[ale] Funny for the day

Discussion:

Leam Hall via Ale

2018-01-23 15:02:43 UTC

Doing some research on SSL certificates and a Google hit goes to ssl.com:

####

Your connection is not secure

The website tried to negotiate an inadequate level of security.

ssl.com uses security technology that is outdated and vulnerable to
attack. An attacker could easily reveal information which you thought to
be safe. The website administrator will need to fix the server first
before you can visit the site.

Error code: NS_ERROR_NET_INADEQUATE_SECURITY

####
_______________________________________________
Ale mailing list
***@ale.org
http://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo

Jerald Sheets via Ale

2018-01-23 15:09:58 UTC

Permalink

Went straight there, no issues. Latest Chrome. What browser (or plugin) fired the warning?

Post by Leam Hall via Ale
####
Your connection is not secure
The website tried to negotiate an inadequate level of security.
ssl.com uses security technology that is outdated and vulnerable to attack. An attacker could easily reveal information which you thought to be safe. The website administrator will need to fix the server first before you can visit the site.
Error code: NS_ERROR_NET_INADEQUATE_SECURITY
####
_______________________________________________
Ale mailing list
http://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo

Leam Hall via Ale

2018-01-23 15:18:00 UTC

Permalink

Interesting...

I'm on FireFox 52.5.1 on CentOS 6. No real plugins.

Leam

Post by Jerald Sheets via Ale
Went straight there, no issues. Latest Chrome. What browser (or plugin) fired the warning?

_______________________________________________
Ale mailing list
http://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo

_______________________________________________
Ale mailing list
***@ale.org
http://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo

Leam Hall via Ale

2018-01-23 15:26:43 UTC

Permalink

Just tried to download and install latest Firefox. Like Chrome, they no
longer support CentOS 6. :(

Post by Jerald Sheets via Ale
Went straight there, no issues. Latest Chrome. What browser (or plugin) fired the warning?

_______________________________________________
Ale mailing list
http://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo

_______________________________________________
Ale mailing list
***@ale.org
http://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo

Neal Rhodes via Ale

2018-01-23 19:41:27 UTC

Permalink

And..... I'm guessing that the upgrade process from Centos 6 to anything
later is still busted, so....... hows the weather on your chunk of ice
floe floating slowly out to sea?

regards,

Neal

Post by Leam Hall via Ale
Just tried to download and install latest Firefox. Like Chrome, they no
longer support CentOS 6. :(

Post by Jerald Sheets via Ale
Went straight there, no issues. Latest Chrome. What browser (or plugin) fired the warning?

_______________________________________________
Ale mailing list
http://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo

Scott Plante via Ale

2018-01-23 16:57:54 UTC

Permalink

Works for me in Chrome (openSUSE & Mac). I see:

Issued by: SSL.com Premium EV CA

<blockquote>

</blockquote>

<blockquote>

</blockquote>

<blockquote>

</blockquote>

<blockquote>

Expires: Monday, November 19, 2018 at 6:59:59 PM Eastern Standard Time
Serial Number: NV20081614243
SHA-256 Fingerprint: 91 9B E3 02 2A 80 91 47 3D 40 1E 99 58 25 42 FB DD E4 4F 59 F6 DF E1 DE 52 18 7E A1 C1 A0 2D F2
</blockquote>

Are you at home or work, on a relatively trusted Internet connection? Is it possible you're hitting a man-in-the-middle site?
--
Scott Plante
404-873-0058 x104

----- Original Message -----

From: "Leam Hall via Ale" <***@ale.org>
To: "Atlanta Linux Enthusiasts" <***@ale.org>
Sent: Tuesday, January 23, 2018 10:02:43 AM
Subject: [ale] Funny for the day

Doing some research on SSL certificates and a Google hit goes to ssl.com:

####

Your connection is not secure

The website tried to negotiate an inadequate level of security.

ssl.com uses security technology that is outdated and vulnerable to
attack. An attacker could easily reveal information which you thought to
be safe. The website administrator will need to fix the server first
before you can visit the site.

Error code: NS_ERROR_NET_INADEQUATE_SECURITY

####
_______________________________________________
Ale mailing list
***@ale.org
http://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo

leam hall via Ale

2018-01-23 17:08:49 UTC

Permalink

At home, through Comcast, so probably by definition untrusted.
Interesting...

The Firefox version is 6 major versions behind (52.x.x vs 58.x.x). Trying
to upgrade fails due to FF wanting Gnome3 libraries. Chrome broke some
months ago. Name servers or OpenDNS and Google.

Post by Scott Plante via Ale
Issued by: SSL.com Premium EV CA
Expires: Monday, November 19, 2018 at 6:59:59 PM Eastern Standard Time
Serial Number: NV20081614243
SHA-256 Fingerprint: 91 9B E3 02 2A 80 91 47 3D 40 1E 99 58 25 42 FB DD E4
4F 59 F6 DF E1 DE 52 18 7E A1 C1 A0 2D F2
Are you at home or work, on a relatively trusted Internet connection? Is
it possible you're hitting a man-in-the-middle site?
--
Scott Plante
404-873-0058 x104 <(404)%20873-0058>
------------------------------
*Sent: *Tuesday, January 23, 2018 10:02:43 AM
*Subject: *[ale] Funny for the day
####
Your connection is not secure
The website tried to negotiate an inadequate level of security.
ssl.com uses security technology that is outdated and vulnerable to
attack. An attacker could easily reveal information which you thought to
be safe. The website administrator will need to fix the server first
before you can visit the site.
Error code: NS_ERROR_NET_INADEQUATE_SECURITY
####
_______________________________________________
Ale mailing list
http://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo

DJ-Pfulio via Ale

2018-01-23 19:43:51 UTC

Permalink

Fedora 26 to the rescue?

Running a desktop on really old platforms brings lots of little issues, IME.

Post by leam hall via Ale
At home, through Comcast, so probably by definition untrusted.
Interesting...
The Firefox version is 6 major versions behind (52.x.x vs 58.x.x).
Trying to upgrade fails due to FF wanting Gnome3 libraries. Chrome broke
some months ago. Name servers or OpenDNS and Google.
Issued by: SSL.com Premium EV CA
Expires: Monday, November 19, 2018 at 6:59:59 PM Eastern Standard Time
Serial Number: NV20081614243
SHA-256 Fingerprint: 91 9B E3 02 2A 80 91 47 3D 40 1E 99 58 25
42 FB DD E4 4F 59 F6 DF E1 DE 52 18 7E A1 C1 A0 2D F2
Are you at home or work, on a relatively trusted Internet
connection? Is it possible you're hitting a man-in-the-middle site?
--
Scott Plante
404-873-0058 x104 <tel:%28404%29%20873-0058>
------------------------------------------------------------------------
*Sent: *Tuesday, January 23, 2018 10:02:43 AM
*Subject: *[ale] Funny for the day
Doing some research on SSL certificates and a Google hit goes to
####
Your connection is not secure
The website tried to negotiate an inadequate level of security.
ssl.com <http://ssl.com> uses security technology that is outdated
and vulnerable to
attack. An attacker could easily reveal information which you thought to
be safe. The website administrator will need to fix the server first
before you can visit the site.
Error code: NS_ERROR_NET_INADEQUATE_SECURITY

leam hall via Ale

2018-01-23 19:47:22 UTC

Permalink

Yup, but I get paid to support the commercial clone. Staying on CentOS 6
keeps my few brain cells on topic. Most of my needs are pretty minimal so I
rarely run into issues. If it's important enough for me to bother with I
compile from source.

Post by DJ-Pfulio via Ale
Fedora 26 to the rescue?
Running a desktop on really old platforms brings lots of little issues, IME.

------------

Post by leam hall via Ale
*Sent: *Tuesday, January 23, 2018 10:02:43 AM
*Subject: *[ale] Funny for the day
Doing some research on SSL certificates and a Google hit goes to
####
Your connection is not secure
The website tried to negotiate an inadequate level of security.
ssl.com <http://ssl.com> uses security technology that is outdated
and vulnerable to
attack. An attacker could easily reveal information which you thought to
be safe. The website administrator will need to fix the server first
before you can visit the site.
Error code: NS_ERROR_NET_INADEQUATE_SECURITY

_______________________________________________
Ale mailing list
http://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo

DJ-Pfulio via Ale

2018-01-23 19:51:35 UTC

Permalink

Or just have the latest run in a container that thinks it is on F26?
I know that is possible under LXD - don't know how RH does that stuff.

https://github.com/mqasimca/Firefox is a GIST. "lxc" is the client tool
for LXD.

Post by leam hall via Ale
Yup, but I get paid to support the commercial clone. Staying on CentOS 6
keeps my few brain cells on topic. Most of my needs are pretty minimal
so I rarely run into issues. If it's important enough for me to bother
with I compile from source.
Fedora 26 to the rescue?
Running a desktop on really old platforms brings lots of little issues, IME.

<tel:%28404%29%20873-0058>

Post by leam hall via Ale

------------------------------------------------------------------------

technology that is outdated

Post by leam hall via Ale
and vulnerable to
attack. An attacker could easily reveal information which you
thought to
be safe. The website administrator will need to fix the server first
before you can visit the site.
Error code: NS_ERROR_NET_INADEQUATE_SECURITY

_______________________________________________
Ale mailing list
***@ale.org
http://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mai

Leam Hall via Ale

2018-01-23 20:31:49 UTC

Permalink

It becomes a question of "why?" I have a finite amount of time in my
day that must be split between computing for work, computing for hobby,
smooching with my wife, learning stuff, and doing those rare
non-computer hobby type things.

The latest Chrome/Firefox doesn't really give my anything worth spending
the time figuring out Fedora again, and containers, and whatever else.

A couple weeks ago I used minicom/F13/IBM T30 to console into a Sunfire
v4100. That was sort of fun.

Yeah, sure, there are security fixes in newer releases. Generally there
are newer bugs too. Pick your poison.

Post by DJ-Pfulio via Ale
Or just have the latest run in a container that thinks it is on F26?
I know that is possible under LXD - don't know how RH does that stuff.
https://github.com/mqasimca/Firefox is a GIST. "lxc" is the client tool
for LXD.

_______________________________________________
Ale mailing list
***@ale.org
http://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo