12/21/24
May 25, 2018
SportsFilter: The Friday Huddle:
A place to discuss the sports stories that aren't making news, share links that aren't quite front-page material, and diagram plays on your hand. Remember to count to five Mississippi before commenting in anger.
While fixing these things in the never-ending battle, I found out that Chrome now scares the crap out of people who try to sign up here. You start picking a password and Chrome pops up a dialog right below the field: "This connection is not secure. Logins entered here could be compromised."
Clearly I need to upgrade to HTTPS.
posted by rcade at 11:47 AM on May 25, 2018
Don't you spend half of your Twitter energy on the topic of https? And admonishing those that don't use it? What gives, cadey?
posted by NoMich at 11:51 AM on May 25, 2018
I upgraded the Drudge Retort a year ago to HTTPS and have been planning to move the rest before Google marks HTTP as "Not Secure" in July.
I don't admonish people for not doing it. I admonish the tech experts who are engaged in a FUD campaign against the push to HTTPS and making publishers think it isn't a good idea. Google and Mozilla aren't doing this to take over the web.
But yes, I should have gotten it all done sooner.
posted by rcade at 12:05 PM on May 25, 2018
U.S.A. Hockey hired John Vanbiesbrouck as Assistant Executive Director of Hockey Operations. Yes, this John Vanbiesbrouck
posted by tommybiden at 04:05 PM on May 25, 2018
7 is not a number. It's a word.
posted by beaverboard at 10:18 AM on May 26, 2018
Just bruteforced my way back into my account due to a PC-change (RIP remembered passwords). I promise I'm not some l33t hax0r.
posted by FLsportsman at 09:29 PM on May 26, 2018
I admonish the tech experts who are engaged in a FUD campaign against the push to HTTPS and making publishers think it isn't a good idea.
gotcha
posted by NoMich at 01:20 PM on May 27, 2018
Spammers were signing up here just to get a homepage link on their member page. They got that link even before they verified their email address, so I put an end to that earlier this week.
Our Polish spammer figured this out and created 35 more accounts then verified the email address.
Homepage links now only appear on member pages when you are logged in. Search engines will never see them. I think this removes the incentive to join just for that link.
I also added the admin ability to ban some domains from being used at signup in an email address. This is unlikely to affect any legitimate users, but if you ever have trouble changing your email address let me know.
Services that create throwaway email accounts such as yopmail.com will be banned.