The GetDPI Photography Forum

Great to see you here. Join our insightful photographic forum today and start tapping into a huge wealth of photographic knowledge. Completing our simple registration process will allow you to gain access to exclusive content, add your own topics and posts, share your work and connect with other members through your own private inbox! And don’t forget to say hi!

Fishing problem when viewing images stored at Flickr

Annna T

Active member
It seems that Flickr and GetDPI are no more playing nicely together :

I'm now getting a strong phishing alert each time I'm trying to view the full size of pictures stored at Flickr. This with any picture of anybody.

I got that first while using an iPad and Safari (last version of IOS and Safari). I thought may be it was due to the fact that the iPad tries to launch the Flickr app from inside the browser.


Problem with iPad and Safari by rrr_hhh, sur Flickr

I clicked on the link saying "Announce an error" and then was brought to a page with a google logo !! why ? is there any link between the forum and google ? is the forum a Google group ?


Sans titre by rrr_hhh, sur Flickr

Thinking the problem was related to the iPad, I tried opening full sized Flickr images from my desktop (Window 10 and Firefox last version, with Norton AV installed).


Here is what I get :


Problem with link to Flickr in GetDPI by rrr_hhh, sur Flickr


Question : am I the only one getting those warnings ? Are there any known vulnerabilities known with Flickr pages ? is it safe to bypass that alert ? Is it just the result of a war between the big internet players ?

Thanks for sharing your experiences in this matter.
 

Bob

Administrator
Staff member
What we are seeing is a feature of many browsers including Safari and Chrome that use the Google Safe Surfing service to declare sites safe or not.
Apparently at one time or another, someone on our site placed a link to h2review.com which is a hassy review site which at one time or another, hosted some malware. Since we have or had a link to that site, our site was marked as unsafe to refer users to others. What this means is that an external link to anywhere from our site will be declared by google as unsafe.
Google seems unwilling to just leave us alone although I have asked for a review and I have not yet been successful at locating the place on our site that actually links to the malware site, although I am still looking.
thanks
-bob

It seems that Flickr and GetDPI are no more playing nicely together :

I'm now getting a strong phishing alert each time I'm trying to view the full size of pictures stored at Flickr. This with any picture of anybody.

I got that first while using an iPad and Safari (last version of IOS and Safari). I thought may be it was due to the fact that the iPad tries to launch the Flickr app from inside the browser.


Problem with iPad and Safari by rrr_hhh, sur Flickr

I clicked on the link saying "Announce an error" and then was brought to a page with a google logo !! why ? is there any link between the forum and google ? is the forum a Google group ?


Sans titre by rrr_hhh, sur Flickr

Thinking the problem was related to the iPad, I tried opening full sized Flickr images from my desktop (Window 10 and Firefox last version, with Norton AV installed).


Here is what I get :


Problem with link to Flickr in GetDPI by rrr_hhh, sur Flickr


Question : am I the only one getting those warnings ? Are there any known vulnerabilities known with Flickr pages ? is it safe to bypass that alert ? Is it just the result of a war between the big internet players ?

Thanks for sharing your experiences in this matter.
 
Last edited:

Godfrey

Well-known member
What we are seeing is a feature of many browsers including Safari and Chrome that use the Google Safe Surfing service to declare sites safe or not.
Apparently at one time or another, someone on our site placed a link to h2review.com which is a hassy review site which at one time or another, hosted some malware. Since we have or had a link to that site, our site was marked as unsafe to refer users to others. What this means is that an external link to anywhere from our site will be declared by google as unsafe.
Google seems unwilling to just leave us alone although I have asked for a review and I have not yet ben successful at locating the place on our site that actually links to the malware site, although I am still looking.
thanks
-bob
Gawds, that'a a pain in the tookus.
Sorry for the misery, Bob. And thanks for your efforts.

G
 

marlof

Member
This is a bit of a nuisance, so I tried to help out a bit. Just entering that as a search word gave a few posts in 4 threads.

See:
* http://www.getdpi.com/forum/medium-...ssy-h4d-40-release-post180718.html#post180718
* http://www.getdpi.com/forum/lightin...-comparison-review-post163944.html#post163944
* http://www.getdpi.com/forum/leica/10069-m9-chat-box-post133235.html#post133235
* http://www.getdpi.com/forum/4-3rds-cameras/13557-panasonic-7-14-a-post302194.html#post302194
* http://www.getdpi.com/forum/4-3rds-cameras/13557-panasonic-7-14-a-post302201.html#post302201

Next to that site, another offender (the virus name itself) is mentioned too on the Safe Browsing Site Status, but I can't find a mention of that in a thread.
 

Bob

Administrator
Staff member
Thanks for that.
I deleted those references, but sadly none of them is the one cited by google.
I will ask google to re-index and re-analyze the site yet again to se if it helps.
-bob


This is a bit of a nuisance, so I tried to help out a bit. Just entering that as a search word gave a few posts in 4 threads.

See:
* http://www.getdpi.com/forum/medium-...ssy-h4d-40-release-post180718.html#post180718
* http://www.getdpi.com/forum/lightin...-comparison-review-post163944.html#post163944
* http://www.getdpi.com/forum/leica/10069-m9-chat-box-post133235.html#post133235
* http://www.getdpi.com/forum/4-3rds-cameras/13557-panasonic-7-14-a-post302194.html#post302194
* http://www.getdpi.com/forum/4-3rds-cameras/13557-panasonic-7-14-a-post302201.html#post302201

Next to that site, another offender (the virus name itself) is mentioned too on the Safe Browsing Site Status, but I can't find a mention of that in a thread.
 

Tim

Active member
Hi Bob,

I notice that google's safe browsing search shows two URLs in question for GetDPI as here

"Some pages on this website send visitors to the following dangerous websites: h2h reviews-DOT-com
and pol nu4ewtan4iwki-DOT-ws."

Perhaps its this "pol nu4ewtan4iwk" crap it seems that directs back to the h2h reviews ?
Seems we need to get rid of both. I could not find it using regular searches though.

Cheers

(edit: note I've put in some spaces so as not to create the URL here that is in question)
 
Last edited:

Annna T

Active member
May be you should log out, clear the cache and try again.
I'm still having that problem, with both Safari on the tablet and Firefox on the desktop. The problem was lying with some googles security services that are used by browsers to warn from malware etc.. So whether you get it or not may depends upon the way the lists of suspicious sites are updated or not, depending on the browser. The antivirus and/or firewall used on your device may also play a role.

I have got accustomed to ignore the warning now, which may not be a good thing (risk of allowing a real malware site).
 

fotoism

Member
I don't feel comfortable just ignoring warnings like that, instead I just copy the url and paste it on another tab and go from there. More work, yes, but I can now visit the link as intended.
 

Annna T

Active member
I don't feel comfortable just ignoring warnings like that, instead I just copy the url and paste it on another tab and go from there. More work, yes, but I can now visit the link as intended.
If you just copy the link, it will be the same as clicking on it : if the link is wrongly labeled as mischievous, nothing will happen in either way. If the link drives to a mischievous site, you will land on it either way.
 

scho

Well-known member
Using Safari on a Mac and warnings are getting to be quite annoying every time I click on a link to Flickr. How do we get around this bug?

Edit: Just tried Chrome and it also pops up warnings for every link I click on to an external site. Firefox does not , so I'll have to use firefox for browsing GetDPI until this is cleared up.

Edit: Happy to report that there are no more warnings from any of my browsers after Bob's reported work above. Many thanks Bob for you hard work fixing this problem!
 
Last edited:

Bob

Administrator
Staff member
Well I have taken the specific urls cited by google and have searched the entire database and found them not to be there.
I have been reading code and looking for url fragments that were contained in google's report.
What I found was the following:
The suspect url had existed on our site for about an hour in 2010. The original poster had deleted it, but the prior version remained in post edit history. Sometime in 2016, the site that was linked-to was reported to google as containing malware. Since that link existed in our edit history which was available to to search engines, our site was marked as linking to a malware site.
That history was removed, but google continued to fail our site.
After reading a lot more code, and having the epiphany that links that google complained about all were external and of the form
"http://www.getdpi.com/forum/redirect-to.php?redirect=<link to somewhere>" I started looking how and why external links were producing redirects instead of a simple link. It turns out that this is a security feature that is intended to prevent target sites from back-linking to our site. It also appears that google's robot was reacting not to the actual redirect to the malware site indicated by the query string, but by the portion of the linking url excluding the query string. That is why ALL external links were involved and not just those to suspect malware sites.
I have modified the settings governing the url generating code do that form of re-direct would no longer be used.
My initial testing seems to be producing no further nasty google complaints, although google searches will continue to produce the warning until after google completely re-indexes the site and then I submit it to another robotic security review.
We apologise for any inconvenience caused by this (stupid) Google warning and their lack of reasonable responsiveness.
-bob
 
Top