Both of my browsers are showing the http: site as not secure and it does not appear that the Project has https: enabled.
It this something that can be looked at and fixed or developed ?
Thanks
Bill F
____________
In October 1969 I took an oath to support and defend the Constitution of the United States against all enemies, foreign and domestic;
There was no expiration date.
/ 
Reply
Quote
rebirtherVolunteer moderator
Project administrator
Project developer
Project tester
Project scientist
Send message
Joined: 2 Jan 13
Posts: 7479
Credit: 43,686,081
RAC: 42,669
Both of my browsers are showing the http: site as not secure and it does not appear that the Project has https: enabled.
It this something that can be looked at and fixed or developed ?
Thanks
Bill F
was not planned and making more issues
/ Reply
Quote
Understood that it might create an issue, but it would improve security for both the Project and the Volunteers.
It is also the direction that many of the active Projects are now going.
Please consider.
Thank You
Bill F
/ Reply
Quote
rebirtherVolunteer moderator
Project administrator
Project developer
Project tester
Project scientist
Send message
Joined: 2 Jan 13
Posts: 7479
Credit: 43,686,081
RAC: 42,669
Understood that it might create an issue, but it would improve security for both the Project and the Volunteers.
It is also the direction that many of the active Projects are now going.
Please consider.
Thank You
Bill F
The OS is rather old and some things are broken. I also cannot compile something on this system, sorry for this. The rest is still running and that counts.
/ Reply
Quote
Ok I understand now... your priority's are correct science first.
Maybe someday with a new system or a new OS load from donations perhaps it will be possible.
Thank you again.
Bill F
Dallas TX
/ Reply
Quote
It is, however, 2021 and TLS is not optional these days. It is imperative that we are not sending our account passwords to you in the clear -- especially those of us who are using BOINC account managers and are required to use the same password on all of our BOINC accounts.
You have 557 users with recent credit.
You have exposed the passwords of 557 users, recently, over the wire.
You don't need much to install certbot from Let's Encrypt; certainly no more than you need to run a Web server. If you want help, I'll do it for you; it's five minutes of work.
Otherwise, I won't be able to contribute to this project anymore.
/ Reply
Quote
rebirtherVolunteer moderator
Project administrator
Project developer
Project tester
Project scientist
Send message
Joined: 2 Jan 13
Posts: 7479
Credit: 43,686,081
RAC: 42,669
It is, however, 2021 and TLS is not optional these days. It is imperative that we are not sending our account passwords to you in the clear -- especially those of us who are using BOINC account managers and are required to use the same password on all of our BOINC accounts.
You have 557 users with recent credit.
You have exposed the passwords of 557 users, recently, over the wire.
You don't need much to install certbot from Let's Encrypt; certainly no more than you need to run a Web server. If you want help, I'll do it for you; it's five minutes of work.
Otherwise, I won't be able to contribute to this project anymore.
I have tried it in the past and failed, its a very old Ubuntu 12.04 OS. You can send me a guide how to install by PM but some things are broken in the OS. I have read that this version of OS is no longer supported.
/ Reply
Quote
I have tried it in the past and failed, its a very old Ubuntu 12.04 OS. You can send me a guide how to install by PM but some things are broken in the OS. I have read that this version of OS is no longer supported.
I will do that. You have more options than you may realize.
/ Reply
Quote
rebirtherVolunteer moderator
Project administrator
Project developer
Project tester
Project scientist
Send message
Joined: 2 Jan 13
Posts: 7479
Credit: 43,686,081
RAC: 42,669
I have tried it in the past and failed, its a very old Ubuntu 12.04 OS. You can send me a guide how to install by PM but some things are broken in the OS. I have read that this version of OS is no longer supported.
I will do that. You have more options than you may realize.
I have tried some options some minutes ago but there are no packages available. If there are some possiblities then they are welcome.
/ Reply
Quote
rebirtherVolunteer moderator
Project administrator
Project developer
Project tester
Project scientist
Send message
Joined: 2 Jan 13
Posts: 7479
Credit: 43,686,081
RAC: 42,669
Sorry for the short timeout. Trying to setup https, got all things installed but the config is still messy.
/ Reply
Quote
Thank you for working on this. The added security is needed in today's world.
____________
In October 1969 I took an oath to support and defend the Constitution of the United States against all enemies, foreign and domestic;
There was no expiration date.
/ Reply
Quote
its a very old Ubuntu 12.04 OS.
I'm assuming there is a upgrade deadend in the path towards Ubuntu 20.x which requires a fresh install.
I'm not a Linux expert, but still am trying to build a BOINC VM for general use on Windows hosts and also ran into a Debian deadend from 9 to 10.
Planning to install all the BOINC client, CVMS, Singularity(LHC@Home requirements) and utility software into the /opt path in order to future proof all further upgrades/fresh installs. I do not know what pitfalls this will leave for me to trip into over the next years but it was a suggested strategy in an article. Already looking at a complete rebuild moving on from antiX 17.2.
You realistically looking at 80+ hours of labor to move to Ubuntu 19 or 20?
/ Reply
Quote
rebirtherVolunteer moderator
Project administrator
Project developer
Project tester
Project scientist
Send message
Joined: 2 Jan 13
Posts: 7479
Credit: 43,686,081
RAC: 42,669
https is working now, I cant do something with the pics warnings. The only open thing is the auto-renew of the certificate. I will test this later.
/ Reply
Quote
https is working now, I cant do something with the pics warnings. The only open thing is the auto-renew of the certificate. I will test this later.
Thank you for your efforts in doing this upgrade. While I wish that we did not need it... in today's world we do need it.
Bill F
Dallas TX
____________
In October 1969 I took an oath to support and defend the Constitution of the United States against all enemies, foreign and domestic;
There was no expiration date.
/ Reply
Quote
I cant do something with the pics warnings
Chromium is complaining about "attackers might be able to see the images you're looking..."
Is that about the gravatar avatars, badge signatures or something else?
I am seeing https: working and a valid cert.
Thankyou.
/ Reply
Quote
rebirtherVolunteer moderator
Project administrator
Project developer
Project tester
Project scientist
Send message
Joined: 2 Jan 13
Posts: 7479
Credit: 43,686,081
RAC: 42,669
I cant do something with the pics warnings
Chromium is complaining about "attackers might be able to see the images you're looking..."
Is that about the gravatar avatars, badge signatures or something else?
I am seeing https: working and a valid cert.
Thankyou.
yes
/ Reply
Quote