Website Security

Pixeldust (Lucy Paulina Sears) · Posted: Mon Nov 04, 2019 3:51 am Post subject: Website Security

For the first time since I've been logging into the RL site, I have come across this today. It took a bit to get around it but it makes me a bit nervous.

I know it's always told me it's "insecure" but this was a bit unnerving. Are we doing anything to make the website more secure?

Edited for better photo with more details
_________________
Lucy
Kessel Base XO
Wretched Hive DXO
Mother of Jawas

QuiGonJyn () · Posted: Mon Nov 04, 2019 4:34 am Post subject:

Same issue here - it's working normally in other browsers, but Chrome isn't allowing me to access any part of the site

DevinShadowV (Devin Vanassche) · Posted: Mon Nov 04, 2019 4:41 am Post subject: Re: Website Security

Dr. Morbius (Ingo Kaiser) · Posted: Mon Nov 04, 2019 11:14 am Post subject:

Same problem!
This should be top priority to be fixed, really!
_________________

NateH (Nate Hoffman) · Posted: Mon Nov 04, 2019 4:08 pm Post subject:

I agree that this needs to be fixed. I would be concerned that the site has been compromised in some way.

Here are two support articles about it, the web master should be able to get more information using the second article.

https://support.google.com/chrome/answer/99020?visit_id=637084799314247548-3355924310&p=cpn_safe_browsing&hl=en&rd=1

https://developers.google.com/web/fundamentals/security/hacked/request_review

mgb1016 (Melissa Branch) · Posted: Mon Nov 04, 2019 4:20 pm Post subject:

I've had the same thing going on since last night with Chrome, and on different computers. I was able to login just now with Internet Explorer.
_________________
Freedom Base:
Benthic Two Tubes
Garrison Tyranus - Galactic Center Squad:
ESB Stormtrooper - TK-12189
TFA Kylo Ren - DS-12189

ladysolo14 () · Posted: Mon Nov 04, 2019 6:28 pm Post subject:

This has been taken care of. The site has not been compromised in anyway and when I say that all data is safe.

What happened is the DB94 detachment site was compromised and injected with phishing code. Since that site is a subdomain of rebellegion.com it flagged all the sites as dangerous.

I have taken down the DB94 site and quarantined the files. I'll reach out to the detachment leader as this happened due to the WordPress site not properly being updated with security updates.

While Adam and I were fixing things we also added a valid certificate for https.

I have a request in with Google to re-review the site and hopefully all the warning will go away at the latest in 72 hours.

ardavenport (Anne Davenport) · Posted: Mon Nov 04, 2019 11:58 pm Post subject:

I just got the same thing here, so google hasn't changed anything yet. I'm using Microsoft Edge to post this.

_________________

Your focus determines who you are.

ladysolo14 () · Posted: Tue Nov 05, 2019 4:10 am Post subject:

Amelia (Emily Haas) · Posted: Tue Nov 05, 2019 10:45 am Post subject:

ladysolo14 () · Posted: Tue Nov 05, 2019 4:20 pm Post subject:

kman () · Posted: Tue Nov 05, 2019 8:58 pm Post subject:

Ouch. I hope the db94 data can be salvaged! Are there any uninfected backups?
_________________

Amelia (Emily Haas) · Posted: Tue Nov 05, 2019 11:13 pm Post subject:

G'nott sH'urr (David Campbell) · Posted: Thu Nov 07, 2019 12:52 pm Post subject:

As of 630 central time this morning I had the same red pop up on my phone. This was using Google and Chrome. I was trying to gain access through the main Legion website.
_________________
Once I was Dewka, but now I'm just G'nott sH'urr

NCOIC, "GUNNY" Marine Detachment Barbarossa
David, Louisiana's first Visitor.

ladysolo14 () · Posted: Thu Nov 07, 2019 5:15 pm Post subject:

Finally heard back from Google this morning and they removed the warnings on the site. Currently I am not getting them anymore and hopefully they go away from everyone in the next few hours.

The web team is having discussions on how to avoid this in the future. A lot of issues will be resolved as we shift into server migration. For now we think it will be putting quick bandaids in place as we feel the best use of time is to get onto a new server where security and technology is updated which will aid us in preventing things like this happening.

Forum and Costume Controls