Jump to content
View in the app

A better way to browse. Learn more.

Surly Horns

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.
Football ... Basketball ... Baseball ... Other Sports ... Futbol ... 🤫995🤫 ... Gambling ... Movies & TV ... Music ... Hobbies ... Lulz ... Food & Travel ... Daily Texan ... Business & Markets ... Cloak Room ... Help ... For Sale ... Board Discussion ... Advertise... Tailgate Donations

Featured Replies

#201
3 hours ago, Bottlecap said:

the fuck is this popup ads shit?

As a tree fiddy'er, I demand this shit cease and desist immediately!

  • Replies 7.1k
  • Views 469k
  • Created
  • Last Reply

Top Posters In This Topic

Most Popular Posts

  • Tornado hit data center. Sorry for downtime. Going to have more downtime to fix later Please report weird shit here but I'm with my family and mobile only. I just spent about an hour on a bench o

  • hookemATL
    hookemATL

    I had to draw porno. Wasn’t great but I finished

  • https://www.surlyhorns.com/board/settings/account-security/#piiDataRequest if you want to know what data could have possibly been leaked request here.  The passwords are encrypted at rest in

Posted Images

#202

Black chrome theme has been borked for me on chrome since the meltdown a couple Saturdays ago. Not a huge deal but I sure like dark themes better if that choice is still available. 

#204

There was some high level borkage going on there.  We need to get our top men on it.  TOP.  MEN.

#215
well, you're stuck with me and immamac
Goo punch said you guys have a lot of explaining to do

Sent from my Moto Z (2) using Tapatalk

#217
3 minutes ago, immamac said:

These graphs are interesting...

Looks like DDoS.   If you have access to splunk, correlate downtime to a frequency distribution IP addresses.   If they're evenly distributed across singular IP's, you're getting DDoS'd.

#218
14 minutes ago, GlenFromTheMailRoom said:

Looks like DDoS.   If you have access to splunk, correlate downtime to a frequency distribution IP addresses.   If they're evenly distributed across singular IP's, you're getting DDoS'd.

JauntyDeadHorseshoecrab-size_restricted.

  • Author
#220
5 hours ago, mdmost said:

Some odd double posting going on right now.

I saw one post that was reposted 6 times then when I refreshed the page it became 1 post only.

  • Author
#223
1 minute ago, Dark Horse said:

Borked again or just me?

Not just you. Fix this shit, Rich!

  • Author
#225

Yeah, thumbs up on the response time. Well done, Bob.

#230

Yea something is borked with certificate. Good luck stealing my financial information, not much to take that my wife doesn’t already spend.

#231

Yep, cert just expired. Honest question but why don’t you guys host the site on a PaaS? Seems like so many of these types of issues are auto managed for you on a platform like Heroku or Azure. 

Edited by Vertigo

#232

ffs guy, use a certificate manager or some shit to update your certs automatically. Use AWS ACM you wouldn't have this issue anymore and the SSL certs are free. Don't need anything on AWS to use it, not even domain registration on route53 

EDIT: Huh, their SSL provider, Let's Encrypt, says they do automatic cert rotation. No idea why it's broken, but cmon man

Edited by Captainant

#233

I had to bypass that certificate thing so that my laptop could access this place, and now everything is in Russian.

Must think Russian.

#235
11 minutes ago, Vertigo said:

Yep, cert just expired. Honest question but why don’t you guys host the site on a PaaS? Seems like so many of these types of issues are auto managed for you on a platform like Heroku or Azure. 

 

8 minutes ago, Captainant said:

ffs guy, use a certificate manager or some shit to update your certs automatically. Use AWS ACM you wouldn't have this issue anymore and the SSL certs are free. Don't need anything on AWS to use it, not even domain registration on route53 

EDIT: Huh, their SSL provider, Let's Encrypt, says they do automatic cert rotation. No idea why it's broken, but cmon man

Totally this. And also you guys need to prepare the feltzer valve with some 3 in 1 oil and some gauze pads. 

#238

getting the warning on Google Chrome that it's not a Secure Connection. I go to the Advanced section and get on anyway, but this warning there yesterday. My cache error or something with Surly?

#239
17 minutes ago, Captainant said:

ffs guy, use a certificate manager or some shit to update your certs automatically. Use AWS ACM you wouldn't have this issue anymore and the SSL certs are free. Don't need anything on AWS to use it, not even domain registration on route53 

EDIT: Huh, their SSL provider, Let's Encrypt, says they do automatic cert rotation. No idea why it's broken, but cmon man

wtf is this science?

#240
8 minutes ago, NowThis said:

getting the warning on Google Chrome that it's not a Secure Connection. I go to the Advanced section and get on anyway, but this warning there yesterday. My cache error or something with Surly?

Same thing with Microsoft Edge  What information is Surly trying to steal from me, anyway?

Edited by ImissWallyPryor
can't spell

#241
7 minutes ago, NowThis said:

wtf is this science?

HTTPS is an encryption protocol for your HTTP browsing. The encryption is validated through a trusted third party that authenticates that it's genuine and the communication you're receiving from the server is actually from the server and not a 3rd party (like in a man in the middle attack). An expired SSL (secure sockets layer) cert basically means that the certificate is no longer being validated by the third party, because they have a built in expiration date so it forces certificate rotation which further heightens security.

On any website using HTTPS, you can click on the little lock symbol in the address bas (or in this case, the red triangle) and look at the SSL cert and see who issued it, it's TTL (time to live), fingerprint, and a number of other technical details.

Most cert providers do automatic rotation, but some services are more mature than others lol. I'm guessing immamac either missed the expiration notice email, the provider "Lets Encrypt" failed to send it, or it got spam filtered. It's a pretty quick fix, but you also need the proverbial keys to the castle to do so. 

#242

Basically, all that the cert error means is that the connection is no longer guaranteed to be end-to-end encrypted. Nothing necessarily sinister, just a pain in the ass. Also I'm pretty sure it's breaking some of the site functionality like tagging users and editing posts because the javascript is erroring out on invalid cert errors when I take a look at the console out of the webpage load

#245

Will it auto load when fixed?  I hate chrome and am really bad at technology...

#246
15 minutes ago, Captainant said:

HTTPS is an encryption protocol for your HTTP browsing. The encryption is validated through a trusted third party that authenticates that it's genuine and the communication you're receiving from the server is actually from the server and not a 3rd party (like in a man in the middle attack). An expired SSL (secure sockets layer) cert basically means that the certificate is no longer being validated by the third party, because they have a built in expiration date so it forces certificate rotation which further heightens security.

On any website using HTTPS, you can click on the little lock symbol in the address bas (or in this case, the red triangle) and look at the SSL cert and see who issued it, it's TTL (time to live), fingerprint, and a number of other technical details.

Most cert providers do automatic rotation, but some services are more mature than others lol. I'm guessing immamac either missed the expiration notice email, the provider "Lets Encrypt" failed to send it, or it got spam filtered. It's a pretty quick fix, but you also need the proverbial keys to the castle to do so. 

Lets Encrypt is awesome, free, and offers usually automatically renewed 90 day certs. The overpriced cert oligopoly is one of the more annoying things on the internet. 

#247
57 minutes ago, Vertigo said:

Yep, cert just expired. Honest question but why don’t you guys host the site on a PaaS? Seems like so many of these types of issues are auto managed for you on a platform like Heroku or Azure. 

Because without 3 year upfront pricing the difference in cost is almost 2 orders of magnitude difference and most of the issues are not hardware related at all. Cert rotation is easy and we are just going to make sure it works right from here on. 

#248
15 minutes ago, immamac said:

Fix is going in now. Been busy as hell with travel this week and it slipped through the cracks. 

Shit man, how many cracks do you have?

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...
Football ... Basketball ... Baseball ... Other Sports ... Futbol ... 🤫995🤫 ... Gambling ... Movies & TV ... Music ... Hobbies ... Lulz ... Food & Travel ... Daily Texan ... Business & Markets ... Cloak Room ... Help ... For Sale ... Board Discussion ... Advertise... Tailgate Donations

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.