CFC website problems?

[Bob Armstrong]

Helpfully, CFC has now posted on its website cover page and home page the following notice to viewers re the possible Google Warning they may be getting on visiting the site:

For those of you who experienced a "reported attack site" warning
when navigating here, please be aware that in late August viruses
were detected on the site and as a consequence the CFC site was
added to a "reported attack site" list maintained by Google.
This list is referenced by several browsers as a form of security.
Our site has since been cleaned and is presently virus-free.
Nonetheless it may take some time before Google considers the
site safe and removes it from their "infected" list. We will be
continuing to monitor this situation to ensure that the site
remains virus-free, as well as pressing Google to drop us from
their list. We apologize for any undue alarm that the browser
warnings might have caused.

Thanks to CFC member Steve Douglas who drafted a model notice for CFC to consider.

Bob

[Egidijus Zeromskis]

Our site has since been cleaned and is presently virus-free

except pages reached with/using (SQL-beta) buttons.

[Bob Armstrong]

Hi Egis:

Could you give more explanation of this? You recently reported an attack on the CFC ratings page. Are you saying the virus is still there?

Maybe you could answer here the questions I recently asked you by e-mail:

Hi Egis:

A week or so ago, you reported a new hacking of the CFC website after it had allegedly been cleaned of the previous virus attack. It was apparently on the ratings page.

Is this virus still there? ( I don’t know how to check on virus myself ).

If yes, do you know if CFC has yet made any effort to clean the page of the virus?

If the virus is still there, and CFC has not yet cleaned the page, do you think the page should be taken off-line for the moment, until cleaned, to protect CFC members who may be checking their ratings on the site?

Thanks.

Bob

[Bob Armstrong]

Today at 3:30 pm, I asked IT specialist Steve Karpik to check the CFC website ratings page for the virus/unauthorized script. He checked Egis Zeromskis' rating page ( since Egis first reported the new virus ), and the Hart House Summer Open crosstable, and the infection is STILL THERE . It is something put into the ratings database by unknown persons, and its effect is not known, but usually these incursions are in furtherance of criminal aims. It seems to me that therefore CFC members checking their ratings may be at risk still. Also, this points to the fact that our CFC website security is still very lacking. Steve advises me that a number of security measures can be taken to prohibit this kind of incursion, though the age of our website does make it more vulnerable.

Furthermore, the notice on our CFC website says:

" Our site has since been cleaned and is presently virus-free. "

Obviously this is no longer true, and should be changed.


What are the Executive/EK Gillin doing about this current new infection? What are they doing about improving security for our site while discussions go on about perhaps purchasing a new website? Why is the executive so silent on these issues?

Bob