4 ms·

Found a pdf of the microprocessors one if anyone feel like sampling what the content is like. http://50.116.28.134/MangaGuidetoMicroprocessors.pdf http://50.11

Found a pdf of the microprocessors one if anyone feel like sampling what the content is like. http://50.116.28.134/MangaGuidetoMicroprocessors.pdf http://50.116.28.134/MangaGuidetoMicroprocessors.pdf Imo I love things like this just for the fun (novelty) of them!

dylan604 5y ago
my browser, FF, just said nope to that link. maybe a good thing as I didn't actually mean to click it.
- hdjjhhvvhga 5y ago
  it said so as it's HTTP not HTTPS
  - dylan604 5y ago
    maybe so, maybe that's all it thought was scary. luckily for me, i had no intention of downloading the item as it was an accidental click while trying to click a different window. It just so happened to come from suspicious looking IP only address with a PDF about manga. So it just worked out in my favor. you can't deny that it is a very suspect link even if giving benefit of doubt that surely an HN user would never post a link to something untoward, right?
    - picture 5y ago
      What makes it more suspicious other than the lack of a domain name? Would you trusted more if it was http://righto.com/MangaGuidetoMicroprocessors.pdf http://righto.com/MangaGuidetoMicroprocessors.pdf instead? (using Ken's blog as an example) Or did you do an IP look up in your head that told you this IP is related to malicious activity? What if it has HTTPS instead? Would that make it less risky for you? (From my understanding of HTTPS, it wouldn't. Maybe make it harder for other people to see that you're viewing a pdf..)
      - dylan604 5y ago
        Basic self protection of the interent is don't click on suspicious links. PDFs are known vectors of malware. PDF only links as submissions to HN receive their own mod to the title to indicate that it is a PDF for multiple reasons. Using a term like manga is click baity as well, as it will help lure people in to clicking a link. A common ploy for people needing to use ploys. I was mainly upset that with all of the effort I go to in order to not click suspicious link, this is how it happened. It also just happens to be a supsicious looking link that for whatever reason(s), my browser decided it would not download it. For me, this worked out just fine as I had no intention of attempting to download it.
        picture 5y ago
        Videos also get modified by HN btw. I have firefox HTTP warning turned on as well, so I assume that's what you saw. I still don't understand what you found so sus about my link, as it's exactly relevant to the thread here. It's not uncommon to see links in HN threads that bypass paywalls for example. Ig there's no conclusion to be reached other than, be more careful next time? If you are really worried, you could sandbox your firefox with Qubes OS. EDIT Just noticed that Ken must've seen this thread.. @kens well played! You got me good :D
        dylan604 5y ago
        Why are you taking this so personally? If it were normal, I would be very hesitant to click a link that looked like yours. I've already stipulated that a bit of benefit of the doubt on another HN viewer would be less likely to post suspect links, but bots are a plenty. I've already listed my reasons, and I really don't think there was fault in any of the reasons for my personal "keeping safe on the intwebs". You may find that in your day to day life, you are much more cavalier about links you click. You do you, I'll do me. However, it's 2022 now, and to not be using HTTPS is pretty much just a whole level of not trying very hard. So much so, the browser warned against it.
        tarsinge 5y ago
    - hdjjhhvvhga 5y ago
      While PDFs can contain malware and for some reason people trust hosts with domain names more than bare IPs, the sole reason Firefox showed the warning was because you attempted to download a file via HTTP from a HTTPS page - it had nothing to do with the file type or bare IP. The reason for that is browsers already have some methods of differentiating between HTTP and HTTPS when displaying web pages, but not for downloads. So folks at Mozilla decided to implement a feature that warns the user in this specific situation. Personally I disabled this feature (block_download_insecure in about:config) but for the majority of the population it might be a good thing.
      - debugnik 5y ago
        Interestingly, Firefox for Android didn't complain about it.
- speed_spread 5y ago
  This is such a retarded new security feature of Firefox. Oh no! Something wants to be downloaded from plain HTTP! As if malicious actors could not figure out HTTPS... I assume it can be turned off in the config.
  - dylan604 5y ago
    you say retarded, at least in this particular instance, i say thank you. if the browser warns you it is http and not https yet allows you to download anyways, then no harm no foul. it's not any different to me than when a browser warns you something is hinky with a website's cert with a scary warning, yet allows you to view it anways.

dylan604 5y ago

my browser, FF, just said nope to that link. maybe a good thing as I didn't actually mean to click it.

hdjjhhvvhga 5y ago
it said so as it's HTTP not HTTPS
- dylan604 5y ago
  maybe so, maybe that's all it thought was scary. luckily for me, i had no intention of downloading the item as it was an accidental click while trying to click a different window. It just so happened to come from suspicious looking IP only address with a PDF about manga. So it just worked out in my favor. you can't deny that it is a very suspect link even if giving benefit of doubt that surely an HN user would never post a link to something untoward, right?
  - picture 5y ago
    What makes it more suspicious other than the lack of a domain name? Would you trusted more if it was http://righto.com/MangaGuidetoMicroprocessors.pdf http://righto.com/MangaGuidetoMicroprocessors.pdf instead? (using Ken's blog as an example) Or did you do an IP look up in your head that told you this IP is related to malicious activity? What if it has HTTPS instead? Would that make it less risky for you? (From my understanding of HTTPS, it wouldn't. Maybe make it harder for other people to see that you're viewing a pdf..)
    - dylan604 5y ago
      Basic self protection of the interent is don't click on suspicious links. PDFs are known vectors of malware. PDF only links as submissions to HN receive their own mod to the title to indicate that it is a PDF for multiple reasons. Using a term like manga is click baity as well, as it will help lure people in to clicking a link. A common ploy for people needing to use ploys. I was mainly upset that with all of the effort I go to in order to not click suspicious link, this is how it happened. It also just happens to be a supsicious looking link that for whatever reason(s), my browser decided it would not download it. For me, this worked out just fine as I had no intention of attempting to download it.
      - picture 5y ago
        Videos also get modified by HN btw. I have firefox HTTP warning turned on as well, so I assume that's what you saw. I still don't understand what you found so sus about my link, as it's exactly relevant to the thread here. It's not uncommon to see links in HN threads that bypass paywalls for example. Ig there's no conclusion to be reached other than, be more careful next time? If you are really worried, you could sandbox your firefox with Qubes OS. EDIT Just noticed that Ken must've seen this thread.. @kens well played! You got me good :D
        dylan604 5y ago
        Why are you taking this so personally? If it were normal, I would be very hesitant to click a link that looked like yours. I've already stipulated that a bit of benefit of the doubt on another HN viewer would be less likely to post suspect links, but bots are a plenty. I've already listed my reasons, and I really don't think there was fault in any of the reasons for my personal "keeping safe on the intwebs". You may find that in your day to day life, you are much more cavalier about links you click. You do you, I'll do me. However, it's 2022 now, and to not be using HTTPS is pretty much just a whole level of not trying very hard. So much so, the browser warned against it.
        tarsinge 5y ago
  - hdjjhhvvhga 5y ago
    While PDFs can contain malware and for some reason people trust hosts with domain names more than bare IPs, the sole reason Firefox showed the warning was because you attempted to download a file via HTTP from a HTTPS page - it had nothing to do with the file type or bare IP. The reason for that is browsers already have some methods of differentiating between HTTP and HTTPS when displaying web pages, but not for downloads. So folks at Mozilla decided to implement a feature that warns the user in this specific situation. Personally I disabled this feature (block_download_insecure in about:config) but for the majority of the population it might be a good thing.
    - debugnik 5y ago
      Interestingly, Firefox for Android didn't complain about it.
speed_spread 5y ago
This is such a retarded new security feature of Firefox. Oh no! Something wants to be downloaded from plain HTTP! As if malicious actors could not figure out HTTPS... I assume it can be turned off in the config.
- dylan604 5y ago
  you say retarded, at least in this particular instance, i say thank you. if the browser warns you it is http and not https yet allows you to download anyways, then no harm no foul. it's not any different to me than when a browser warns you something is hinky with a website's cert with a scary warning, yet allows you to view it anways.