Author Topic: "A username and password are being requested by http://www.*************."  (Read 905 times)

0 Members and 1 Guest are viewing this topic.

Offline drogulus

  • Veteran member
  • *
  • Posts: 5571
  • Gypsy, 1970
     I've noticed an escalation of clickjacking recently, and today it's happening at GMG in the form of a box that pops up when you click to the next page (on the ancient "Meltdown" thread, if that matters). The box says "A username and password are being requested by [website]", and "Authentication Required". I wouldn't do anything other than close the box.
« Last Edit: December 18, 2016, 10:34:48 AM by drogulus »
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:45.9) Gecko/20100101 Goanna/3.2 Firefox/45.9 PaleMoon/27.3.0
      
Mozilla/5.0 (Windows NT 10.0; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0

Offline Gurn Blanston

  • Haydn: that genius of vulgar music who induces an inordinate thirst for beer - Mily Balakirev (1860)
  • Global Moderator
  • *
  • Posts: 30693
  • Support your local Haydn Society
    • Gurn's Haydn Blog
  • Location: Texas, where else?
  • Currently Listening to:
    Haydn, I reckon.
Re: "A username and password are being requested by http://www.*************."
« Reply #1 on: December 18, 2016, 04:15:10 PM »
     I've noticed an escalation of clickjacking recently, and today it's happening at GMG in the form of a box that pops up when you click to the next page (on the ancient "Meltdown" thread, if that matters). The box says "A username and password are being requested by [website]", and "Authentication Required". I wouldn't do anything other than close the box.

That's certainly the correct action to take. I know Rob keeps an eye on this area, he is the only one who can head that off, so I will make sure he knows. Thanks for pointing it out, I haven't seen it yet.

GB  8)
Help support GMG by purchasing from Amazon using this link

Visit my Haydn blog: HaydnSeek

Follow me on Twitter @GurnBlanston106

Offline Ken B

  • Veteran member
  • *
  • Posts: 2575
  • The Age of the Wanker is upon us
    • kenBlogic
  • Location: Michigan
  • Currently Listening to:
    Canoes not battleships.
Re: "A username and password are being requested by http://www.*************."
« Reply #2 on: December 18, 2016, 06:00:21 PM »
     I've noticed an escalation of clickjacking recently, and today it's happening at GMG in the form of a box that pops up when you click to the next page (on the ancient "Meltdown" thread, if that matters). The box says "A username and password are being requested by [website]", and "Authentication Required". I wouldn't do anything other than close the box.

It might be your device. I suggest you do a scan.
Give a man a fire and he is warm for a day. Set a man on fire and he is warm for life.

Offline Dungeon Master

  • Benevolent Dictator
  • Administrator
  • *
  • *
  • Posts: 366
  • Head Honcho
  • Location: Canberra
Re: "A username and password are being requested by http://www.*************."
« Reply #3 on: December 18, 2016, 07:45:07 PM »
I have deleted e a full malware and virus scan of my server (automatically done every week) and there is nothing to indicate the origin of these popups is GMG.

I suspect it is some form of malware on your personal machine. From your signature, I can see you are Windows-based and fairly cluey with regards to IT stuff. When you get the popup, try a different browser or even a different machine (laptop, tablet etc).if it only appears on one machine/browser combo, then we have a suspect.

Please keep me informed.

If anyone else is seeing the same thing, please report here.

Rob
 Macs are better. They just are.

Offline drogulus

  • Veteran member
  • *
  • Posts: 5571
  • Gypsy, 1970
Re: "A username and password are being requested by http://www.*************."
« Reply #4 on: December 19, 2016, 08:33:26 AM »
     
     It turns out there's no cause for alarm after all. It's not GMG and it's not me, it's weird but innocuous. See, I'm perusing the "Meltdown" thread with years old posts with links to articles about meltdown stuff. I clicked one of them and it asked for a username and password, because instead of going dead these old links now point to an archive for old articles no longer available to the public.

     The weird part is that after clicking once on an old link the request pops up sometimes when I click a page number in the thread, some kind of bug but a harmless one.
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:45.9) Gecko/20100101 Goanna/3.2 Firefox/45.9 PaleMoon/27.3.0
      
Mozilla/5.0 (Windows NT 10.0; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0

Buying Music From Amazon?
Please consider using these links. A small percentage of every sale using these links is passed on to GMG and helps keep this forum online.
Amazon US
Amazon Canada
Amazon UK