Author Topic: [ Resolved ] What happened with ( most of ) the Avatars ? They are gone !  (Read 8729 times)

0 Members and 1 Guest are viewing this topic.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67275
Re: What happened with ( most ) of the Avatars ? They are gone !
« Reply #15 on: August 25, 2010, 11:04:09 PM »
Rednose, you need to clean the certificates stored in your Firefox database.
Then you can reload the page with the new certificates (Chocholo said they released new ones lately).
The best things in life are free.

Offline Rednose

  • Pirate Party Member
  • Avast Überevangelist
  • Massive Poster
  • *****
  • Posts: 3661
  • Bits of Freedom : https://www.bof.nl
    • Nederlandstalig Avast! forum
Re: What happened with ( most ) of the Avatars ? They are gone !
« Reply #16 on: August 25, 2010, 11:05:30 PM »
The extended screenshot.

Greetz, Red.
OS: Win 10 / Debian / Tails / iOS
Real Time: Avast Free
VPN: NordVPN ( NordLynx ) with Cybersec

Offline logos

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 9443
Re: What happened with ( most ) of the Avatars ? They are gone !
« Reply #17 on: August 25, 2010, 11:07:45 PM »
okay so that was indeed a certificate issue as I first thought, just do as Tech advised, delete anything from avast in Firefox certificate store, and reload a forum page. Weird anyway as I never had any authentication issue with Avast in plain http ::) ...and there's no cert check in http anyway, as none has to be provided, so...
« Last Edit: August 25, 2010, 11:19:11 PM by Logos »
w7 - ais7

Offline logos

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 9443
Re: What happened with ( most ) of the Avatars ? They are gone !
« Reply #18 on: August 25, 2010, 11:16:08 PM »
that's what you get from Avast in http (no ssl); so your alert is hard to explain
w7 - ais7

Offline Rednose

  • Pirate Party Member
  • Avast Überevangelist
  • Massive Poster
  • *****
  • Posts: 3661
  • Bits of Freedom : https://www.bof.nl
    • Nederlandstalig Avast! forum
Re: What happened with ( most ) of the Avatars ? They are gone !
« Reply #19 on: August 25, 2010, 11:19:47 PM »
Where can I find the Firefox certificate database ???

Greetz, Red.
OS: Win 10 / Debian / Tails / iOS
Real Time: Avast Free
VPN: NordVPN ( NordLynx ) with Cybersec

Offline logos

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 9443
Re: What happened with ( most ) of the Avatars ? They are gone !
« Reply #20 on: August 25, 2010, 11:22:01 PM »
Where can I find the Firefox certificate database ???

Greetz, Red.

options >>> advanced
w7 - ais7

Offline Rednose

  • Pirate Party Member
  • Avast Überevangelist
  • Massive Poster
  • *****
  • Posts: 3661
  • Bits of Freedom : https://www.bof.nl
    • Nederlandstalig Avast! forum
Re: What happened with ( most ) of the Avatars ? They are gone !
« Reply #21 on: August 25, 2010, 11:35:19 PM »
I don't understand :-\

Your certificates was/is empty. I only have a list of organisations. DigiCertInc is the one from Avast.

Greetz, Red.
OS: Win 10 / Debian / Tails / iOS
Real Time: Avast Free
VPN: NordVPN ( NordLynx ) with Cybersec

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 83531
  • No support PMs thanks
Re: What happened with ( most ) of the Avatars ? They are gone !
« Reply #22 on: August 25, 2010, 11:37:55 PM »
DavidR, your post saved the day :D

http://forum.avast.com/avt/avatar_18134.png
Showed my Avatar. But :

https://forum.avast.com/avt/avatar_18134.png
Showed : see screenshot

So Firefox says the connection is not secure, because the identity of the website can not be confirmed. Adding it as an exception solves the problem. The Avatars are back :D

But why do I have this problem only with Firefox, and not with other browsers ? Any help and/or info would be appreciated :)

You're welcome.

It is something to do with your security settings importing https into an http page (mixed security levels, etc.). I don't recall when this use of http(s) for the location of the avatars happened or why, but it certainly had an immediate impact.

Firefox has different security settings, some say they are tighter others just say different. Very recently we had a case of avast alerting on an injected iframe on a web site, yet I and another user couldn't replicate it as we were using firefox and only IE8 (in this instance) seem vulnerable to this injected iframe vulnerability.

Well, funny thing is I don't browse the forum in https.

No you don't browse the forums in https, but the link to the avatars is https so you are effectively accessing a secure site/page and firefox expects a certificate to check. But for some reason it can't check it, as there is now a valid certificate for the avast forums.

If you connect to the forums from an https link in a topic reply notification email, then firefox would have validated the certificate before opening an https page. Since you are already on an http page, this initial certificate check wouldn't have taken place.
WinXP ProSP3/ Core2Duo E8300/ 4GB Ram/ avast! free 18.5.2342/ Firefox ESR, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ DropMyRights/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security
Windows 10 Home 1909 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.6.2420 (build 20.6.5495.561) UI-1.0.541/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro

Offline logos

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 9443
Re: What happened with ( most ) of the Avatars ? They are gone !
« Reply #23 on: August 25, 2010, 11:44:57 PM »
I don't understand :-\

Your certificates was/is empty. I only have a list of organisations. DigiCertInc is the one from Avast.

Greetz, Red.

look, you must have clicked a link in https, sometimes it happens randomly on this forum and that's when you get the alert, but I just tried manually, and I didn't get any alert, the certificate is valid. I can't see it stored either in Firefox; I don't think that it needs to be stored at all, it will be rechecked online as needed.

edit: I guess it doesn't need to be stored because there's no exchange of personal data between you and the server. The cert will just be checked against the authority that delivered it and is well listed in Firefox if trusted. Your list of imported cert would become just uselessly huge with the time ;D
« Last Edit: August 25, 2010, 11:57:46 PM by Logos »
w7 - ais7

Offline logos

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 9443
Re: What happened with ( most ) of the Avatars ? They are gone !
« Reply #24 on: August 25, 2010, 11:47:24 PM »
hey David that's right I just checked avatars are on ssl :o ...I just didn't know that.
w7 - ais7

Offline Rednose

  • Pirate Party Member
  • Avast Überevangelist
  • Massive Poster
  • *****
  • Posts: 3661
  • Bits of Freedom : https://www.bof.nl
    • Nederlandstalig Avast! forum
Re: What happened with ( most ) of the Avatars ? They are gone !
« Reply #25 on: August 25, 2010, 11:54:18 PM »
Ok, thank you very much DavidR, Logos and Tech. At least I understand now what the problem is, and what I can do about it :)

Greetz, Red.
OS: Win 10 / Debian / Tails / iOS
Real Time: Avast Free
VPN: NordVPN ( NordLynx ) with Cybersec

Offline logos

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 9443
Re: What happened with ( most ) of the Avatars ? They are gone !
« Reply #26 on: August 25, 2010, 11:58:23 PM »
okay you're welcome ;)
w7 - ais7

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 66005
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Win 8.1 [x64] - Avast PremSec 20.7.2421.B#1 [UI.544] - CC 5.70 - EEK - FF ESR 68.11 [NS/AOS/uBO/PB] - TB 68.11 - SB/CP/SL/DU.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 83531
  • No support PMs thanks
hey David that's right I just checked avatars are on ssl :o ...I just didn't know that.

I don't believe that was always the way though, I think they just to be on http.
WinXP ProSP3/ Core2Duo E8300/ 4GB Ram/ avast! free 18.5.2342/ Firefox ESR, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ DropMyRights/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security
Windows 10 Home 1909 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.6.2420 (build 20.6.5495.561) UI-1.0.541/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 83531
  • No support PMs thanks
Ok, thank you very much DavidR, Logos and Tech. At least I understand now what the problem is, and what I can do about it :)

Greetz, Red.

You're welcome.

The main thing is that a) you have it sorted now and b) it has identified the exact cause, which may help others in the future should it happen again.
WinXP ProSP3/ Core2Duo E8300/ 4GB Ram/ avast! free 18.5.2342/ Firefox ESR, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ DropMyRights/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security
Windows 10 Home 1909 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.6.2420 (build 20.6.5495.561) UI-1.0.541/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro