Milviz Forums Hacked

Guys, I tried to go to the Milviz PC-6 forums but was greeted with this page and can’t proceed. Does anyone know if the Milviz forums have been hacked?

milviz.com/forum/ucp.php?mode=login&sid=312f05e1ca05c5957ecbb261ba41c3ef

Not hacked. The URL you’re using is not HTTPS / SSL Encrypted so if you enter you user name and password there, it’s “in the clear” and can be intercepted and reused without your knowledge. Change the URL from http:// to https://.

4 Likes

If you use Chrome, Firefox, Edge, or Opera, there is an extension called “HTTPS Everywhere” that will force a https connection if the other site can create one. You can also set individual site rules, for example if there’s a site you trust that doesn’t support https connections. Very useful!

3 Likes

That site will accept an HTTPS connection to the same URL. Someone should inform them their server is misconfigured, as it should automatically redirect HTTP connections to HTTPS.

Other than that the site seems to have fared well:

https://www.ssllabs.com/ssltest/analyze.html?d=milviz.com

It’s their rewrite rule(s). “Milviz.com” will redirect, milviz.com/forum will not. I’ll let them know once I find who to report it to.

1 Like

That would be me. I have let the person in charge of the site know.

Thanks.

2 Likes