Re-direct - and an insecure connection - when opening GOC

[Wendell]

For the last few days, every time I open GOC I get a delay message before the (apparent) GOC page appears. Then, the password field is not secure, displaying the password as you type. Moments later, the password field appears to be working as it should, but it isn't...because if you then click on 'reload' the password appears in plain text.

I don't know why this has been happening, and I don't know why encription (e.g: 'https') hasn't been enabled, but it seems clear to me that security of GOC accounts and passwords has been compromised.

[jwirecom109]

For the redirect, we have cloud flare as a front end DDos midgiation, you may see a quick message saying checking browser redirect In 5 seconds. We had to do this in the last week due to high DDOS attacks.

GOC security has not been compromised the security has been upped in the last week, firewall rules added, software added and a front end ddos manager.

As for showing the password, check your own browser settings, I've checked on all browsers and the password is hidden for when entering it. Your browser might have a virus on it or an add-on that is doing this.

[Coke]

I got the browser check today, as well. But I am also running through a VPN as well. And it's only a short pause - if it helps secure the website, it's all good...

[BrotherRockeye]

After being on dialup for so long, a few seconds for the greater good is more than acceptable!

[triq]

Thanks for clarifying about that browser check step. For the last week or so I have been battling with a privoxy virus and I kept thinking this check was that program rearing it's head again. Now I know I removed privoxy completely. BTW, if you're looking for a free mal ware remover to deal with privoxy give malwarebytes Anti-Malware 2.0 a try. It was the only one that detected all back door reinstallation services and registry settings for me.

Sent from my SM-G925W8 using Tapatalk

[chuckbuster]

Huh...I just cleared my laptop browser and now my password shows up when being typed at the top of the page, but, when done on the option at the bottom of the page, it is still encrypted.

[Steveo9mm]

My password isnt hidden either.

[jwirecom109]

First check your browsers to see if, they have an option to show passwords clicked on.

Next make sure your browsers are up to date.

If you using EI, well sorry about that, but EI uses old tech and I don't suggest to use it.

If that doesn't work, email [email protected] the issues with details of what browser your using.

I've tried on all browsers and can't replicate the issue

[chuckbuster]

It only happens on GOC...and...how do I check my browser as suggested???

[jwirecom109]

It only happens on GOC...and...how do I check my browser as suggested???

you'll have to google your browser settings on it, each is different

[chuckbuster]

Well, I tried that and I got all kinds of stuff on saving passwords in Chrome, and what info I did find on managing passwords in Chrome, I had already tried in the settings.

[jwirecom109]

So I personally have not been able to replicate the issue, I've tried with a destop PC, a Laptop, a Mac, a Android phone, an Iphone, an Ipad.

I use Chrome as my primary.

I've had several mods and non mods test it as well without the issue.

there are 3rd party extensions, you should check for (mods) on your browser, also there are coding ways to show your password.

As for the software of Vbulletin, it doesn't allow that, infact even if i wanted to as an admin see a password for an account I wouldn't be able to pull it up. Its a security feature of vbulletin to ensure your privacy.

I'm locking the thread, as I don't want anyone to relieve any personal information or passwords.

Email me a screen show and details with what your on, eg pc, phone, ipad, etc and what browser your using. But from what I can dig up its usually on the user side and not the site side

[email protected]