has someone hacked my SSL connection? Look at these pictures

Technical support and discussion of Newsbin Version 6 series.

has someone hacked my SSL connection? Look at these pictures

Postby phredrik » Sun Dec 29, 2013 10:30 am

http://s26.postimg.org/o0zzyxkop/20131219_015655.jpg
http://s26.postimg.org/lky6l32m1/20131219_022942.jpg

How can this be?
Seems like someone is communicating on the SSL connection im using and they are popping up as critical error messages. Hmmm

Any explanation or fix?
Dont like this at all as you can imagine.

Thank you.
phredrik
n00b
n00b
 
Posts: 4
Joined: Sun Dec 29, 2013 10:20 am

Re: has someone hacked my SSL connection? Look at these pict

Postby Quade » Sun Dec 29, 2013 10:33 am

I've never seen it before. I think it sounds like someone is experimenting with using posts to send informational messages. You're downloading headers at the same time. My guess is that it's just coming off the server and that you can ignore it.

Your might edit the NZB with wordpad and see if this is embedded in the NZB Too.
User avatar
Quade
Eternal n00b
Eternal n00b
 
Posts: 44951
Joined: Sat May 19, 2001 12:41 am
Location: Virginia, US

Registered Newsbin User since: 10/24/97

Re: has someone hacked my SSL connection? Look at these pict

Postby phredrik » Sun Dec 29, 2013 10:39 am

To explain more. I have 3 pc's on my local network.

First one started updating windows, but it got stuck for hours. At first I just let it stay there, and turn on a different one and downloaded headers as you can see.

When I then turned on the laptop, the second I turned it one. The first two lines popped up.
I then turned off the laptop. And about an hour or so later, I tried turning it on again.

And then the thank you message came up. Wtf!

Thats when I ran and shut down the windows update, as I think that one was a fake.

hmm.

If you havent seen it before doesnt make me feel better. Image link not allowed for unregistered users
phredrik
n00b
n00b
 
Posts: 4
Joined: Sun Dec 29, 2013 10:20 am

Re: has someone hacked my SSL connection? Look at these pict

Postby Quade » Sun Dec 29, 2013 10:46 am

Look at the format of the messages. If it was some sort of hijack, I doubt it would have the posting groups headers on it. On the laptop, exit Newsbin then delete the "Downloads.db3" which will wipe the download, failed and wish lists. Then start Newsbin and see if this goes away. I'm going to guess you have some odd posts queued for download and when Newsbin starts it retries the download. That's why you see the message when you start Newsbin.
User avatar
Quade
Eternal n00b
Eternal n00b
 
Posts: 44951
Joined: Sat May 19, 2001 12:41 am
Location: Virginia, US

Registered Newsbin User since: 10/24/97

Re: has someone hacked my SSL connection? Look at these pict

Postby phredrik » Sun Dec 29, 2013 10:55 am

I didnt download any nzb, just the headers. All headers at once from teevee. From ssl-us.astraweb.com because ssl-eu didnt want to connect.

And newsbin was running only 1 computer, on the second desktop first and fresh install on that machine.

Im guessing what they were communicating got mixed in the download information thats why the critical error is so weird.

After this, I changed router, and configured it wifi off and mac filtering etc. And still a russian IP came on the router blocking me out of my own router. And windows configuring IPv6 and whatnot so have to turn that off too. Can post that too of course.
Just trying to understand whats going on.

Picture from the log tab:
http://postimg.org/image/nzunj988l/
phredrik
n00b
n00b
 
Posts: 4
Joined: Sun Dec 29, 2013 10:20 am

Re: has someone hacked my SSL connection? Look at these pict

Postby Quade » Sun Dec 29, 2013 11:26 am

Yeah, that's from your header download. I'd just ignore it. Newsbin is saying it can't save those posts to the header database.
User avatar
Quade
Eternal n00b
Eternal n00b
 
Posts: 44951
Joined: Sat May 19, 2001 12:41 am
Location: Virginia, US

Registered Newsbin User since: 10/24/97

Re: has someone hacked my SSL connection? Look at these pict

Postby phredrik » Wed Jan 01, 2014 2:24 pm

Here is the reply from astraweb regarding this issue:

"It might be a password-ed articles. We are not the one setting the password on the articles. You might need to contact the poster for more information. Thank you."

OMG!
phredrik
n00b
n00b
 
Posts: 4
Joined: Sun Dec 29, 2013 10:20 am

Re: has someone hacked my SSL connection? Look at these pict

Postby Quade » Wed Jan 01, 2014 2:33 pm

My answer is the correct answer.

If you used a reader like Xnews to look at that group, you'd see these posts listed there. Newsbin doesn't like them so it didn't store them.
User avatar
Quade
Eternal n00b
Eternal n00b
 
Posts: 44951
Joined: Sat May 19, 2001 12:41 am
Location: Virginia, US

Registered Newsbin User since: 10/24/97


Return to V6 Technical Support

Who is online

Users browsing this forum: Bing [Bot] and 2 guests