20 replies to this topic

[Matt Diamond]

IMG site uses an old MacGameStore certificate that expired a long time ago.

(No, it's not that important. I was considering starting a World Community Grid team for IMG, and the URL would needs to be https. But I can create a team without directly linking to the IMG website.)

[macdude22]

The best WCG team is Rakden's Roughnecks, staring me Rakden.

[Matt Diamond]

Maybe I'll just join your team then. Not sure how long I'll be doing this for.

[Frigidman™]

Yup. Certs, like the other needed upgrades, will take money to get them done. And we all know thats not gonna happen. Sorry.

[Matt Diamond]

Could switch to LetsEncrypt, but I know that requires effort.
No worries, I understand that this isn't a priority.

[Frigidman™]

Matt Diamond, on 26 March 2020 - 07:10 PM, said:

Could switch to LetsEncrypt, but I know that requires effort.
No worries, I understand that this isn't a priority.

LOL Effort... he said effort........................ you don't know the half of it !

[Matt Diamond]

Quote

effort........................ you don't know the half of it !

Actually I do know half of it-- the easy half, that is. I've set up LetsEncrypt a couple times, but I'm sure that has almost nothing to do with your problems.

People dealing with legacy systems will never hear me telling them how easy something would be to do. Particularly something low priority.

[Frigidman™]

Matt Diamond, on 27 March 2020 - 07:05 PM, said:

Actually I do know half of it-- the easy half, that is. I've set up LetsEncrypt a couple times, but I'm sure that has almost nothing to do with your problems.

People dealing with legacy systems will never hear me telling them how easy something would be to do. Particularly something low priority.

Well, I don't believe in such things as 'free certs', there is no accountability involved in the issuer when its just non-profit. Sure its better than no cert at all, but is false security any better than no security?

Its all a moot point anyhow, if Tuncer sees me messing with the server, he will not be pleased... may just end up pulling the plug entirely. Which is something I am trying to avoid happen, by not drawing any attention to this server

[Tibur]

Server? What server? There's no server here. Besides, it's all take out now, at least in my neck of the woods.

<casually walks away w/ hands in pockets, whistling non-suspiciously>

[Matt Diamond]

Quote

Sure its better than no cert at all, but is false security any better than no security?

Since its better than no cert at all, you've answered your own question. :-)

(Creeps away quietly, trying not to wake the Tuncer)

[mattw]

Having read this article today it sounds like non-https sites are going to slowly get blocked from browsers altogether:

https://nakedsecurit...tps-by-default/

[Frigidman™]

Well, can someone setup a free cert. I don't know how to do those things, because whenever Im roped into them, I am going through a step by step guide =p

Anways, as a side note, I've terminated the historical archive of IMG. All urls bounce to forum now.

[Frigidman™]

Looks like trying to use "Lets Encrypt" wont happen on this server because of how old the software on this server is. The thing requires CertBot, which requires snapd, which then they get into this tissy about dependancies wanting to be updated, which would in turn wreck complete havok across the server and break pretty much anything that would be needing an SSL cert anyways.

Upgrading the base server software wont work either, because this IPB forum, nor the newsletter server, will run on newer PHP versions than is currently installed. Not without buying the newer IPB forum (wont happen), or changing to an entirely new newsletter server suite (which has been talked about, but nothing came of it).

So its all just a big ball of catch-22, and money, and time, and whatnots.

[Matt Diamond]

Frigidman™, on 13 January 2021 - 11:08 AM, said:

Anways, as a side note, I've terminated the historical archive of IMG. All urls bounce to forum now.

Well that's a shame. I'll miss it. About once a year I poke around it, for fun or to try and recall someone or something.

Still, there's always Internet Archives's Wayback Machine (web.archive.org).

[Frigidman™]

Matt Diamond, on 13 January 2021 - 06:52 PM, said:

Well that's a shame. I'll miss it. About once a year I poke around it, for fun or to try and recall someone or something.

Still, there's always Internet Archives's Wayback Machine (web.archive.org).

Right. I had always wanted to just turn all of the IMG pages into static HTMLs, but I never figured out how to properly scrape and set that all up.

[Janichsan]

Frigidman™, on 13 January 2021 - 12:49 PM, said:

Upgrading the base server software wont work either, because this IPB forum, nor the newsletter server, will run on newer PHP versions than is currently installed. Not without buying the newer IPB forum (wont happen), or changing to an entirely new newsletter server suite (which has been talked about, but nothing came of it).

I mean, I can understand that Tuncer doesn't really want to invest much in IMG, but have you guys maybe considered some kind of crowdfunding? I could imagine at least a bunch of the regulars here would gladly donate some money. I certainly would.

[Frigidman™]

Janichsan, on 14 January 2021 - 12:50 PM, said:

I mean, I can understand that Tuncer doesn't really want to invest much in IMG, but have you guys maybe considered some kind of crowdfunding? I could imagine at least a bunch of the regulars here would gladly donate some money. I certainly would.

Much like avoiding the gaze of Sauron... you do not want to get Tuncer's attention at IMG, cause he will likely just shut it all off entirely

[Janichsan]

Frigidman™, on 14 January 2021 - 01:10 PM, said:

Much like avoiding the gaze of Sauron... you do not want to get Tuncer's attention at IMG, cause he will likely just shut it all off entirely

Well, in that case...

[ozzy]

Haha, Sauron's gaze - now that is a reference What about crowd-funding to setup a new server/domain, and export everything from here into the new server/domain and have everyone switch there

[Frigidman™]

ozzy, on 14 January 2021 - 01:23 PM, said:

Haha, Sauron's gaze - now that is a reference What about crowd-funding to setup a new server/domain, and export everything from here into the new server/domain and have everyone switch there

I've pondered it. But somehow we would have to convince tuncer to change the DNS to the new IP.... which requires talking to him about IMG, and "putting the site in someone elses hands" ...

I also don't have a lot of time to divert towards rebuilding this server/forum/code..... or allowed to spend towards it. There may be some free forum solutions out there to install and do a convert from IPB too ... but they most likely need new linux/apache/php/mysql to run...  that catch22 again.

Then there is the newsletter software... guh. Something old that would break under new php. As well as MacGameFiles running (a lifeless lump thats still active for no good reason... but its at least got secure SQL statements lol).

Guh, it spirals.