GopherHole has been hacked

Donate To GopherHole
P

Plato

Banned
Joined
Oct 14, 2019
Messages
2,001
Reaction score
1,365
Points
113
When I enter through the web site and click on 7 National Titles I am directed to adware
When I google "Gopher Hole" Google tells me the site has been hacked.
If I enter directly at 7 National etc it works.
I know this is not football related but is the only way to alert the administrators.
 

I messaged them about this a few days ago and got no response... At least it's easy to close the tab that opens up but still, expect some sort of response from them.
 

operateoriginalheavilyapplication

That's a fun domain name.
 

Thanks for the heads up. We just alerted our IT guys and they are looking into it now.
 

I noticed a while ago that the main link, that used to bring me to the main forum page didn’t work anymore. But the link directly to the football forum still works. So I started using that one.

If you put www.forums.gopherhole.com or www.forums.gopherhole.com/boards , it sends you to /forum.php which the server declares is not an accessible resource.

But if you put the correct board addresses it’s fine. Although there is a security warning, I just assumed something wasn’t setup correctly with https.
 
Last edited:


About a week ago my server security system started blocking malware attempts every time I came to gopherhole. Never happened before that.
 


I tried going directly to the football forum on my work computer with the same results as the past few days (blocked). I’ve had no problems accessing on my phone, so I’ve just been doing that.
 




I hope GopherHole maybe takes this as an opportunity to move to https:// rather than http://. It may help prevent future problems.

I have set up a personal website before though, and know the process to go from http:// to https:// can be really difficult, so I would understand if they didn't.
 

^^^ probably because something is wrong with the https (secure) connection. Maybe a certificant went obsolete, or who knows. Something is fouled up with it.

When logging in on my computer, Firefox says "Connection not secure"
 

Taji34 said:
I hope GopherHole maybe takes this as an opportunity to move to https:// rather than http://. It may help prevent future problems.

I have set up a personal website before though, and know the process to go from http:// to https:// can be really difficult, so I would understand if they didn't.
Click to expand...
I cannot type in "http://www.forums.gopherhole.com" , it forces the browser into https mode.
 




The main www.gopherhole.com page works fine in https mode. Firefox says "verified by Cloudflare, Inc." It only shows the insecure connection warning when you go to the forums.
 

#2Gopher said:
Work productivity has gone way down due to texting and the internet. I can see why they blocked the site.
Click to expand...
Not to derail the thread or anything ... but productivity goes way down if you just sit there like a drone for 8-9hrs a day with no breaks.

Your mind needs breaks, constantly, if you hope to keep your productivity at a fairly high level all day long.
 


I am very, very cautious about malware.
But I admit I did try the update said to be needed and got a bunch of malware that Malwarebytes. removed.
 



Had same issues. Appears they have fixed problem. Thanks
 

Taji34 said:
I hope GopherHole maybe takes this as an opportunity to to https:// rather than http://. It may help prevent future problems.

I have set up a personal website before though, and know the process to go from http:// to https:// can be really difficult, so I would understand if they didn't.
Click to expand...

Https has nothing to do with protection of the web server. Only 3rd party validation of the server identity, and encrypting the communication with the client.
 


JMGIII said:
Https has nothing to do with protection of the web server. Only 3rd party validation of the server identity, and encrypting the communication with the client.
Click to expand...
Right, but would it not protect from Man in the Middle attacks? While I am not very educated in cyber security, that's what it seems like is happening in this instance since only the home page seems effected.
 


@GopherHole Staff

Is anything further going to be done about the https issues with the forum pages, at this time? Not a criticism or judgement, either way. Just wondering, thank you! :)
 

You must log in or register to reply here.



Top Bottom