Mersenne Forum vs. Malwarebytes
 

In the last few days, Malwarebytes Anti-malware has intermittently decided that mersenneforum.org is a malicious site, or has a suspicious IP. This has not happened on other sites in the same time frame. Restarting MBA makes the complaint go away for some hours. MBA scans turn up nothing. Norton Security doesn't see any problems. This is happening in Firefox 53.0.3. I have not tried another browser when the problem occurs, as yet. :confused2:
EDIT: It came back in minutes instead of hours, just now.

So then delete malwarebytes. It seems you can't trust it.

Does it do the same to other non-SSL sites?

Does upgrading Firefox (I'm on 57.0.2 64bit) remove the issue?

Could it be that Malwarebytes [U]thinks [/U]vBulletin v3.8.11 is too old and therefore flags it?
I'm [U]not [/U]saying the forum should update to a new vBulletin, I quite like the current (clean) layout.

Those are good questions and suggestions. I dislike updating Firefox unless I have to. New versions often muck up my plugins and add-ons, and "helpfully" update the GUI from my carefully preserved "Classic" look. I suppose it is worth a try at this point, anyway.

I don't think I've seen this block anywhere else. I suspect that Malwarebytes changed some definition in an update. I'll see about updating FF.

Of course, some people will say that if I was still using FF 3.0.1, I would not have these problems. :razz:

Does Malwarebytes give users a per-site whitelisting option along the lines of FF's 'confirm security exception' pop-up?

[QUOTE=kladner;474624]Those are good questions and suggestions. I dislike updating Firefox unless I have to. New versions often muck up my plugins and add-ons, and "helpfully" update the GUI from my carefully preserved "Classic" look. I suppose it is worth a try at this point, anyway.

I don't think I've seen this block anywhere else. I suspect that Malwarebytes changed some definition in an update. I'll see about updating FF.[/QUOTE]No, don't update other things just to please malwarebytes. That is backwards. "Update" malwarebytes with the delete button and use something else, or nothing at all.[QUOTE=kladner;474624]Of course, some people will say that if I was still using FF 3.0.1, I would not have these problems. :razz:[/QUOTE]:tu:

There does not seem to be any issues with this site at the moment::smile:

[url]https://www.virustotal.com/#/url/b01a2af44f87d31c48931912c38109ded619758cd31f08e9593b26826f3a5c5a/detection[/url]

[QUOTE=kladner;474624]Of course, some people will say that if I was still using FF 3.0.1, I would not have these problems. :razz:[/QUOTE]

Most browsers are going to start warning about any site that isn't over SSL (read: HTTPS) shortly.

Of course, the malware people are already there.

[QUOTE=chalsall;474639]Most browsers are going to start warning about any site that isn't over [b]SSL[/b] (read: HTTPS) shortly.[/QUOTE]I think you mean [b]TLS[/b]? And not only that many sites now [i]require[/i] at least TLS 1.2.

[QUOTE=retina;474642]I think you mean [b]TLS[/b]? And not only that many sites now [i]require[/i] at least TLS 1.2.[/QUOTE]

I stand corrected.

mersenneforum might want to get it's act together sometime soon.

[QUOTE=kladner;474624]...
I dislike updating Firefox unless I have to. New versions often muck up my plugins and add-ons, and "helpfully" update the GUI from my carefully preserved "Classic" look. I suppose it is worth a try at this point, anyway.
...[/QUOTE]You might try the [url=https://www.mozilla.org/en-US/firefox/organizations/]ESR (extended Support Release) of Firefox[/url], but even that one will "upgrade" in May 2018 to version 60, at that point you will have to use themes to try to get a reasonable interface, but will still have telemetry, data collection, sponsored links, etc.
If you like the classic interface there are forks available. I am currently using PaleMoon which is based on Firefox 27 but receives security updates. You might try Waterfox that will continue to support the old plug-ins like "Classic Theme Restorer".

Jacob

(It is a pity that so many software developers want to impose their view on how we should work and what layout our screen should have. Very often the customisation options still exist in the code but are hidden because "they" know what we should like.)