Silk Road forums

Market => Rumor mill => Topic started by: electriccrazyman on October 19, 2011, 01:16 pm

Title: warning
Post by: electriccrazyman on October 19, 2011, 01:16 pm
More than once now the forum software has tried to load an external application when I clicked on the rumor mill section link (http://dkn255hz262ypmii.onion/index.php?board=7.0).

This is new behavior. This is a security issue. It doesn't happen every time but has happened more than once for me. TOR warns, if you are configured that way, that this is potentially a security problem. From my perspective this is a serious security problem. Why is the forum attempting to load and external application?

Where there is smoke...

Title: Re: warning
Post by: electriccrazyman on October 19, 2011, 01:25 pm
I have now had this happen trying to load index.php (forum home) as well as when trying to access this message thread to add that it was happening on index.php. It doesn't occur every time but is insistent.
Title: Re: warning
Post by: gaah on October 19, 2011, 06:13 pm
This is a known issue... it isn't a security threat...

Sometimes the forum returns 0-length http responses, to which some web browsers (Firefox) will attempt to open with an external application.  If you open it with something like notepad/texeditor, you'll see there's no content in there.
Title: Re: warning
Post by: electriccrazyman on October 19, 2011, 08:31 pm
Thanks. I had not seen this before. That explains the intermittent behavior.