Converting to https

Undertoad • Dec 27, 2016 6:39 pm
The Cellar is converting to https so that everything will be more secure.

There was a bit of oddness in the last hour or two as I set things up.

Please let me know of any oddities you might still notice, things not working and whatnot... thankee!
xoxoxoBruce • Dec 27, 2016 6:51 pm
No smilies and can't attach a picture to a post.
Undertoad • Dec 27, 2016 7:00 pm
Working on it....

Also we are kinda converting away from www.cellar.org to just cellar.org.
sexobon • Dec 27, 2016 7:02 pm
On the toolbar below the tagline, clicking the Community link doesn't give a drop down menu for Social Groups and Members List. It instead refreshes the page adding those links to the toolbar which expands it out of the Cellar Index framework.
Undertoad • Dec 27, 2016 7:26 pm
I believe smilies, the drop-down menu, and attachments are fixed.

If a picture of Eagles CB Jalen Mills is attached
lumberjim • Dec 27, 2016 7:29 pm
Does he have green hair?
monster • Dec 27, 2016 7:54 pm
xoxoxoBruce;977585 wrote:
No smilies and can't attach a picture to a post.


this (smilies)
monster • Dec 27, 2016 7:56 pm
still not working for me ...if I click on more smilies it does nothing. Or hangs.
monster • Dec 27, 2016 7:57 pm
:) let's see if a regular one works :eek:
Undertoad • Dec 27, 2016 8:13 pm
It may take a browser refresh (or even a close and re-open) to tell the browser the new settings are in?
monster • Dec 27, 2016 8:57 pm
done that a bazillion time because I use exploder and it sucks. And at least one restart. I'm sure it's just me. thanks
monster • Dec 27, 2016 8:58 pm
probably some pop-up blocker shite got reset or something
Undertoad • Dec 27, 2016 9:04 pm
That is very possible due to the address change - you may have to create a new exception for the https version of the site, or the non-www version of the site if you're directed there.
BigV • Dec 27, 2016 10:06 pm
Is that Baby Carrot Top up there?
monster • Dec 27, 2016 10:19 pm
so... it still shows http://. I closed and went through a google search to try and bypass favorites... should the address be https now?
Undertoad • Dec 27, 2016 11:09 pm
No well it's not enforced yet, but will be soon cos it's not truly secure until then. Still working out the first set of issues.
xoxoxoBruce • Dec 28, 2016 12:07 am
Everything seems to be working for me, and considerably faster too. :thumb:
glatt • Dec 28, 2016 8:41 am
:)

:eek:

this is kelp
[ATTACH]58947[/ATTACH]
glatt • Dec 28, 2016 8:42 am
Works for me in firefox
limey • Dec 28, 2016 9:26 am
:dunce: Works OK for me in Forefox, too ...
Undertoad • Dec 28, 2016 3:43 pm
There are still a few lingering items going on... working on it.

Ugh, I did not expect this to be such a problem...
Undertoad • Dec 28, 2016 3:49 pm
Yeah. The actual issue is that the site was built depending on Yahoo! code, loaded from Yahoo!, that is delivered INSECURELY and so all Javascript is broken in the https version of our site.

Working on it...
glatt • Dec 28, 2016 4:01 pm
Thanks for your work!
Undertoad • Dec 28, 2016 4:10 pm
My pleasure sir!

And just like that, a little research says you can obtain the same Javascirpt libraries from Google instead of Yahoo!. We are now getting those from Google over SSL, which means they are secure too.

(But a little... slower? Hmmm is it just me?)

This appears to have been one of the final steps in getting the "lock" symbol to show up when you browse the site with https. Which is a goal of all this.

In another day or two, if everything works, I'll figure out how to redirect all http requests to https.
Undertoad • Dec 28, 2016 4:18 pm
The lock symbol is broken right now on any page where requests are made for attachments, or images with http instead of https. So if an https page includes a call for http... it's not secure. Makes sense.

I just add this running commentary in case this is interesting for folks
glatt • Dec 28, 2016 4:21 pm
So I posted two smilies this morning from my laptop using Firefox and they worked. But now on tapatalk, I only see one of them worked.
Gravdigr • Dec 28, 2016 4:25 pm
Undertoad;977693 wrote:
I just add this running commentary in case this is interesting for folks


It is very interesting. And thank you, Toad, for the effort that goes into Teh Cellar.:notworthy
Flint • Dec 28, 2016 4:57 pm
Yes, it is interesting.
Thank you for the work and the commentary.

ETA: I'm getting the green hair thing, too.
Undertoad • Dec 28, 2016 5:02 pm
It's pretty easy to see what's causing security problems on a page, using Chrome.

You hit F12 and the Developers Console comes up. If you use Chrome and accidentally have hit F12, you have seen this thing. If you've ever developed in CSS or Javascript, you already know.

The Security tab tells you exactly why the page is considered non-secure.

~

Changing ALL hotlinked images is going to be a drag, or at least, a dangerous thing. I'm not sure it can even be done. There's no global search and replace in the forum software. Each one of those images is linked with an insecure permanent BBCODE bit of text. The change has to happen at database level and it has the potential to break things.
xoxoxoBruce • Dec 28, 2016 5:08 pm
glatt;977695 wrote:
So I posted two smilies this morning from my laptop using Firefox and they worked. But now on tapatalk, I only see one of them worked.


They are both there, you just can't see them on tapatalk.
glatt • Dec 28, 2016 5:10 pm
I know nothing about this stuff, so maybe this is a dumb question. But I don't think it's critical that old hotlinked images be displayed. Can you just break the image link and leave the text link there, pointing to the picture?
footfootfoot • Dec 28, 2016 5:11 pm
Well, that'll serve us for hotlinking.

And while "converting to https," invites the response, "Yeah, you know me." it doesn't really want it to come to the party because of the superfluous s at the end. So, no.
xoxoxoBruce • Dec 28, 2016 5:13 pm
Or download the image, break the link and put the image back in the post, but only UT and the mods can do that.
glatt • Dec 28, 2016 5:14 pm
Yeah, I'm not fixing thousands of hot linked images.
footfootfoot • Dec 28, 2016 5:26 pm
glatt;977716 wrote:
Yeah, I'm not fixing thousands of hot linked images.


Slacker
Undertoad • Dec 28, 2016 5:54 pm
And it may not matter all that much either.

Google is downgrading pages not served up with https, and soon they will be sending warnings about any page that appears to be collecting password or credit card data over a page without https.

Do they downgrade if the page is secure, but contains insecure sections? I don't know.

It's an issue because, if you're not logged in, every Cellar page has a login box at the top.

The register page is entirely secure...
Undertoad • Dec 28, 2016 6:21 pm
We are currently enforcing https, which means if people are browsing with http they will get rudely re-directed to the https version.

Let's see if any issues are reported in the next hour or so
sexobon • Dec 28, 2016 6:24 pm
One probably has to look outside of database fixes as some folks did with phpBB by creating an extension that runs hyperlinked http requests through an SSL image proxy server which rewrites them to https to appear as secure for viewing. I don't know if anything like this has ever been developed for vBulletin; but, it might be worth looking around for. If you find something, it might be worth bringing back the tip mug to pay for it. I suppose you could do a poll.

... Background Information:
If a phpBB board is served from a https:// server, it will generally behave well as a secure site, but any image links posted by users as http://... will appear to browsers to be insecure content, in some browsers promoting a security warning dialogue, and in other browsers resulting in the image becoming inaccessible.

A direct solution of converting the image links in the phpBB database is generally impractical, so an accepted solution is to use a SSL proxy to make the images appear to be secure. Camo is an example of such a proxy.

With this extension installed, when a phpBB page is being loaded by a user, links to http://... images are rewritten so that they become https:// links to the camo proxy server, with the original link address encoded into the new link. The user's browser then requests the image from the camo proxy which accesses the original location and re-serves it on-the-fly using the https:// protocol. ...
Undertoad • Dec 28, 2016 6:31 pm
The long run plan is to get away from vBulletin though, cos vBulletin has lost its mojo. But it may be possible to proxy these requests anyway... looking into it...
Flint • Dec 28, 2016 6:35 pm
sexobon;977735 wrote:
One probably has to look outside of database fixes as some folks did with phpBB by creating an extension that runs hyperlinked http requests through an SSL image proxy server which rewrites them to https to appear as secure for viewing. I don't know if anything like this has ever been developed for vBulletin; but, it might be worth looking around for. If you find something, it might be worth bringing back the tip mug to pay for it. I suppose you could do a poll.
That sounds like the ungrounded electrical socket adapters, that let you plug three-pronged plugs into two-pronged outlets. You can plug the thing in, but it isn't really grounded. It just bypasses the security feature. If I understand correctly, this is what you mean by "appear as" secure.

Conversely, I'm not a big fan of data rot, so there's that...
Undertoad • Dec 28, 2016 6:40 pm
It is interesting to notice how many sites on the net have this issue... and how many won't even serve up https versions. https://cnn.com serves up a ton of http:

This may give us some Google mojo.
sexobon • Dec 28, 2016 6:40 pm
@ Flint,

Yes, unfortunately, it only preserves viewing ability.
xoxoxoBruce • Dec 28, 2016 7:01 pm
Clicking on the link in post 41.
.
fargon • Dec 28, 2016 8:54 pm
I'm getting the privacy message. I'll come back tomorrow when the people that know what they are doing get done.
BigV • Dec 29, 2016 1:08 am
Undertoad;977708 wrote:
snip--

Changing ALL hotlinked images is going to be a drag, or at least, a dangerous thing. I'm not sure it can even be done. There's no global search and replace in the forum software. Each one of those images is linked with an insecure permanent BBCODE bit of text. The change has to happen at database level and it has the potential to break things.


when you say BBCODE bit of *text*, do you really mean it's a text string that you can find and edit? Albeit, metric monkeytons of them, sure.

I ask, because I have an editor that can handle very, very large files. I've only bothered to try it on text files, not... other files. And I don't know what kind of files you're dealing with wrt the places where the offending "BBCODE bit of text" is.

The editor is at work and my brain is offline. If you're interested, indicate that and I'll dig up the editor / link info for you. The tool all by itself is impressive.
Undertoad • Dec 29, 2016 9:51 am
All this stuff is in a database and easily editable, the question is whether increasing the size of the text field that contains each post will break the system. The developers have, as usual, done their best to make it difficult. I'm inclined to let it go, seeing how many top sites have the issue.
footfootfoot • Dec 29, 2016 11:27 am
http://www.cellar.org/showthread.php?t=32417

This is what I have as a URL, although the http part is not visible.

I didn't log out when I closed my browser.
Undertoad • Dec 29, 2016 11:35 am
I turned off enforcing... turning it back on now so the http will redirect automatically to https

The web spiders are a little confused right now... all still trying the old addresses, let's see how they do with this
glatt • Dec 29, 2016 11:48 am
tapatalk is confused right now, but I can get here on my laptop.
Undertoad • Dec 29, 2016 11:56 am
That's no good, we need tapatalk... they offer a way to specify that the forum uses https, but that feature is down now! Redirection cancelled...
Undertoad • Dec 29, 2016 12:02 pm
3 minutes later and not editing my post... the feature works now and Tapatalk has been updated to understand we are https. Redirection back on. It may take a cycle for Tapatalk to pick this up for everyone. It certainly hasn't figured it out yet on my device...
infinite monkey • Dec 29, 2016 12:16 pm
On my phone, which I can't show you because it's on my phone and this is not my phone and I tried to send a picture of it to my email to add here but I can't do that either so I'll describe it:

address box has a red triangle with an exclamation point in it, then https://cellar org only the https is in red and has cross-outs superimposed.

Then in the page space the triangle,
"Your connection is not private"

"Attackers might be trying to steal...blah blah blah"

"NET::ERR_CERT_AUTHORITY_INVALID"

I don't use Tapatalk. Don't particularly want to.

If this has been addressed I couldn't find it in the small amount of time I had to look for it.

Thanks!
Undertoad • Dec 29, 2016 12:30 pm
That might have happened cos it picked up an old cert that I was using for a while to test it yesterday... but after I installed a proper cert the authority should now be valid.

In cases like these, if you know it's the Cellar, you can hit "Advanced" and the "proceed anyway". Only if you know it's the Cellar.
limey • Dec 29, 2016 1:38 pm
I'm on my PC and not being forced anywhere https wise. It's the same, familiar, comfy pair of slippers ...
glatt • Dec 29, 2016 1:41 pm
tapatalk is working now and my pc sees https, looks like it's all working for me now.
Undertoad • Dec 29, 2016 2:07 pm
Tapatalk for me is still vexed if redirection is on.

Ugh so I've had it turned off and let's wait a day for it to pick up that change
footfootfoot • Dec 29, 2016 11:16 pm
I have a headache in my eye.
infinite monkey • Dec 30, 2016 1:58 am
I have an eye in my headache.
infinite monkey • Dec 30, 2016 1:59 am
Btw, working fine now. Good work. :)
captainhook455 • Dec 30, 2016 11:23 am
Well I don't care for it. I can't get one picture anywhere. They all show 0 then broke ticket. This sucks. I will come back in a few see how things are. I hate "new and improved"..

tarheel
Clodfobble • Dec 30, 2016 6:42 pm
My pictures in tapatalk are still broken as well, EXCEPT for the one picture glatt posted of hammers. Maybe it's the only one that was posted since the reversion UT did?
Undertoad • Dec 30, 2016 7:01 pm
Good eye - that one, he posted from Tapatalk.
captainhook455 • Dec 30, 2016 8:21 pm
Oh goody. Does this mean I can't access pictures from old threads.
Whoopdy do shit

tarheel
xoxoxoBruce • Dec 30, 2016 9:05 pm
Calm thyself, wait till he's finished. You ain't fucked till UT says you're fucked. :haha:
Undertoad • Dec 30, 2016 9:13 pm
I've submitted a trouble ticket with Tapatalk. We'll see if they are interested in answering during this holiday season.
captainhook455 • Dec 30, 2016 9:59 pm
Ok I won't drop the soap yet.

tarheel
BigV • Dec 31, 2016 11:04 pm
FYI
In the cats thread, I can see Gravdigr's pic of Slick but I can not see Pico's pic of Turbo.

Viewing on Android tablet in Chrome.

Both were visible earlier today.
sexobon • Jan 1, 2017 2:28 am
The "anonymous" Profile says:
[COLOR="Blue"]Date of Birth
January 1, 1921 (96)[/COLOR]

The Calendar says:
[COLOR="blue"]Members with Birthdays on 01-01-2017
anonymous (96)[/COLOR]

At the bottom of the index page it says:
[COLOR="Red"]Today's Birthdays
anonymous (95)
[/COLOR]
It seems that anonymous' age has not yet been secured (the type in colors was copied and pasted).
Undertoad • Jan 1, 2017 9:21 am
that will be unrelated to https.
infinite monkey • Jan 1, 2017 10:02 am
My phone still finds you threatening, but only sporadically so.
sexobon • Jan 1, 2017 12:36 pm
Undertoad;978134 wrote:
that will be unrelated to https.


I knew it! Anonymous lies about her age.

[SIZE="1"](I think that discrepancy has come up before.)
[/SIZE]
captainhook455 • Jan 1, 2017 8:58 pm
Must be nice to just leave the office and split. Funny thing is that I can get videos. I guess I have wait until Tuesday. ?

tarheel
Undertoad • Jan 1, 2017 10:13 pm
Well you must remember that nobody is getting one thin dime for anything here, so if they are helping out at all, much less over a holiday, it is really kind of lucky.
monster • Jan 1, 2017 10:59 pm
wait, so all those thin dimes I've been getting in the mail are for something else? :eek:

You WILL tell us when the tip mug is needed again -before you get thirsty- won't you?

thanks for everything, UT
classicman • Jan 2, 2017 11:19 am
monster;978224 wrote:
You WILL tell us when the tip mug is needed again -before you get thirsty- won't you?

thanks for everything, UT


Yes, this.
xoxoxoBruce • Jan 2, 2017 12:35 pm
I'm in.
infinite monkey • Jan 2, 2017 8:32 pm
Tired of every time i go to a new page i have to be ok with the supposed risk that i know isn't there but i have to click out of it anyway. I tried tapatalk for 5 minuutes and i hate it. Just mho.
glatt • Jan 2, 2017 8:37 pm
How are you getting to the site?
infinite monkey • Jan 2, 2017 8:48 pm
By clicking through the security warnings, for every page. I hate this, it isn't fun.
glatt • Jan 2, 2017 9:48 pm
So you are getting to the site on the browser on your phone?

My laptop and tapatalk are having no problems at all.

I don't know anything about this stuff, but have you tried closing out of the browser, and restarting your phone?
infinite monkey • Jan 2, 2017 9:55 pm
I am using chrome on my phone. Ive restareted and deleted history umpteen times.
Undertoad • Jan 2, 2017 10:06 pm
I've turned off https requirement again

...and asked Tapatalk to use the regular version of the site. Good gawd the world is not quite ready
infinite monkey • Jan 2, 2017 10:56 pm
Well now it remembers my name and password again. And no more security warnings. Sorry that https doesnt love all of us. Thanks for working with us. :)
sexobon • Jan 2, 2017 10:57 pm
Sent from my Samsung Sync flip phone. It wasn't easy.
infinite monkey • Jan 2, 2017 10:58 pm
Galaxy s5. So...
sexobon • Jan 2, 2017 11:16 pm
I posted with my flip phone just for kicks. My 10 y.o. Samsung flip phone (non-QWERTY) with it's MEdia Net wap2x browser can only do http protocol. It stopped accessing The Cellar after the conversion to https. It's the only device I have that can't make the change. That's OK, I needed a microscope to read the forums with it anyway.

My Win10 based notebook and Android based tablet had no problems. The tablet works more easily with TapaTalk.
Undertoad • Jan 2, 2017 11:18 pm
We've found the easy way in for the Ruskie hackers then.

Sorry all and thanks for your patience during this trying time

I may try and force at least the register page to be https, because for fux sake.
BigV • Jan 3, 2017 10:42 am
I'm using Opera on my phone with no such difficulties
Gravdigr • Jan 3, 2017 2:36 pm
I have had no issues (with my 'puter, Win7/FF34.0.5, nor my Nook, which runs some kind of Android and some kind of Chrome) during this period.
monster • Jan 3, 2017 7:31 pm
Was unable to access at all from my phone today or yesterday :(
limey • Jan 4, 2017 12:46 pm
Nothing but broken picture icons when accessing recently posted pictures using Tapatalk today ....

Sent by thought transference
limey • Jan 4, 2017 6:56 pm
limey;978546 wrote:
Nothing but broken picture icons when accessing recently posted pictures using Tapatalk today ....

Sent by thought transference




Correction - above statement true of Tapatalk on my phone, but in the iPad I see the pix ok ....


Sent by magic.
monster • Jan 4, 2017 8:31 pm
still nothing on my phone. I have to use public wifi tho, although it didn't work at work either, which is secure :/
lumberjim • Jan 4, 2017 11:18 pm
At what point will Tapatalk be able to show pictures again?
BigV • Jan 4, 2017 11:47 pm
TapaTALK not TapaSEE... Apparently.
glatt • Jan 5, 2017 7:59 am
Tapatalk pictures work fine for me.
lumberjim • Jan 5, 2017 10:03 am
Image

I get this
monster • Jan 5, 2017 10:22 am
Ooh i can see cellar using the hospital wifi (which is not secure) weird
Clodfobble • Jan 5, 2017 10:22 am
Me too
Clodfobble • Jan 5, 2017 10:26 am
Update: I unfollowed the cellar in Tapatalk and then refollowed it, and pictures show now.
BigV • Jan 5, 2017 10:42 am
Good tip!
Undertoad • Jan 5, 2017 10:51 am
Yeah a few IotDs are broke cos I moved them to use https for two days while we thought that was the only issue.
lumberjim • Jan 5, 2017 11:07 am
didnt work for me. I can see bruce's low tide pic, but not the tunnel cars. can't see bbros pics....

fuggit
infinite monkey • Jan 5, 2017 12:38 pm
FYI, in case it helps with troubleshooting, I have the same viewing of picture experience as Jim post 103, but I am NOT using Crapatalk.

Here's the opinion part: I tried Crapatalk for like half an hour and it's CRAPTASTIC. Seriously, it's a confusing mess. Maybe it's because I'm not into the whole Titter/Snapperchat/Baselessfook et al thing. I hate the feed. Also, I'm old.
monster • Jan 5, 2017 1:03 pm
I don't use it either
Flint • Jan 5, 2017 3:13 pm
working great on IE9 on Win7 :D
monster • Jan 5, 2017 10:03 pm
I HATE win10
monster • Jan 5, 2017 10:05 pm
(I love that the IT team at work spent thousand of dollars to get me a new computer with WIN7 after my hapless minion "updated" to 10 in my absence) Does anyone like 10?
BigV • Jan 5, 2017 10:07 pm
Yeah, I like it. There is plenty to adapt to, but it's a better tool for everyday use, in my opinion.
busterb • Jan 6, 2017 9:18 am
[QUOTE= Does anyone like 10?[/QUOTE]
Hell no
captainhook455 • Jan 6, 2017 10:05 am
lumberjim;978587 wrote:
At what point will Tapatalk be able to show pictures again?

I still can't get pictures. Nice knowing y'all. Bye.

tarheel
footfootfoot • Jan 6, 2017 12:50 pm
I'm unable to put tapatalk (or any other app) onto my phone since when I get to the new terms and conditions page of the app store the page is unresponsive and clicking on agree does nothing.

Apple and mac and anything Steve Jobs had anything to do with blows donkeys. But you knew that already.
glatt • Jan 6, 2017 2:01 pm
Did you try turning it off and turning it back on again?

You know, swiping out of all apps, shutting down, turning it back on, and then reading this?
Flint • Jan 6, 2017 2:04 pm
Whoah buudy this is a Union shop, you can't go giving expert IT advice like that!
footfootfoot • Jan 6, 2017 3:01 pm
glatt;978736 wrote:
Did you try turning it off and turning it back on again?

You know, swiping out of all apps, shutting down, turning it back on, and then reading this?


I've done all that stuff. It's an iphone 4 by the way. the main problem is that I allowed it to update the os to 7. The secondary problem is that the industry expectation is that I should have upgraded by now and therefore backwards compatibility is not important.
glatt • Jan 6, 2017 4:08 pm
footfootfoot;978742 wrote:
It's an iphone 4 by the way.


You followed my link! You must really like me!
captainhook455 • Jan 6, 2017 4:58 pm
captainhook455;978703 wrote:
I still can't get pictures. Nice knowing y'all. Bye.

tarheel

Did I say goodbye. I'm SORRY. Y'all know I can't do without ya. Must be the meds.

tarheel
Pico and ME • Jan 6, 2017 5:16 pm
glatt;978753 wrote:
You followed my link! You must really like me!


Sally Field

...oops, wrong thread. Sorry.
Clodfobble • Jan 6, 2017 6:03 pm
Honestly, I do like Win10, but that's because I had Windows 8 before and it S.U.C.K.E.D. Like, really sucked. Like, WindowsME kind of sucked.
xoxoxoBruce • Jan 6, 2017 6:48 pm
10 was made for touchscreens, I'll stick with 7.
monster • Jan 6, 2017 9:50 pm
Pico and ME;978758 wrote:
Sally Field

...oops, wrong thread. Sorry.


Mornington Crescent.
footfootfoot • Jan 6, 2017 11:08 pm
glatt;978753 wrote:
You followed my link! You must really like me!


;)
captainhook455 • Jan 7, 2017 5:53 pm
I am getting about one in ten pics and LJ is getting none.

tarheel
sexobon • Jan 7, 2017 7:25 pm
Well, we understand that when you're getting so few pics for yourself that you don't want to give any to LJ.
Gravdigr • Jan 8, 2017 2:28 pm
captainhook455;978862 wrote:
LJ is getting none.


What? But, but, but she just moved in...;)
lumberjim • Jan 8, 2017 5:03 pm
I get some.
Gravdigr • Jan 10, 2017 4:18 pm
[COLOR="DarkRed"]***[/COLOR]Don't know if it has to do with the conversion, but, the LiveLeak video embedding tags aren't working. The vid just doesn't show up, no place holder or nuttin'.
monster • Jan 10, 2017 8:32 pm
I couldn't see my own dinner picture from my phone. and I had to circumvent all sorts of security breeches
glatt • Jan 10, 2017 8:46 pm
i have a slightly older version of tapatalk - version 6.3.1(1577)
running on an iphone 5S with ios 10.2(14C92) on the ATT network.

I can see everything. Maybe because I'm a mod?
BigV • Jan 10, 2017 9:40 pm
I can't see them all on the tablet. Maybe because I'm a rocker?
sexobon • Jan 11, 2017 5:23 pm
The lock is gray and not green so I'm not buying anything here.
Gravdigr • Jan 13, 2017 9:04 am
Would any of this affect my Cellar log in?

First, today, I was asked for my username and password, I usually don't have to do this part, as Firefox remembers my username and password.

And then, I was told I was using an invalid username and/or password.

Twice.

And then I was allowed in.



ETA: The address bar shows the "https://" Cellar address.
Undertoad • Jan 13, 2017 1:06 pm
That's really weird. There are two versions of the site, one with the www and one without. This is true of both http and https

The reason for that is I was retarded when I first set it up 17 years ago

(And never became unretarded)

It will often think you are not logged in to the one, if you are logged in to the other. This is cos it'll set cookies for the non-www and then you visit the www and it doesn't get those cookies.
sexobon • Jan 14, 2017 12:27 pm
Can cellar.org be partitioned and firewalled from www. cellar.org such that a secure https ://cellar.org and an unsecure http ://www.cellar.org can both operate to maintain backward compatibility for those who can't adapt without issues? It wouldn't solve the problem of http links not making it to the https version; but, it would keep one version safer from hacking while making http links available for viewing in the other.

Please forgive my ignorance if the database can't be separated like that; or, duplicated and separated. It may not even be worth the effort depending on how long it will be before The Cellar moves to another platform.
captainhook455 • Jan 14, 2017 1:24 pm
I don't what you said, but I haven't been able to access a picture since the change which is a bummer. Luckily my other forums haven't done this. What do we have that we have to be secure about? We are 350 old farts that live all over the planet that think alike.

tarheel
sexobon • Jan 14, 2017 5:06 pm
Click on this link to try the other version and see if you get pictures there: http://www.cellar.org/
Undertoad • Jan 14, 2017 8:01 pm
I switched off mandating security about ten days ago

It is important if, for example, you use the same password everywhere and this is the one place left that doesn't have a secure connection on the page where you enter it.
captainhook455 • Jan 14, 2017 9:42 pm
sexobon;979468 wrote:
Click on this link to try the other version and see if you get pictures there: http://www.cellar.org/

This didn't go anywhere. I hit it but just goes back to the scroll. Maybe if I smack the phone against my forehead a couple times.

tarheel
sexobon • Jan 14, 2017 9:53 pm
That might work if limey can send you the entire Cellar by thought transference.
sexobon • Jan 14, 2017 9:57 pm
So UT, even though the lock symbol still appears next to the URL and when I click on it a box opens that says Your connection to the server is encrypted, that alone won't stop people from seeing images.

It'll be interesting to see if anyone experiencing problems actually tries changing their Cellar password.
Undertoad • Jan 15, 2017 9:55 am
It's voluntary to use the https link, you can continue to use the regular one at will.

There is nothing to stop people from seeing images except that Tapatalk is fucking broken as a platform. I am tired of addressing the issue so here is where we shall sit. If you can't see images today it is officially your problem and not mine. Perhaps you can unfollow and refollow or perhaps you can get a new phone.
Undertoad • Jan 15, 2017 10:22 am
I might add, you can always browse the site using a browser, as the founders of the World Wide Web intended. I recommend Chrome on all devices.
limey • Jan 15, 2017 10:44 am
sexobon;979492 wrote:
That might work if limey can send you the entire Cellar by thought transference.

:3eye:
BigV • Jan 15, 2017 4:24 pm
Undertoad;979514 wrote:
I might add, you can always browse the site using a browser, as the founders of the World Wide Web intended. I recommend Chrome on all devices.


Chrome on my Samsung Galaxy Tab is having MAJOR difficulties. I haven't spent much time trying to sort it out yet, but it's definitely not smooth sailing.

As I work on it and learn I will pass on my observations.
monster • Jan 15, 2017 5:22 pm
Chrome is what I use on my phone :/ and I try to use the http address and it changes it to https. I hate it and just won't bother trying to look at the cellar when I'm not home. problem solved :)
Gravdigr • Jan 15, 2017 5:28 pm
Undertoad;979514 wrote:
I might add, you can always browse the site using a browser, as the founders of the World Wide Web intended. I recommend Chrome on all devices.


What he said.

Gravdigr;978423 wrote:
I have had no issues (with my 'puter, Win7/FF34.0.5, nor my Nook, which runs some kind of Android and some kind of Chrome) during this period.


The Cellar...more better on a 'puter.
captainhook455 • Jan 17, 2017 8:40 am
Damn Big V why do you live on the left coast? I was going to come over and let you fix my phone when you got yours sorted out.

tarheel
captainhook455 • Jan 17, 2017 8:44 am
Gravdigr;979547 wrote:
What he said.



The Cellar...more better on a 'puter.

I figured that is why I can't get most of the pictures. The ones from computers I can't get. Only the ones sent by phone.
Image

tarheel
captainhook455 • Jan 17, 2017 8:46 am
Thats what happens when one smokes cigarettes in Jimmies house.

tarheel
lumberjim • Jan 17, 2017 9:43 am
Oh damn. I took a sneaky selfie when you went to bed. Was trying to make it your wallpaper, but it zoomed too much. Guess I forgot to delete it.
captainhook455 • Jan 17, 2017 10:40 am
It looks better in the zoom because I can't see your whole face.lol.

tarheel
lumberjim • Jan 17, 2017 11:12 am
yeah, not a very flattering angle.... least i dint have food in my teeth
Gravdigr • Jan 17, 2017 3:16 pm
Nice 'n' red...very tomato-y.
Undertoad • Jan 17, 2017 7:48 pm
ALRIGHTY THEN

I have just now figured out that the reason Tapatalk continues to fail is that the change I made to revert it WAS NOT ACCEPTED due to a problem with the Javascript they use to process their form.

stupid javascript form processing, such a terrible idea

Long and short of it is

I used a different browser to update the Cellar's profile at Tapatalk, and I think it has "taken" this time

So Tapatalk may start working again, and/or it may be a good idea to do one of those things where you stop following The Cellar and then re-follow it again.

~ woof ~
Undertoad • Jan 18, 2017 8:00 pm
And so, Tapatalk users.

Image

Can you see me now?
Clodfobble • Jan 18, 2017 9:05 pm
In all your glory!!!


Thanks, Toad. I know it was a gnarly problem. You are the man.
lumberjim • Jan 18, 2017 9:07 pm
I see you.... But I still get band aids for most pictures
Image

I did try unfollowing and re following
Undertoad • Jan 18, 2017 9:17 pm
Because it's an attachment; I wonder if those were ever visible on Tapatalk
lumberjim • Jan 18, 2017 9:39 pm
Never had this issue until you started this thread
lumberjim • Jan 18, 2017 9:42 pm
I see this picture. What's the difference?

Image
Undertoad • Jan 18, 2017 10:13 pm
It's not an attachment, it's an image linked to with an IMG BBcode. For IotD we try to do that, although the rules have gotten less strict.

Maybe I fucked up though and left https on attachments. Let me go check on that.
Undertoad • Jan 18, 2017 10:21 pm
No the attachments are just attachments. I don't know why Tapatalk can't figure out attachments. They are the same attachments as ever.
Clodfobble • Jan 18, 2017 10:31 pm
Does the HSTS header have anything to do with this? [/talking out of my ass]
lumberjim • Jan 18, 2017 10:56 pm
Undertoad;979863 wrote:
It's not an attachment, it's an image linked to with an IMG BBcode. For IotD we try to do that, although the rules have gotten less strict.

Maybe I fucked up though and left https on attachments. Let me go check on that.

Did you mean try NOT to do that?

So, I can't see hotlinked images?
Undertoad • Jan 19, 2017 12:23 am
No you can, just not Cellar attachment images.

We try to make IotD images use IMG links and NOT attachment images

The IMG links are to the cellar images directory
captainhook455 • Jan 19, 2017 8:13 am
Links stinks. I be glad when this mess straightens up. Toad put your hat back on you are scaring my cats.

tarheel
glatt • Jan 19, 2017 8:36 am
Wtf? Why can my tapatalk see attachments?
Image
lumberjim • Jan 19, 2017 10:07 am
I'm going to uninstall and re install
lumberjim • Jan 19, 2017 10:16 am
No better. Cock

Sent from my SM-N910T using Tapatalk
Gravdigr • Jan 19, 2017 5:23 pm
captainhook455;979886 wrote:
Links stinks. I be glad when this mess straightens up. Toad put your hat back on you are scaring my cats.

tarheel


:lol2:

[strike]Groin pains[/strike] I mean, growing pains.;)

[size=1]I guess.[/size]
Gravdigr • Jan 25, 2017 2:12 pm
Gravdigr;979159 wrote:
[COLOR="DarkRed"]***[/COLOR]Don't know if it has to do with the conversion, but, the LiveLeak video embedding tags aren't working. The vid just doesn't show up, no place holder or nuttin'.


LiveLeak tags are not working.
Gravdigr • Jan 25, 2017 2:37 pm
Gravdigr;980498 wrote:
LiveLeak tags are not working.


Nevermind. I guess this problem is on my end.




ETA: My problem begins here.
Undertoad • Jan 25, 2017 7:37 pm
Got it. Liveleak videos will never work for anyone browsing the site with https because Liveleak doesn't support https.
Undertoad • Jan 25, 2017 7:46 pm
But wait, LiveLeak DOES support https. OK, maybe Liveleak has stopped supporting embedding!
Gravdigr • Jan 26, 2017 1:37 pm
I think this prob is on my end. I'm not being allowed to see the LiveLeak vids.

I can see the vids with IE, so, I guess it's update time.

Ugh.
Dude111 • Jan 30, 2017 1:09 am
Undertoad wrote:
No well it's not enforced yet, but will be soon cos it's not truly secure until then. Still working out the first set of issues.
All your gonna do is cause all kinds of connection problems for some browsers,etc... for no bloody reason!

Nothing will be any more secure.... THEY CAN STILL SEE EVERYTHING....... (The elite)


Nothing on this site worth forcing HTTPS for......... If you wanna have HTTPS that fine but dont force it,its just bloody insane!!
BigV • Jan 30, 2017 6:04 pm
Do you lock your doors?
Do you wear clothes?
Do you chew your food with your mouth closed?

Why?

Certainly it's not because those with power, force, etc could already get in. And everybody already knows what all that other stuff looks like.

Yet, you still follow those conventions. Why bother?
Dude111 • Jan 31, 2017 2:18 pm
I know a couple sites that went ONLY SSL but they made it so ALL BROWSERS can connect...... (cloudflare offers that to paying members (So no browser is left behind))

http://blog.cloudflare.com/sha-1-deprecation-no-browser-left-behind
xoxoxoBruce • Jan 31, 2017 4:09 pm
Dude111;980896 wrote:

Nothing will be any more secure.... THEY CAN STILL SEE EVERYTHING....... (The elite)


It's not a matter of seeing in, anyone can see anything here. It's a matter of someone coming in and anything from shitting on the rug to burning the house down.
Gravdigr • Jan 31, 2017 4:26 pm
That rug really ties the room together, too.
classicman • Jan 31, 2017 9:57 pm
Good catch Grav - I really like the way it goes with grandma's dress and the wallpaper.
Dude111 • Feb 1, 2017 4:02 pm
xoxoxoBruce wrote:
It's not a matter of seeing in, anyone can see anything here. It's a matter of someone coming in and anything from shitting on the rug to burning the house down.
Well there IS an ssl cert here so if you wanna use it,go ahead :)

https://www.cellar.org
xoxoxoBruce • Feb 2, 2017 9:18 am
I can't see any videos here, just a black box where the preview should be. Tried logging in on https and http with no luck. Links to videos work, and it's fine on other sites. Arrrhhh, I've been black boxed. :facepalm:
xoxoxoBruce • Feb 2, 2017 11:32 am
I had uninstalled Java, so I reinstalled on the off chance that was the problem. Nope.
It's working OK in Chrome, so it's an IE problem. :(
xoxoxoBruce • Feb 3, 2017 3:26 pm
Fixed it, reinstalled JAVA flash.
Dude111 • Feb 3, 2017 11:42 pm
Im glad things are working good for ya again :)
xoxoxoBruce • Feb 4, 2017 1:47 am
So am I.
Clodfobble • Feb 4, 2017 9:13 am
Okay, fuck it. I've given up. I uninstalled and reinstalled everything I could, sent customer service emails to Tapatalk, and still half the pictures were broken. Part of me thinks it's Tapatalk being dicks, like we'll pressure other users to use Tapatalk if the only kind of pictures we can see are Tapatalk pictures. Fuck them. I paid for their app years ago and was happy with it, and then they "upgraded" me to ad-filled anyway.

I didn't want to use the basic Chrome app because it's a pain in the ass, but I figured out I could load the site, and then in the right hand drop down choose "Request Desktop Site." Now I have a shortcut to the page on my phone like its a separate app. It's workable. I still have to zoom around sometimes instead of a proper mobile view, but I want my pictures, dammit.
footfootfoot • Feb 4, 2017 10:35 am
Tapatalk has always been crappy and still is.
captainhook455 • Feb 5, 2017 9:49 am
Why can't I get Bruce's pics? I used to get them even after the https fuck up. Gravdigr's pics been gone, but Bruce has 56k posts over Gravdigr's 26k posts so I could still have some fun viewing pictures. Now Bruce's pics are gone from my view.

tarheel
xoxoxoBruce • Feb 5, 2017 11:00 am
The IOtD pics, as well as the regular post pics?
BigV • Feb 5, 2017 1:23 pm
Clodfobble;981344 wrote:
Okay, fuck it. I've given up. I uninstalled and reinstalled everything I could, sent customer service emails to Tapatalk, and still half the pictures were broken. Part of me thinks it's Tapatalk being dicks, like we'll pressure other users to use Tapatalk if the only kind of pictures we can see are Tapatalk pictures. Fuck them. I paid for their app years ago and was happy with it, and then they "upgraded" me to ad-filled anyway.

I didn't want to use the basic Chrome app because it's a pain in the ass, but [SIZE="7"]I figured out I could load the site, and then in the right hand drop down choose "Request Desktop Site." [/SIZE]Now I have a shortcut to the page on my phone like its a separate app. It's workable. I still have to zoom around sometimes instead of a proper mobile view, but I want my pictures, dammit.


THANK YOU THANK YOU THANK YOU!!!

This solved my problem on my tablet immediately. I have used Chrome on the tablet exclusively and Opera Mini on the phone. Never had a problem on the phone, but the display problems on the tablet started around the time this thread began. No combination of settings having to do with the http versus https were found to be effective in causing the images to be displayed.
Gravdigr • Feb 5, 2017 2:28 pm
Damn people.
BigV • Feb 5, 2017 5:51 pm
Fine. But not Clodfobble.
classicman • Feb 5, 2017 6:13 pm
Bite your tongue. Clodfobble is way more than just "fine"
sexobon • Feb 5, 2017 10:37 pm
Gravdigr;981437 wrote:
Damn people.

BigV;981452 wrote:
Fine. But not Clodfobble.

classicman;981455 wrote:
Bite your tongue. Clodfobble is way more than just "fine"


So, collectively y'all are saying Clodfobble is damn fine!

But, but, I can't argue with that. You guys are no fun. ;)
captainhook455 • Feb 7, 2017 8:56 am
classicman;981455 wrote:
Bite your tongue. Clodfobble is way more than just "fine"

Really? What does she look like? On a side note I was looking at a thread about a guy carving trains and I could see the pics. Is this a new thing? Pictures and posts? Seriously though I appreciate you guys trying to get this straightened out.

tarheel
xoxoxoBruce • Feb 7, 2017 10:41 am
The pics in the IOtD are posted differently than my other posts.