Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News Editorials & Other Articles General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

EarlG

(22,820 posts)
11. The folks replying in this thread have made a decent guess, but I'm not sure it's correct
Sun Dec 22, 2024, 12:23 PM
Dec 2024

When you're browsing DU, the information that you're viewing is not all hosted on DU. When members link to media that is hosted on other sites -- for example, YouTube videos, tweets, and images --- that media is not lifted from the host site and then re-hosted on DU's servers. It remains on the host site, and DU's software simply displays it as is.

Therefore, when you're browsing DU, each page is really a mix of content from different sources. The vast majority of that content is hosted on DU's servers (eg. the entire page layout, user-written text, etc.), but some of it isn't (eg. images that are linked to from elsewhere).

Generally speaking, viewing mixed content is considered "safe" (although that probably depends on your view of network security), and modern browsers will alert the user if the browser thinks that any content which it is about to load is "dangerous."

A lot of the time -- and especially on DU, because we only allow a few types of outside content to be linked to -- this happens because the page contains an image with an http:// prefix instead of an https:// prefix. The former (http) is the original standard protocol for Internet data transfer, whereas the latter (https) is a more modern, secure version which encrypts the data that is exchanged between a website and a browser.

These days, the vast, vast majority of websites use the https protocol, but some still use the old version, and it also possible to retrieve an image from an https site by using the http prefix. I have seen situations where people's browsers throw errors because they load a DU page which contains an http image prefix.

Since you suspected sheshe2's post as being the possible culprit, I checked those and and the images in her sigline all use the https protocol. I did find one image on the page that does not -- the image in lindysalsagal sig line has an http prefix. But I'm not sure that's the issue in this particular case.

This may be the answer:

The error message in your OP is an "outbound" error, and the website that it is blocking is located at 104.207.254.75. That is NOT a DU IP address. Instead it belongs to "Liquid Web L.L.C" which provides VPN services.

Are you using a VPN? If so, that is probably the issue. When you use a VPN, you connect to your target server (in this case, DU) by connecting to another server first, which then connects to the target server. This obscures your personal IP address from the target server, because the target server can only record the IP address of the VPN server, not your personal IP address. People do this legitimately, for privacy reasons.

In this case, it appears that MalwareBytes thinks that the VPN server -- the one you are connecting to before you connect to DU -- is compromised.

If you are using a VPN, my advice would be to either try disabling it and visiting DU to see if the error persists, or force your VPN program to connect to a different server by changing the location.

If you are not using a VPN, we will have to continue the conversation...

Recommendations

3 members have recommended this reply (displayed in chronological order):

I posted that OP and there are a number of replies. There's a Ron Filipkowski tweet in my OP and highplainsdem Dec 2024 #1
That doesn't tell me why I'm getting this alert from Malwarebytes. Liberal In Texas Dec 2024 #3
Do you remember if the other times were my threads? Here are a few more to check: highplainsdem Dec 2024 #5
Nothing comes up on those. Liberal In Texas Dec 2024 #8
I get this message also and it is always in a thread where sheshe2 brer cat Dec 2024 #7
And Sheshe2 replied on that most recent post. Liberal In Texas Dec 2024 #9
I'm pretty confident that is right. We are both on MIRT this term, brer cat Dec 2024 #10
And it has nearly 600 views, over a dozen replies and more than 20 recs from other DUers. highplainsdem Dec 2024 #2
Starting to wonder if some web security companies just want to limit our access to certain types of information. Attilatheblond Dec 2024 #4
In this case, it is something much more benign. eggplant Dec 2024 #29
I get that frequently. There is always a post by sheshe2 brer cat Dec 2024 #6
The folks replying in this thread have made a decent guess, but I'm not sure it's correct EarlG Dec 2024 #11
Thank you for looking into this. Liberal In Texas Dec 2024 #12
Is it the exact same message? EarlG Dec 2024 #13
MalwareBytes won't let me copy and paste...so it took me awhile... Liberal In Texas Dec 2024 #14
I'm somewhat baffled EarlG Dec 2024 #15
I was on the one in the OP. Liberal In Texas Dec 2024 #19
Gloriafeldt.com is same domain as the pic from sheshe2's sig line sl8 Dec 2024 #16
I just got it again when I came back to THIS post. Liberal In Texas Dec 2024 #17
I think that's the answer then EarlG Dec 2024 #22
You are correct, this is what I get with gloriafeldt.com... Liberal In Texas Dec 2024 #25
I'll delete the sig pic from my post. sl8 Dec 2024 #24
I stopped seeing it on this post. Liberal In Texas Dec 2024 #26
OK, I tried opening the sig pic in a new tab... Liberal In Texas Dec 2024 #18
Interesting. sl8 Dec 2024 #21
Are you sure that ip is only associated with a VPN? sl8 Dec 2024 #20
Yeah I think you're right EarlG Dec 2024 #23
Thanks folks for all the input on this. Liberal In Texas Dec 2024 #27
Some further research eggplant Dec 2024 #28
Latest Discussions»Help & Search»DU Community Help»Malwarebytres does not li...»Reply #11