Jump to content
View in the app

A better way to browse. Learn more.

Surly Horns

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

Featured Replies

3 hours ago, Bottlecap said:

the fuck is this popup ads shit?

As a tree fiddy'er, I demand this shit cease and desist immediately!

  • Replies 6.9k
  • Views 451k
  • Created
  • Last Reply

Top Posters In This Topic

Most Popular Posts

  • Tornado hit data center. Sorry for downtime. Going to have more downtime to fix later Please report weird shit here but I'm with my family and mobile only. I just spent about an hour on a bench o

  • hookemATL
    hookemATL

    I had to draw porno. Wasn’t great but I finished

  • https://www.surlyhorns.com/board/settings/account-security/#piiDataRequest if you want to know what data could have possibly been leaked request here.  The passwords are encrypted at rest in

Posted Images

Black chrome theme has been borked for me on chrome since the meltdown a couple Saturdays ago. Not a huge deal but I sure like dark themes better if that choice is still available. 

Yes, can we get rid of all the pinned threads on tapa?
They will stay there AND YOU WILL LIKE IT.

07d62d6bb12f1c6c169ee03df64b8c8d.jpg546f9fdabc79aeedb8c9362e934f3919.jpg

There was some high level borkage going on there.  We need to get our top men on it.  TOP.  MEN.

5 minutes ago, blacklab said:

well, you're stuck with me and immamac

giphy.gif

1 minute ago, immamac said:

These graphs are interesting...

The Burmese found our new hiding hole eh?

well, you're stuck with me and immamac
Goo punch said you guys have a lot of explaining to do

Sent from my Moto Z (2) using Tapatalk

5 minutes ago, immamac said:

These graphs are interesting...

Penis,+mathematical+equation+1+-+0b.jpg

3 minutes ago, immamac said:

These graphs are interesting...

Looks like DDoS.   If you have access to splunk, correlate downtime to a frequency distribution IP addresses.   If they're evenly distributed across singular IP's, you're getting DDoS'd.

14 minutes ago, GlenFromTheMailRoom said:

Looks like DDoS.   If you have access to splunk, correlate downtime to a frequency distribution IP addresses.   If they're evenly distributed across singular IP's, you're getting DDoS'd.

JauntyDeadHorseshoecrab-size_restricted.

Some odd double posting going on right now.

  • Author
5 hours ago, mdmost said:

Some odd double posting going on right now.

I saw one post that was reposted 6 times then when I refreshed the page it became 1 post only.

  • Author
1 minute ago, Dark Horse said:

Borked again or just me?

Not just you. Fix this shit, Rich!

  • Author

Yeah, thumbs up on the response time. Well done, Bob.

Yea something is borked with certificate. Good luck stealing my financial information, not much to take that my wife doesn’t already spend.

Yep, cert just expired. Honest question but why don’t you guys host the site on a PaaS? Seems like so many of these types of issues are auto managed for you on a platform like Heroku or Azure. 

Edited by Vertigo

ffs guy, use a certificate manager or some shit to update your certs automatically. Use AWS ACM you wouldn't have this issue anymore and the SSL certs are free. Don't need anything on AWS to use it, not even domain registration on route53 

EDIT: Huh, their SSL provider, Let's Encrypt, says they do automatic cert rotation. No idea why it's broken, but cmon man

Edited by Captainant

I had to bypass that certificate thing so that my laptop could access this place, and now everything is in Russian.

Must think Russian.

11 minutes ago, Vertigo said:

Yep, cert just expired. Honest question but why don’t you guys host the site on a PaaS? Seems like so many of these types of issues are auto managed for you on a platform like Heroku or Azure. 

 

8 minutes ago, Captainant said:

ffs guy, use a certificate manager or some shit to update your certs automatically. Use AWS ACM you wouldn't have this issue anymore and the SSL certs are free. Don't need anything on AWS to use it, not even domain registration on route53 

EDIT: Huh, their SSL provider, Let's Encrypt, says they do automatic cert rotation. No idea why it's broken, but cmon man

Totally this. And also you guys need to prepare the feltzer valve with some 3 in 1 oil and some gauze pads. 

getting the warning on Google Chrome that it's not a Secure Connection. I go to the Advanced section and get on anyway, but this warning there yesterday. My cache error or something with Surly?

17 minutes ago, Captainant said:

ffs guy, use a certificate manager or some shit to update your certs automatically. Use AWS ACM you wouldn't have this issue anymore and the SSL certs are free. Don't need anything on AWS to use it, not even domain registration on route53 

EDIT: Huh, their SSL provider, Let's Encrypt, says they do automatic cert rotation. No idea why it's broken, but cmon man

wtf is this science?

8 minutes ago, NowThis said:

getting the warning on Google Chrome that it's not a Secure Connection. I go to the Advanced section and get on anyway, but this warning there yesterday. My cache error or something with Surly?

Same thing with Microsoft Edge  What information is Surly trying to steal from me, anyway?

Edited by ImissWallyPryor
can't spell

7 minutes ago, NowThis said:

wtf is this science?

HTTPS is an encryption protocol for your HTTP browsing. The encryption is validated through a trusted third party that authenticates that it's genuine and the communication you're receiving from the server is actually from the server and not a 3rd party (like in a man in the middle attack). An expired SSL (secure sockets layer) cert basically means that the certificate is no longer being validated by the third party, because they have a built in expiration date so it forces certificate rotation which further heightens security.

On any website using HTTPS, you can click on the little lock symbol in the address bas (or in this case, the red triangle) and look at the SSL cert and see who issued it, it's TTL (time to live), fingerprint, and a number of other technical details.

Most cert providers do automatic rotation, but some services are more mature than others lol. I'm guessing immamac either missed the expiration notice email, the provider "Lets Encrypt" failed to send it, or it got spam filtered. It's a pretty quick fix, but you also need the proverbial keys to the castle to do so. 

Basically, all that the cert error means is that the connection is no longer guaranteed to be end-to-end encrypted. Nothing necessarily sinister, just a pain in the ass. Also I'm pretty sure it's breaking some of the site functionality like tagging users and editing posts because the javascript is erroring out on invalid cert errors when I take a look at the console out of the webpage load

yep as the others have said, getting the expired cert notice, causing me to have to bypass the security

Will it auto load when fixed?  I hate chrome and am really bad at technology...

15 minutes ago, Captainant said:

HTTPS is an encryption protocol for your HTTP browsing. The encryption is validated through a trusted third party that authenticates that it's genuine and the communication you're receiving from the server is actually from the server and not a 3rd party (like in a man in the middle attack). An expired SSL (secure sockets layer) cert basically means that the certificate is no longer being validated by the third party, because they have a built in expiration date so it forces certificate rotation which further heightens security.

On any website using HTTPS, you can click on the little lock symbol in the address bas (or in this case, the red triangle) and look at the SSL cert and see who issued it, it's TTL (time to live), fingerprint, and a number of other technical details.

Most cert providers do automatic rotation, but some services are more mature than others lol. I'm guessing immamac either missed the expiration notice email, the provider "Lets Encrypt" failed to send it, or it got spam filtered. It's a pretty quick fix, but you also need the proverbial keys to the castle to do so. 

Lets Encrypt is awesome, free, and offers usually automatically renewed 90 day certs. The overpriced cert oligopoly is one of the more annoying things on the internet. 

57 minutes ago, Vertigo said:

Yep, cert just expired. Honest question but why don’t you guys host the site on a PaaS? Seems like so many of these types of issues are auto managed for you on a platform like Heroku or Azure. 

Because without 3 year upfront pricing the difference in cost is almost 2 orders of magnitude difference and most of the issues are not hardware related at all. Cert rotation is easy and we are just going to make sure it works right from here on. 

15 minutes ago, immamac said:

Fix is going in now. Been busy as hell with travel this week and it slipped through the cracks. 

Shit man, how many cracks do you have?

5 minutes ago, El Diablo said:

Shit man, how many cracks do you have?

Cut the crack cracks, Jack.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.