Let's remember to use httpS for images/avatars... :)

Chat about just about anything else
User avatar
killer de bug
Level 14
Level 14
Posts: 5402
Joined: Tue Jul 08, 2008 1:49 pm
Location: Graz, Austria

Re: Let's remember to use httpS for images/avatars... :)

Post by killer de bug » Thu Nov 24, 2016 5:01 pm

When it's HTTP we see your avatar normally, except if we chose to block this kind of non secure content.
But if your avatar is displayed, then the lock near the adress is not green. The page is therefore not loaded with the HTTPS protocol. And in this case we have a security issue. :wink:
Image
If it ain't broke, fix it until it is.

Cosmo.
Level 23
Level 23
Posts: 17824
Joined: Sat Dec 06, 2014 7:34 am

Re: Let's remember to use httpS for images/avatars... :)

Post by Cosmo. » Thu Nov 24, 2016 5:38 pm

DeMus wrote:I have no idea what you all saw
Instead of the avatar the text notice "User avatar". Not all saw this, but only those, who block mixed content completely (like me). Now I see you girl.

User avatar
Fred Barclay
Level 12
Level 12
Posts: 4156
Joined: Sat Sep 13, 2014 11:12 am
Location: Bumping around in the bush

Re: Let's remember to use httpS for images/avatars... :)

Post by Fred Barclay » Fri Nov 25, 2016 12:54 am

DeMus wrote: I have no idea what you all saw
Well, I don't know about the others, but I saw a photo of you from behind, with 7 cm purple hair and green sweat pants, singing
Rubber Ducky, you're the one
You make bathtime, so much fun
Rubber Ducky, I'm awfully fond of you.

Rubber Duckie joy of joys
When I squeeze you, you make noise
Rubber Duckie, you're my very best friend it's true.
Why? What were we supposed to see?


No, I really saw the girl in your photo (beautiful, by the way. I'm guessing she's your (grand)daughter??? :)) So no change now that you're on https except the status icon in Firefox is a cheerful green.

Cheers!
Fred
Image
Image
"Once you can accept the universe as matter expanding into nothing that is something, wearing stripes with plaid comes easy."
- Albert Einstein

DeMus
Level 6
Level 6
Posts: 1029
Joined: Sat Aug 15, 2009 5:11 pm

Re: Let's remember to use httpS for images/avatars... :)

Post by DeMus » Fri Nov 25, 2016 1:10 pm

Fred Barclay wrote:
DeMus wrote: I have no idea what you all saw
Well, I don't know about the others, but I saw a photo of you from behind, with 7 cm purple hair and green sweat pants, singing
Rubber Ducky, you're the one
You make bathtime, so much fun
Rubber Ducky, I'm awfully fond of you.

Rubber Duckie joy of joys
When I squeeze you, you make noise
Rubber Duckie, you're my very best friend it's true.
Why? What were we supposed to see?
No, what you saw is correct, that looks like me.
Fred Barclay wrote: No, I really saw the girl in your photo (beautiful, by the way. I'm guessing she's your (grand)daughter??? :)) So no change now that you're on https except the status icon in Firefox is a cheerful green.

Cheers!
Fred
Image
It is indeed my grand-daughter, she is way too young to be my daughter. I may not think of that, in my age having a 4 year young daughter.

User avatar
Shabby
Level 1
Level 1
Posts: 38
Joined: Wed Oct 26, 2016 8:40 am
Location: Hertfordshire

Re: Let's remember to use httpS for images/avatars... :)

Post by Shabby » Fri Nov 25, 2016 1:47 pm

There! I've converted Catweazle into https. 8)
The only security issues HE faced was hiding from the Norman invaders. :lol:
Mint 18.1 Xfce 64 bit - Novatech Isys Pro:Intel Q6600,4GB RAM,Nvidia GeForce 7600GT

User avatar
killer de bug
Level 14
Level 14
Posts: 5402
Joined: Tue Jul 08, 2008 1:49 pm
Location: Graz, Austria

Re: Let's remember to use httpS for images/avatars... :)

Post by killer de bug » Mon Dec 05, 2016 4:54 pm

Moem wrote:This is a good post, and you should feel good. :D
Here's another suggestion: xxxx
I just tried to use it, and it asked me to pay something. Is this normal?
Image
If it ain't broke, fix it until it is.

User avatar
Moem
Level 17
Level 17
Posts: 7193
Joined: Tue Nov 17, 2015 9:14 am
Location: The Netherlands
Contact:

Re: Let's remember to use httpS for images/avatars... :)

Post by Moem » Mon Dec 05, 2016 5:05 pm

I've never seen that happening and I can't reproduce it. What did it look like? Was it a popup?
Image

If your issue is solved, kindly indicate that by editing the first post in the topic, and adding [SOLVED] to the title. Thanks!

User avatar
killer de bug
Level 14
Level 14
Posts: 5402
Joined: Tue Jul 08, 2008 1:49 pm
Location: Graz, Austria

Re: Let's remember to use httpS for images/avatars... :)

Post by killer de bug » Mon Dec 05, 2016 5:33 pm

Yes there is a popup asking me to pay and it can't be dismissed.
I'm sorry, but this site is not advisable to this community and will be removed from all the previous posts. It can be added back later if this problem is sorted out. :wink:
Image
If it ain't broke, fix it until it is.

User avatar
killer de bug
Level 14
Level 14
Posts: 5402
Joined: Tue Jul 08, 2008 1:49 pm
Location: Graz, Austria

Re: Let's remember to use httpS for images/avatars... :)

Post by killer de bug » Mon Dec 05, 2016 5:35 pm

killer de bug wrote:
Fred Barclay wrote:There we go! https://httpsimage.com/ works for me. :mrgreen:
You should be concerned that this site is displayed. :wink:

error.png
Ah this was already the website I reported earlier... :shock:
Gone for good! End of story. :wink:
Image
If it ain't broke, fix it until it is.

User avatar
Moem
Level 17
Level 17
Posts: 7193
Joined: Tue Nov 17, 2015 9:14 am
Location: The Netherlands
Contact:

Re: Let's remember to use httpS for images/avatars... :)

Post by Moem » Mon Dec 05, 2016 5:37 pm

That's annoying. Sure, go ahead, remove it where needed. We don't want people to be annoyed when there's no need.

Not sure why I'm not getting it... it probably means my main browser has pretty tight security. Or so I tell myself! 8)
Image

If your issue is solved, kindly indicate that by editing the first post in the topic, and adding [SOLVED] to the title. Thanks!

User avatar
killer de bug
Level 14
Level 14
Posts: 5402
Joined: Tue Jul 08, 2008 1:49 pm
Location: Graz, Austria

Re: Let's remember to use httpS for images/avatars... :)

Post by killer de bug » Mon Dec 05, 2016 5:43 pm

Firefox, + VPN + noscript + adblock + Disconnect + PrivacyBadger here...
First real strange thing with this website is the fact that it doesn't go to https despite httpseverywhere. :wink:
Image
If it ain't broke, fix it until it is.

User avatar
Fred Barclay
Level 12
Level 12
Posts: 4156
Joined: Sat Sep 13, 2014 11:12 am
Location: Bumping around in the bush

Re: Let's remember to use httpS for images/avatars... :)

Post by Fred Barclay » Mon Dec 05, 2016 7:01 pm

killer de bug wrote: Ah this was already the website I reported earlier... :shock:
Gone for good! End of story. :wink:
Merci!
Image
"Once you can accept the universe as matter expanding into nothing that is something, wearing stripes with plaid comes easy."
- Albert Einstein

User avatar
BG405
Level 7
Level 7
Posts: 1558
Joined: Fri Mar 11, 2016 3:09 pm
Location: England

Re: Let's remember to use httpS for images/avatars... :)

Post by BG405 » Mon Feb 06, 2017 11:11 pm

I know this is an old thread but stil very relevant. I was reminded of the issue when dealing with my issues in this thread :) so doing this, with Firefox 51+, may potentially be of great help outside of the obvious security issues.

I've changed the source of my avatar but have to admit the 6KB file size limit was a bit of a challenge to achieve. Had to reduce to 64 colours! No chance of my planned take on Space Invaders with my own animated GIF. :(
Dell Inspiron 1525 - LM17.3 CE 64-------------------Acer D255E 2GB - Manjaro KDE, LM17.3 KDE 32
Toshiba NB305 - Manjaro KDE------------------------K7S5A AMD 1.2GHz - LM17.3 Xfce 32 & WinXP-Pro
Acer Aspire E11 ES1-111M - LM18.2 KDE 64 ----Dell PII 350 64MB - Puppy 4.3 & Win98-SE

User avatar
killer de bug
Level 14
Level 14
Posts: 5402
Joined: Tue Jul 08, 2008 1:49 pm
Location: Graz, Austria

Re: Let's remember to use httpS for images/avatars... :)

Post by killer de bug » Tue Feb 07, 2017 4:16 am

BG405 wrote: No chance of my planned take on Space Invaders with my own animated GIF. :(
Mankind would like to thank you for not using an animated avatar. :mrgreen:
Image
If it ain't broke, fix it until it is.

User avatar
Fred Barclay
Level 12
Level 12
Posts: 4156
Joined: Sat Sep 13, 2014 11:12 am
Location: Bumping around in the bush

Re: Let's remember to use httpS for images/avatars... :)

Post by Fred Barclay » Tue Feb 07, 2017 1:13 pm

BG405 wrote:I know this is an old thread...
If this thread is old, what does that make me? :shock: :lol:
Image
"Once you can accept the universe as matter expanding into nothing that is something, wearing stripes with plaid comes easy."
- Albert Einstein

User avatar
BG405
Level 7
Level 7
Posts: 1558
Joined: Fri Mar 11, 2016 3:09 pm
Location: England

Re: Let's remember to use httpS for images/avatars... :)

Post by BG405 » Tue Feb 27, 2018 1:35 pm

2018 revival of this thread (hope this is OK), as "User Avatar" is again becoming a common sight on the LM Forums for those of us who block mixed content.

I wonder if it's possible to limit newly-added avatars & images to https:// sites? I assume this has already been thought of, though.
Dell Inspiron 1525 - LM17.3 CE 64-------------------Acer D255E 2GB - Manjaro KDE, LM17.3 KDE 32
Toshiba NB305 - Manjaro KDE------------------------K7S5A AMD 1.2GHz - LM17.3 Xfce 32 & WinXP-Pro
Acer Aspire E11 ES1-111M - LM18.2 KDE 64 ----Dell PII 350 64MB - Puppy 4.3 & Win98-SE

User avatar
Fred Barclay
Level 12
Level 12
Posts: 4156
Joined: Sat Sep 13, 2014 11:12 am
Location: Bumping around in the bush

Re: Let's remember to use httpS for images/avatars... :)

Post by Fred Barclay » Tue Feb 27, 2018 2:52 pm

BG405 wrote:
Tue Feb 27, 2018 1:35 pm
I wonder if it's possible to limit newly-added avatars & images to https:// sites? I assume this has already been thought of, though.
That would be great! @xenopeek is this doable?
Image
"Once you can accept the universe as matter expanding into nothing that is something, wearing stripes with plaid comes easy."
- Albert Einstein

DAMIEN1307
Level 6
Level 6
Posts: 1216
Joined: Tue Feb 21, 2017 8:13 pm
Location: Alamogordo, New Mexico, USA

Re: Let's remember to use httpS for images/avatars... :)

Post by DAMIEN1307 » Tue Feb 27, 2018 5:10 pm

fred barclay wrote...
If this thread is old, what does that make me?
...well that would make you like me "OH ancient of days"...lol...DAMIEN
ORDO AB CHAO

User avatar
killer de bug
Level 14
Level 14
Posts: 5402
Joined: Tue Jul 08, 2008 1:49 pm
Location: Graz, Austria

Re: Let's remember to use httpS for images/avatars... :)

Post by killer de bug » Thu Mar 01, 2018 3:05 pm

Xenopeek made sure earlier this year that new avatars can only be with an https link. :wink:
You can also use gravatar now.

If I remember correctly, he converted a lot of avatars to https also. It must be impossible to meet an http avatar nowadays on the forum with all the good work he did. :mrgreen:
Image
If it ain't broke, fix it until it is.

User avatar
kenetics
Level 5
Level 5
Posts: 702
Joined: Thu Dec 14, 2006 9:57 pm
Location: Somewhere on a Florida beach
Contact:

Re: Let's remember to use httpS for images/avatars... :)

Post by kenetics » Thu Mar 01, 2018 3:44 pm

killer de bug wrote:
Thu Mar 01, 2018 3:05 pm
Xenopeek made sure earlier this year that new avatars can only be with an https link. :wink:
You can also use gravatar now.

If I remember correctly, he converted a lot of avatars to https also. It must be impossible to meet an http avatar nowadays on the forum with all the good work he did. :mrgreen:
I had a time getting mine working. It was linked from a forum I help manage (not HTTPS). I tried Httpsimage.com, but they only allow one free graphic and then charge $10 for additional ones. I eventually settled on Imgur even though their ULA states, "not to be used for avatars", If I recall correctly.

BTW, I find Xenopeek's avatar a bit frightening. :mrgreen:
“Three o'clock is always too late or too early for anything you want to do.” 
― Jean-Paul Sartre

Post Reply

Return to “Open chat”