Ace-Garageguy Posted October 15, 2019 Posted October 15, 2019 (edited) On 10/15/2019 at 10:17 AM, Matt Bacon said: If the “404 not found” turns into “Sorry, Dave, I can’t do that.” we’d better start worrying... Expand Edited October 15, 2019 by Ace-Garageguy
peteski Posted October 16, 2019 Posted October 16, 2019 On 10/15/2019 at 10:17 AM, Matt Bacon said: I think given what Bill posted about being locked out for a period it must also have some kind of user “risk assessment” model, which makes it more sensitive after it’s “caught you” once. Maybe after the first “attack” is detected it thinks “we might have a wrong’un here” and ups the sensitivity, hence you either get locked out like Bill, or have to tiptoe past like you did, David. The question it would be good to hear an answer to from our hosts is whether this is a big or a feature? Is it doing what it’s meant to, but rather too enthusiastically, or is it actually malfunctioning? If the “404 not found” turns into “Sorry, Dave, I can’t do that.” we’d better start worrying.... best, M. Expand I did some repeated testing earlier in this thread (where I found those 2 offending words) and I repeatedly got locked out (on multiple computers). The lockout seems to last few hours, then everything is back to normal. I suspect the lockout is based on the IP address of the hosts from where where the "malicious" posts originate. I suspect that this functionality is a poorly implemented "feature". Hmm . . . would that be a bug them? I also frequent another forum (which uses different forum software), and we have similar problem there too.
bobthehobbyguy Posted October 17, 2019 Posted October 17, 2019 At least it just locks out the user and doesn't lock the user out and access has to be restored. I think the lockout is done becuase constant attempts might be able to create a denial of service attack. Hopefully the security rules can be toned down without ooening the sire up to attac km s,
Ace-Garageguy Posted October 17, 2019 Posted October 17, 2019 Just now, over on the "off topic" section. None of the known "trigger" combinations.
Dave Ambrose Posted October 17, 2019 Posted October 17, 2019 On 10/17/2019 at 5:20 PM, Ace-Garageguy said: Just now, over on the "off topic" section. None of the known "trigger" combinations. Expand Found it. You plowed into a different security rule. It also has to do with SQL injection attacks. I'll be working on our problem this weekend.
Ace-Garageguy Posted October 17, 2019 Posted October 17, 2019 On 10/17/2019 at 7:41 PM, Dave Ambrose said: Found it. You plowed into a different security rule. It also has to do with SQL injection attacks. I'll be working on our problem this weekend. Expand I saved the text that triggered it, if that would be any use to you.
Ace-Garageguy Posted October 19, 2019 Posted October 19, 2019 (edited) 8:49 PM, Oct 17, 2019. Text only, no known trigger combination, "what did you get today non-model-related" thread. EDIT: Then I tried to post the text here @ 8:54, got "This comment can no longer be edited bla bla bla..." Edited October 19, 2019 by Ace-Garageguy
Ace-Garageguy Posted October 19, 2019 Posted October 19, 2019 (edited) 11:30 PM, Oct 17, 2019 : This thread: Very simple text, link to one thread on this forum, one photo copied from this forum, no known trigger combinations Edited October 19, 2019 by Ace-Garageguy
DukeE Posted October 19, 2019 Posted October 19, 2019 I just tried to send a PM and got 404, haven't read whole thread, so sorry if old. 1st time it's happened to me, new to board. I'm sorry Dave... ?
Hermann Kersten Posted October 21, 2019 Posted October 21, 2019 21 hours ago, when I updated my Fuso Super Great topic, i got a "404 not found". Luckily I saved the written piece in "google translate", after a few of the same experiences before. So i closed my Morzilla Firefox, deleted everything with CC Cleaner ( cookies and so on) and go back and login again to the MCM forum. After copy-past the text from "google Translate" to the topic, i could attach the pictures and submit everything, and all was good. I have no idea why i get this "404 not found" code in the first place. Hermann..
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now