Security Warning on Home Pages of Some Projects

Message boards : Questions and problems : Security Warning on Home Pages of Some Projects
Message board moderation

To post messages, you must log in.

AuthorMessage
axm

Send message
Joined: 16 Feb 13
Posts: 8
Canada
Message 51894 - Posted: 5 Jan 2014, 4:09:09 UTC

Today while logging in to the home page for World Community Grid I got the typical Man-in-the-Middle attack warning "Get me out of here!". Is it possible that the home page has been hacked into?

I did two tests. First I purposely entered a wrong username but it was quite prompt in responding correctly that the username does not exist.

Then I looked up the points I had collected and compared it with the BOINC client, and I must say I was quite shocked at the difference.

While the first was somewhat reassuring, the second looked suspicious.

I was wondering if others are also facing this issue, and if they could respond back. BTW, I went into the several other home-pages and found SETI having the same problem. Others were okay.
ID: 51894 · Report as offensive
Profile Gary Charpentier
Avatar

Send message
Joined: 23 Feb 08
Posts: 2465
United States
Message 51896 - Posted: 5 Jan 2014, 6:04:07 UTC - in response to Message 51894.  

Many of the projects are run on shoestring budgets and have self signed certificates rather than pay the outrageous fees to have a certificate authority issue them one. Without a certificate authority signed one, you get the get me out of here message with some browsers.
ID: 51896 · Report as offensive
Profile Jord
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 15483
Netherlands
Message 51898 - Posted: 5 Jan 2014, 6:17:56 UTC - in response to Message 51894.  

We're not the World Community Grid, they have their own forums. The 'attack' message you get, has probably to do with the certificate that both WCG and Seti have on their HTTPS connection. The warning is there because, at least in the case of the Seti project, it uses a "self-signed" SSL certificate, i.e. they don't have $500 to Verisign it. You can usually ignore the message and allow the certificate.

As for points versus credits, WCG uses points, BOINC uses credits. There are 8 points in a credit.
ID: 51898 · Report as offensive
axm

Send message
Joined: 16 Feb 13
Posts: 8
Canada
Message 51899 - Posted: 5 Jan 2014, 6:25:53 UTC - in response to Message 51898.  

Thanks guys!
ID: 51899 · Report as offensive

Message boards : Questions and problems : Security Warning on Home Pages of Some Projects

Copyright © 2024 University of California.
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation.