Jim at BSME

When I try to go to this particular link: https://forum.mrhmag.com/post/building-a-helix-with-pvc-pipe-12207079, I am getting a security error message from google/chrome that: 

Quote:

Attackers on http://www.modelrailroadforums.com may trick you into doing something dangerous like installing software or revealing your personal information (for example, passwords, phone numbers, or credit cards).

I'm using Chrome  Version 60.0.3112.90 (Official Build) (32-bit), on Windows 7 Enterprise, Serivce Pack 1, 64-bit

- Jim B.
Baltimore Society of Model Engineers, Estd. 1932
O & HO Scale model railroading
Check out BSME on: FacebookInstagram
Reply 0
RandallG

Yes, my Avast even complains about it too

Im running Firefox on win 10.

Randy

Reply 0
joef

It's not the MRH forum link

It's not the MRH forum link that's bad, if you do a search and get the modelrailroad forums link in the search, you also get the scarey message.

If you click more details, you get this:

Quote:

Google Safe Browsing recently detected phishing on (link removed). Phishing sites pretend to be other websites to trick you.

Apparently this site has been sending out some phishing emails that link to them, so Google has flagged them as a devious site. It has nothing to do with MRH linking to them, so we changed your subject to be more accurate.

Joe Fugate​
Publisher, Model Railroad Hobbyist magazine

[siskiyouBtn]

Read my blog

Reply 0
Jim at BSME

Change the link on MRH

Can you change/disable the link on the MRH page so we can see the MRH post?

- Jim B.
Baltimore Society of Model Engineers, Estd. 1932
O & HO Scale model railroading
Check out BSME on: FacebookInstagram
Reply 0
joef

Sorry, can't fix it easily

Quote:

Can you change/disable the link on the MRH page so we can see the MRH post?

Try as we might, Google insists on labeling this thread as dangerous. All we can do is unpublish it and wait for Google to change its mind about the modelrailroadforums. By posting the link on this thread as well, this thread is also now labeled as dangerous, so we removed the link.

Joe Fugate​
Publisher, Model Railroad Hobbyist magazine

[siskiyouBtn]

Read my blog

Reply 0
railandsail

??

Please explain to an uneducated computer guy?

Are you saying that any link to 'modelrailroadforums' will get this treatment as being highly suspect?....and any link to it from a discussion on this forum will result in that subject thread being deleted from this forum site??

I participated (and still do) quite a bit on that forum, and I believe I remember getting some 'phishing messages' when I logged in over the last few weeks.

I thought it might just be more of this crap about being 'unregistered' with microsoft or explorer or whatever.??   ...or some other 'protection software' trying to sell their new product

So that whole forum site has a problem??

Reply 0
railandsail

Notifications for follow-on postings in subject threads

BTW, something I really like about that site, and a number of boat design forums I participate in is the 'Notifications' I get when someone adds to a discussion subject I am participating in. I assume the software program that operates this site does not have such a feature built into it??

Reply 0
AzBaja

http://www.nscale.net is doing the same thing

http://www.nscale.net is doing the same thing.  This is something new.  and is going on with more than one website.

AzBaja
---------------------------------------------------------------
I enjoy the smell of melting plastic in the morning.  The Fake Model Railroader, subpar at best.

Reply 0
Bremner

Joe...

This means that the site has been compromised. You will need to have a malware scan and removal completed and inform Google that you have done so. I would also recommend that you add an SSL certificate to encrypt all data entered into the site. Google Chrome is going to start giving warnings that sites are not secure when you visit a site without an SSL

http://www.zdnet.com/article/google-tightens-noose-on-http-chrome-to-stick-not-secure-on-pages-with-search-fields/

am I the only N Scale Pacific Electric Freight modeler in the world?

https://sopacincg.com 

Reply 0
joef

"This means the site has been compromised" ... not necessarily

Quote:

This means that the site has been compromised.

Not necessarily. Google is also on a campaign to get everyone onto HTTPS for everything and they're now starting to blacklist some otherwise benign HTTP-only sites that have a login with this big red scarey front page even though the site itself has no malware and has not been compromised.

See this link:
https://www.bleepingcomputer.com/news/security/report-reveals-google-is-blacklisting-some-sites-that-handle-passwords-via-http/

Quote:

The non-HTTPS sites that Google has been slapping the Deceptive Content warning onto are all recently registered domains, meaning that they didn’t have time to build a reputation and authority with Google. Despite the warning, they contained no malware, and were blacklisted until SSL was enabled on them, the security company explains.

Joe Fugate​
Publisher, Model Railroad Hobbyist magazine

[siskiyouBtn]

Read my blog

Reply 0
Bremner

Joe...

Sending phishing emails from the site means one of two things, one, the site has been compromised and there is a script sending the email or two, the hacker has wrote a script that is sending the email through a contact form's sendmail function and you should add a captcha to the forms. 

This site is currently on an outdated version of drupal, and 3 years ago there was a really bad hack nicknamed drupalgeddon, which was a hack that sent out mass amounts of fraudulent emails, and was caused by a SQL injection. I remember the day that it hit and I had to go into about 30 servers that I was managing and turned off the email send function. One of these servers had 400 infected Drupal sites on it and had about 50,000 emails in queue waiting to be sent out.

I work on servers and in website security for a living. I would be running another malware scan on the servers, add an SSL and captchas....

am I the only N Scale Pacific Electric Freight modeler in the world?

https://sopacincg.com 

Reply 0
Warflight

Not a problem, so much as weird...

So today, I thought MRH was down! My computer kept timing out, over and over again... couldn't access anything MRH! So my thought "Oh, the site must be down" but, as an experiment, I turned on my proxy server, and set my proxy address to "Central US" and bam... everything works.

It's definately an issue with my service provider, as I can't access the site raw today. (the issue will probably pass in an hour or two, I'm sure)

 

Reply 0
Warflight

Yep.

The issue passed. (I just tried it without the proxy)

Just one of those weird "Internet things" I suppose.

Usually sites are blocked with a proxy (you can't watch Netflix if you use a proxy, and half of the videos on Amazon won't work with a proxy... though... train videos on Amazon are fine with the proxy)

A proxy server app (for those who are about to ask) is a program that changes your IP address, to hide your location, or access the internet at another point in the US, or world for that matter. Hackers use them for piracy, but they are also useful for anything from privacy, or, in my case, for trouble shooting, security testing, and research. My IT guy judges me for having one, but then uses it quite a bit for testing outside connections.

 

Reply 0
Jim at BSME

Compromised site(s)

The issues are with modelrailroadforums dot com and nscale dot net and if you have a link to them then google prevents you from seeing the page that is even linked to the possibly problem site(s).

So @AzBaja please remove the link to nscale dot net as eventually (don't know how long) google will mark this page as bad and prevent everyone from seeing it as it did with the Thread on building a helix with PVC pipe.

Joe has temporarily unpublished that page in hopes that google with age off its issue and then he will be able republish the page here.

- Jim B.
Baltimore Society of Model Engineers, Estd. 1932
O & HO Scale model railroading
Check out BSME on: FacebookInstagram
Reply 0
railandsail

I just don't understand all

I just don't understand all this new-age computer tech. I just wish there was not all this hacking, phishing etc.
I wish they would make an example of these folks that perpetrate this stuff by putting some of them in JAIL for awhile, and advertising that this is what is going to happen to you. (and keep them separated apart in jail so they don't all learn new tricks from each other while locked up with NO INTERNET ACCESS)

Reply 0
Rick Sutton

Warning on private emails

So, I tried the email system for the first time in a long time.....had problems before.

Don't know if it will get there but if it does it comes with a warning that it may have been sent by someone who is not me. Cute

Reply 0
railandsail

Compromised Site & Building PVC Helix

Quote:

Compromised site(s)

The issues are with modelrailroadforums dot com and nscale dot net and if you have a link to them then google prevents you from seeing the page that is even linked to the possibly problem site(s).

So @AzBaja please remove the link to nscale dot net as eventually (don't know how long) google will mark this page as bad and prevent everyone from seeing it as it did with the Thread on building a helix with PVC pipe.

Joe has temporarily unpublished that page in hopes that google with age off its issue and then he will be able republish the page here.

- Jim B.

Does that mean the situation may cleared up, and then the PVC Helix Subject Thread might get put back up?

Or perhaps if that link to the other forum could be edited out, so as to not cause a problem on this forum, if republished?
(I'm sorry, when I just reread joef's posting I see that this may not clear up the problem)

Reply 0
Jim at BSME

re: Compromised Site & Building PVC Helix

Quote:

Does that mean the situation may cleared up, and then the PVC Helix Subject Thread might get put back up?

Or perhaps if that link to the other forum could be edited out, so as to not cause a problem on this forum, if republished?
(I'm sorry, when I just reread joef's posting I see that this may not clear up the problem)

Hey I hope Joe reads this as I just tried and was able to successfully go to modelrailroadforums dot com and so the PVC Helix thread should be ok now too!

- Jim B.
Baltimore Society of Model Engineers, Estd. 1932
O & HO Scale model railroading
Check out BSME on: FacebookInstagram
Reply 0
joef

Done: republished.

Quote:

Hey I hope Joe reads this as I just tried and was able to successfully go to modelrailroadforums dot com and so the PVC Helix thread should be ok now too!

Done, thread republished.

Joe Fugate​
Publisher, Model Railroad Hobbyist magazine

[siskiyouBtn]

Read my blog

Reply 0
Reply