S@h_BETA 'faked'? I can't log-in with Firefox

Message boards : Number crunching : S@h_BETA 'faked'? I can't log-in with Firefox
Message board moderation

To post messages, you must log in.

1 · 2 · Next

AuthorMessage
Profile Sutaru Tsureku
Volunteer tester

Send message
Joined: 6 Apr 07
Posts: 7105
Credit: 147,663,825
RAC: 5
Germany
Message 1031207 - Posted: 5 Sep 2010, 19:31:30 UTC
Last modified: 5 Sep 2010, 19:45:26 UTC

Hello community!

I wanted to log-in in my S@h_BETA account.
I go to the website: 'http://setiweb.ssl.berkeley.edu/beta' ..click on 'Your account'..

..the URL in the browser change to 'https://..'
..and my Firefox browser say:

Dieser Verbindung wird nicht vertraut

Sie haben Firefox angewiesen, eine gesicherte Verbindung zu setiweb.ssl.berkeley.edu aufzubauen, es kann aber nicht überprüft werden, ob die Verbindung sicher ist.

Wenn Sie normalerweise eine gesicherte Verbindung aufbauen, weist sich die Website mit einer vertrauenswürdigen Identifikation aus, um zu garantieren, dass Sie die richtige Website besuchen. Die Identifikation dieser Website dagegen kann nicht bestätigt werden.

Was sollte ich tun?

Falls Sie für gewöhnlich keine Probleme mit dieser Website haben, könnte dieser Fehler bedeuten, dass jemand die Website fälscht. Sie sollten in dem Fall nicht fortfahren.



It's like the website is 'faked'.


You see similar things there?


Thanks!
ID: 1031207 · Report as offensive
KB7RZF
Volunteer tester
Avatar

Send message
Joined: 15 Aug 99
Posts: 9549
Credit: 3,308,926
RAC: 2
United States
Message 1031211 - Posted: 5 Sep 2010, 19:48:55 UTC

I got a warning as well when I clicked on my account, but it let me long in just fine.
ID: 1031211 · Report as offensive
Profile Sutaru Tsureku
Volunteer tester

Send message
Joined: 6 Apr 07
Posts: 7105
Credit: 147,663,825
RAC: 5
Germany
Message 1031214 - Posted: 5 Sep 2010, 19:53:44 UTC - in response to Message 1031211.  

I got a warning as well when I clicked on my account, but it let me long in just fine.


You use the Internet Explorer?

IIRC, the URL in the browser don't change to 'https://..'.
You see also the 's'?

Firefox say it could be a fake and I should 'go away'.. ;-)

ID: 1031214 · Report as offensive
Profile John Neale
Volunteer tester
Avatar

Send message
Joined: 16 Mar 00
Posts: 634
Credit: 7,246,513
RAC: 9
South Africa
Message 1031220 - Posted: 5 Sep 2010, 20:16:52 UTC

I am able to reach the "Your account" page on SETI Beta using MS Internet Explorer, and the url starts with http.

However, when I tried to navigate there with Google Chrome, I received this security warning:

The site's security certificate is not trusted!
You attempted to reach setiweb.ssl.berkeley.edu, but the server presented a certificate issued by an entity that is not trusted by your computer's operating system. This may mean that the server has generated its own security credentials, which Google Chrome cannot rely on for identity information, or an attacker may be trying to intercept your communications. You should not proceed, especially if you have never seen this warning before for this site.


And the url changed to https. (Since I had never been there before via Google Chrome, I was being directed to the login page.)
ID: 1031220 · Report as offensive
Profile Sutaru Tsureku
Volunteer tester

Send message
Joined: 6 Apr 07
Posts: 7105
Credit: 147,663,825
RAC: 5
Germany
Message 1031223 - Posted: 5 Sep 2010, 20:24:24 UTC - in response to Message 1031220.  

For ~ one month or something (the last time I logged-in there) I could log-in with Firefox.

In the meantime maybe someone changed there something?

Because normally (in past) the URL don't change to 'https://..'.

ID: 1031223 · Report as offensive
Profile Fred J. Verster
Volunteer tester
Avatar

Send message
Joined: 21 Apr 04
Posts: 3252
Credit: 31,903,643
RAC: 0
Netherlands
Message 1031228 - Posted: 5 Sep 2010, 21:11:15 UTC - in response to Message 1031223.  

SETI Bêta Main Page
Also be able to log-in, normally.

But, only Bêta Forums, are UP, all other servers are Disabled or Not Running, so no work is generated.
AP tasks can only come from SETI@Home ;-)


ID: 1031228 · Report as offensive
JohnDK Crowdfunding Project Donor*Special Project $250 donor
Volunteer tester
Avatar

Send message
Joined: 28 May 00
Posts: 1222
Credit: 451,243,443
RAC: 1,127
Denmark
Message 1031230 - Posted: 5 Sep 2010, 21:33:46 UTC - in response to Message 1031220.  

I am able to reach the "Your account" page on SETI Beta using MS Internet Explorer, and the url starts with http.

However, when I tried to navigate there with Google Chrome, I received this security warning:

The site's security certificate is not trusted!
You attempted to reach setiweb.ssl.berkeley.edu, but the server presented a certificate issued by an entity that is not trusted by your computer's operating system. This may mean that the server has generated its own security credentials, which Google Chrome cannot rely on for identity information, or an attacker may be trying to intercept your communications. You should not proceed, especially if you have never seen this warning before for this site.


And the url changed to https. (Since I had never been there before via Google Chrome, I was being directed to the login page.)

Not sure if you mean there was no warning when using IE, which version do you use? Using IE8 I did get the warning, I clicked anyway and got to the login screen.

I don't think there anything bad/fake going on, I thing either the certificate has run out or Seti have change some URL stuff so the certificate isn't valid anymore.
ID: 1031230 · Report as offensive
Claggy
Volunteer tester

Send message
Joined: 5 Jul 99
Posts: 4654
Credit: 47,537,079
RAC: 4
United Kingdom
Message 1031231 - Posted: 5 Sep 2010, 21:40:40 UTC - in response to Message 1031228.  

SETI Bêta Main Page
Also be able to log-in, normally.

But, only Bêta Forums, are UP, all other servers are Disabled or Not Running, so no work is generated.
AP tasks can only come from SETI@Home ;-)


I can also log in O.K with IE and Firefox,

Don't trust what the Server Status page says, it hasn't reflected reality for at least 9 months, the rest of the project is up,

and to prove it here's some fresh work i've just received: All tasks for computer 45274

Claggy
ID: 1031231 · Report as offensive
Josef W. Segur
Volunteer developer
Volunteer tester

Send message
Joined: 30 Oct 99
Posts: 4504
Credit: 1,414,761
RAC: 0
United States
Message 1031238 - Posted: 5 Sep 2010, 22:35:04 UTC

S@H uses self-signed certificates. The browser should allow you to view the certificate and see that, then if you trust the staff you accept the certificate.

It is definitely proper for a browser to get the user's judgement for such cases which are not chained back to one of the big certificate issuers.
                                                                 Joe
ID: 1031238 · Report as offensive
Profile arkayn
Volunteer tester
Avatar

Send message
Joined: 14 May 99
Posts: 4438
Credit: 55,006,323
RAC: 0
United States
Message 1031241 - Posted: 5 Sep 2010, 22:45:59 UTC

If you are logging in, the server should change to https:// as that means the connection is encrypted and less likely to be intercepted.

Once I confirmed the certificate exception I logged in just fine to my account.

ID: 1031241 · Report as offensive
Profile Sutaru Tsureku
Volunteer tester

Send message
Joined: 6 Apr 07
Posts: 7105
Credit: 147,663,825
RAC: 5
Germany
Message 1031243 - Posted: 5 Sep 2010, 23:06:01 UTC
Last modified: 6 Sep 2010, 0:00:01 UTC

I never use again the Internet Explorer.. ;-)
I use only Firefox.. :-)


The 'problem' is, that I never got a notification in Firefox that I enter a 'https' (security, encrypted) area, if I log(ged)-in at S@h or S@h_B.
The 'http' stay/ed all the time.

The strange is, for some hours, that the browser say, I will enter a 'https' area after clicking on 'Your account' at S@h_B. This was never before.

I don't want to look to EMails or make homebanking or something similar..

S@h and S@h_B was never a 'https' area.


Maybe an admin changed there something?
Or, what's going on with my browser?


EDIT: BTW. Now I see also only the 'http' in the browser here in the forum..
EDIT#2: You see there 'https'?
ID: 1031243 · Report as offensive
KB7RZF
Volunteer tester
Avatar

Send message
Joined: 15 Aug 99
Posts: 9549
Credit: 3,308,926
RAC: 2
United States
Message 1031257 - Posted: 6 Sep 2010, 0:15:06 UTC - in response to Message 1031214.  

I got a warning as well when I clicked on my account, but it let me long in just fine.


You use the Internet Explorer?

IIRC, the URL in the browser don't change to 'https://..'.
You see also the 's'?

Firefox say it could be a fake and I should 'go away'.. ;-)

No, I only use Firefox. Once the certificate is accepted, you don't get the warning again, or at least I didn't.
ID: 1031257 · Report as offensive
Profile James Sotherden
Avatar

Send message
Joined: 16 May 99
Posts: 10436
Credit: 110,373,059
RAC: 54
United States
Message 1031264 - Posted: 6 Sep 2010, 1:14:51 UTC

I see the Http when I use safari or IE8, when Im on the mesaage boards.
[/quote]

Old James
ID: 1031264 · Report as offensive
Profile Fred J. Verster
Volunteer tester
Avatar

Send message
Joined: 21 Apr 04
Posts: 3252
Credit: 31,903,643
RAC: 0
Netherlands
Message 1031330 - Posted: 6 Sep 2010, 8:29:42 UTC - in response to Message 1031264.  

I really dislike I.E. it's the only browser/program, that crashes too often (!?!)
Or just stops, I'll prefer F.F.
Mozilla/5.0 (Windows; U; Windows NT 5.1; nl; rv:1.9.2.8) Gecko/20100722 AskTbCPUID/3.8.0.12304 Firefox/3.6.8 ( .NET CLR 3.5.30729)


ID: 1031330 · Report as offensive
Profile John Neale
Volunteer tester
Avatar

Send message
Joined: 16 Mar 00
Posts: 634
Credit: 7,246,513
RAC: 9
South Africa
Message 1031339 - Posted: 6 Sep 2010, 9:17:57 UTC - in response to Message 1031230.  

Not sure if you mean there was no warning when using IE, which version do you use? Using IE8 I did get the warning, I clicked anyway and got to the login screen.


My default browser is IE8, and I'm automatically logged in to my SETI Beta account using that browser. I'm sure that if I logged out and tried to log in again using IE8, I'd get the warning.

The warning appeared when I used Google Chrome for the first time, and was directed to the login page. (Incidentally, this warning did not appear when I logged into my SETI Main account page for the first time using Chrome.)

Since I agree that there isn't a problem with the site, I proceeded with the SETI Beta login anyway. I was not afforded an opportunity to view the security certificate, but once logged in, I remained logged in and was able to access the "Your account" page without any further warnings.
ID: 1031339 · Report as offensive
Sirius B Project Donor
Volunteer tester
Avatar

Send message
Joined: 26 Dec 00
Posts: 24879
Credit: 3,081,182
RAC: 7
Ireland
Message 1031341 - Posted: 6 Sep 2010, 9:38:46 UTC

Just logged into S@H Beta using IE with no problems. No https & logged out & back in, still no problem.
ID: 1031341 · Report as offensive
Profile S@NL - BuddyWolly
Volunteer tester
Avatar

Send message
Joined: 31 May 99
Posts: 19
Credit: 8,523,679
RAC: 1
Netherlands
Message 1031350 - Posted: 6 Sep 2010, 12:18:37 UTC

The login process uses https protocol. It presents a certificate to you browser so your browser knows it is the website it is suposed to be.
The name for which the certificate is issued (setibase.ssl.berkeley.edu) as present on the current certificate does not match the exact address (http://setiweb.ssl.berkeley.edu/beta/) off the website. Also the certificate is a so called self signed certificate. i.e. a certificate created by berkeley itself, as opposed by a certificate provided by a certificate authority (i.e. verisign and the likes).

Modern browsers warn you that this is not in compliance whit how certificats are suposed to be used.
You can check the certificate by looking at its detail, check the address in your browser and if you think everything is OK then add an exception allowing your browser to accept this certificate.


ID: 1031350 · Report as offensive
Profile John Neale
Volunteer tester
Avatar

Send message
Joined: 16 Mar 00
Posts: 634
Credit: 7,246,513
RAC: 9
South Africa
Message 1031351 - Posted: 6 Sep 2010, 12:22:46 UTC - in response to Message 1031341.  

Just logged into S@H Beta using IE with no problems. No https & logged out & back in, still no problem.


I did the same - logged out and in - and IE8 did indeed give a security warning. The login page url is secure/encrypted: https://setiweb.ssl.berkeley.edu/beta/login_form.php?next_url=home.php.

Which version of IE are you using?
ID: 1031351 · Report as offensive
Sirius B Project Donor
Volunteer tester
Avatar

Send message
Joined: 26 Dec 00
Posts: 24879
Credit: 3,081,182
RAC: 7
Ireland
Message 1031382 - Posted: 6 Sep 2010, 17:08:13 UTC - in response to Message 1031351.  

Win 7 & Version 8. Still not getting any warning. logs in ok.
ID: 1031382 · Report as offensive
Eric Korpela Project Donor
Volunteer moderator
Project administrator
Project developer
Project scientist
Avatar

Send message
Joined: 3 Apr 99
Posts: 1382
Credit: 54,506,847
RAC: 60
United States
Message 1031508 - Posted: 7 Sep 2010, 0:50:26 UTC

David was doing some testing of using https to secure the login pages. He didn't realize that we have a self signed certificate which shows up as a warning in most browsers. He's stopped the testing until we by a certificate signed by a certification authority (CA).
@SETIEric@qoto.org (Mastodon)

ID: 1031508 · Report as offensive
1 · 2 · Next

Message boards : Number crunching : S@h_BETA 'faked'? I can't log-in with Firefox


 
©2024 University of California
 
SETI@home and Astropulse are funded by grants from the National Science Foundation, NASA, and donations from SETI@home volunteers. AstroPulse is funded in part by the NSF through grant AST-0307956.