The connection is encrypted using AES_256_CBC, with HMAC-SHA1 for message authentication and DHE_RSA as the key exchange mechanism.
Don't know anything about cryptography, but it shouldn't affect anything. I can browse the forum fine.
There are 10 types of people: those who understand binary and those who don't.

Bruny
Posts: 159
Joined: Fri Feb 06, 2015 5:22 pm

Re: Forum problems Jun 2015

Wed Jun 24, 2015 11:38 pm

kusti8 wrote:Don't know anything about cryptography, but it shouldn't affect anything. I can browse the forum fine.
yes, I have more trouble with some plain text shops :oops:

plugwash
Forum Moderator
Forum Moderator
Posts: 3695
Joined: Wed Dec 28, 2011 11:45 pm

Re: Forum problems Jun 2015

Thu Jun 25, 2015 2:31 am

Bruny wrote:something new?
Your connection to [this forum] is encrypted with obsolete cryptography :!:
From some googling it looks like it's a new version of chrome doing it. Might be worth one of the server admins fixing the server config.

It looks like the specific problem is that the server is only offering cipher suites that use 1024 bit diffe-hellman which is now considered relatively weak (e.g. right now breakable by state-level attackers, and quite possiblly breakable by other people in the not too distant future). .

https://www.ssllabs.com/ssltest/analyze ... 93.128.211

Return to “General discussion”