Saturday, January 12, 2019

How Safe is Your Site?

Last year I posted about switching to https from http. If you haven't done this, you need to read the post and make the change. It's VERY EASY to do. This is a safety and security issue even if {like me} you aren't a commercial site. Why? Http is an old system and has serious and known flaws that allow hackers to breach your site.

Recently I noticed several of my old linkups mysteriously had a photo of a car added to the quilts. My site is https but the linkup company I used had a flaw that Google warned me about. Simply deleting the linkup wasn't enough. Those linkups with the car photo stubbornly remained. The hackers came through that flaw and added the code into MY post. I had to delete the string of code in HTML. {I'm a not a professional coder so my solution was to delete everything from my signature on down.} If you check, you'll see the explanation I added.

What I did NOT do was click on that car link. That could have compromised my computer. By adding their own link, the hackers could make it point to any site they wanted. I'm sure "sinister people" pay them to link a porn site, a bitcoin or Nigerian scam, or something else through my innocent post. I'd seen an uptick in odd sites to my blog and was trying to track them down.

If you don't have https and/or you link to sites that aren't https, you are helping criminals. Please don't. 


The world moves on.

Lately some of the blogs on my sidebar have been "coming up blank." I click on them but the page doesn't appear. In fact, all that appears is one of these icons.


I use Chrome, a Google product. In May, Google announced they would start flagging insecure sites because most sites worldwide now use https and it's better to call out the laggards. Now it appears they've moved to the next step to help keep us all safe: Chrome won't let me go to sites that aren't https. I asked DH and found out I could override this choice. Hey, I'm an adult. But that would be like taking those stupid ridiculous bird box challenges.

I mean, really.

If the experts {among whom I am NOT included} think it's foolhardy to go to an insecure site, why would I override them? Even if your site is only an innocuous quilting blog, too many nasty people can hack in through it. So...

I checked and I can get there on Safari. But I won't. If you aren't https:, you won't see me until you are.

Please. And thank you. Ann