What's going on at CPF?

Where ?

LOL barkuti recently complained about being banned…. :student:

Hahah im just kidding but i feel indifference ro cpf. They just aren’t that great

Wow. Just wow. This could prove to be much more costly than someone might initially think.

This type of thing can be hard to track down and identify. And it can be very time consuming. Even more important is the fact that Google won’t take action like that without proof that your website is causing a problem. And they won’t lift the warning until you clean up your site.

OTOH, as far as I know, Google will let you through to the website. The warning though will rightfully scare away hordes of people as well as, ahem, advertisers who can’t be too happy with the shutdown or the warning.

Anyways, if anyone is interested, Google lets you run the url of any website to see if it is suspect. This could be a help if you are unsure of a certain website. Go here . And yes, Candlepowerforums is still listed a partially dangerous.

There is also an lots of information for webmasters. Hopefully someone at
CPF is on top of this. These two paragraphs from
Google caught my eye.

“Webmaster response time
We measure how quickly webmasters clean up their sites after receiving notifications that their site has been compromised.”

“Webmaster reinfection rate
Even after a site has been cleaned, it can become reinfected if an underlying vulnerability remains. We measure the reinfection rate for these sites.”

And in case you’re thinking mistake by Google there is this under the FAQ’s,

“How accurate is this information?”

“We work very hard to maintain accurate information and have had very few false positives.”

This could be a long winter at CPF.

That sure is true.

Let’s not gloat over their misfortune. I sure wouldn’t want to be in the shoes of their admin right now, and I sure hope she is managing to sleep periodically while sorting everything out.

Sometimes I get requests for a certain forum feature that the BLF forum engine just simply doesn’t support, and like any forum software ours does have its idiosyncrasies. And more often than not when discussions about missing features or glitches come up, somebody suggests vBulletin. Well, this latest CPF outage reinforces my position on vBulletin. It’s proprietary, insecure, poorly supported garbage. Unless the redirection is/was happening due to high level internet infrastructure manipulation such as DNS spoofing (highly unlikely), it was most likely a vBulletin vulnerability. It’s possible that they might not have kept current with their security patches, but even there I’m willing to give them a pass; it’s also all too common for well-administered, completely up-to-date vBulletin forums to get majorly hacked.

So best wishes to CPF, I hope they can pull through this, and I feel their pain.

Thank you for running BLF smoothly SB!!! :beer:

+1!

Thank you for keeping a keen eye on that.

It seems that some bad guy was able to use CPF to infect anyone who visited him, it is logical that administrators take all the time to identify the problem and prevent it from happening again.

My computer used to freeze up about 6 or 9 months ago when on their site. So I quit going there. About 2 month s ago started going back and had no problems. They have some serious security problem. Was never a member.

This is really weird…

This morning I was on this Banggood thread. When I tried to click on another page in the thread it took me to that red page of death. Google Chrome said it was linking to a malicious site.

What’s weird is that the BLF thread page would be taking me to a CPF page in the first place. ? That seemed odd then I saw this thread about CPF being down. I don’t know what’s going on but why would it link me to CPF

Unfortunately the CPF admin seem to lack a bit of “admin” knowledge… CPF has always been slow, some data lost regularly, etc :frowning:

I wish CPF will be back online in no time, with all the issues solved.

Am I reading this right? How to verify if my pc is now infected?

Let’s not get carried away here. There’s no indication that whatever happened to CPF could “infect” anybody. There was a malicious redirect of some sort which Google labeled a phishing attempt, nothing to indicate that anybody was “infected”. It wasn’t even a “virus”.

In order to have any sort of lasting consequences from this, you’d have had to visit CPF, see that you were redirected to some file sharing site instead, shrug your shoulders and just go ahead and put your private data into that strange site you’d never seen before and you weren’t looking for to start with. I hope that most (all?) of us would be smarter than that.

Happened to me also, not sure of the thread I was trying to open, but I opened it another tab and when that was opened it was red death. Closed it and did not try to repeat. Cleaned cookies right away.
Strange.
Hope it was a fluke.

That is quite the understatment, she has absolutly no clue as has been shown again and again in discussions subsequent to the crashes etc… and every benevolent advice/work knowledgeable and qualified people tried to offer were always received very defensively and dismissively.

CPF is currently accessible to read, but attempt to post results in a permissions error.

That’s exactly what I thought when she disclosed the configuration of the CPF’s server…two hard drives, no RAID. Hum, no wonder there’s data loss from time to time…and probably also a reason why forum is so slow when there’s a peak in sequential access.

That’s really a shame because the early CPF was a very nice and friendly community, with flashlight addict meetings and tons of other friendly events, and this place turned into…what you know… over the years.

But to sound optimistic, I found the tendency has been reversed, and I found myself spending more and more time over there lately. Maybe because some mods retired, and/or because the admin is less aggressive with age? Lol!

When something like that happens I believe it would be of great help to +this +site’s admin to let him know just what you clicked on that went to the malicious site, or site warning. Then our admin could decide whether or not he would want to do something about removing the link or whatever. My 2 cents worth (as an admin on an unrelated forum).

Good advice; I just did what you recommended.

If that was directed at me, please re-read my post…. I was saying that if a link +here +took you someplace bad or someplace where a warning appeared, maybe letting this admin know. Then if this admin wanted to he could disable the link to the other place and save someone some possible grief, remove the doubt. The folks on the bad end of the link would have been notified anyhow… that is what happens when Google decides a warning is needed. I was simply stating that, as something I would want to know as an admin on an unrelated site.