Server Error Reports

[EEVblog]

And nope, failed again, US VPN.
Tried to post but got capture checked every time and lost the post every time.
Had to disable to VPN to post it, and this.

This should be fixed now, there was a bug in the way the cookie token was being rotated for security. I was rotating it on a negative cache hit, which can occur when a lot of assets on the page try to load at once essentially corrupting the token value and shoving the browser onto one that had not been validated.
I have fixed this by instead encoding the expire time into the cookie token and hmac signing it to prevent tampering. This way the token wont be rotated until it's due to rotate, rather then if there is a cache miss.

Seems fixed now! 
Thanks.

[gnif]

If anyone is curious as to the efficacy of CrowdSec on this forum:

[tautech]

Not Secure flag for EEVblog.

Common Name (CN)   eevblog.com
Organization (O)   <Not Part Of Certificate>
Organizational Unit (OU)   <Not Part Of Certificate>
Common Name (CN)   R12
Organization (O)   Let's Encrypt
Organizational Unit (OU)   <Not Part Of Certificate>
Issued On   Wednesday, December 24, 2025 at 12:35:56 AM
Expires On   Tuesday, March 24, 2026 at 12:35:55 AM
Certificate   aa9a86963cbde11d07327055567326a60e730b1f44f3d15d1bae61587b46d5fe
Public Key   338b943edd684488656a21bfc6943a9feffdc1031ad872003c6ac18a4ca046af

[TUMEMBER]

Chrome is screaming about "hacking and lack of security", blocking access, your "certificate" cookies have expired.
Edyta
I deleted the photo (screenshot) because it got my IP address mixed up. Don't be tempted.

[Psi]

Yep

Issued On   Tuesday, December 23, 2025 at 9:32:41 PM
Expires On   Monday, March 23, 2026 at 9:32:40 PM

Someone forgot to pay the internet power bill

[2N3055]

Funny enough, I get it sometimes and sometimes not.

[TUMEMBER]

Funny enough, I get it sometimes and sometimes not.

It's becoming intrusive, it's impossible to use the site, you have to click through three layers of nasty blockers - I agree!

[Ranayna]

In about 1 1/2 hours, unless the certs are renewd by then, you will have that always
The EEVBlog website is hosted on two mirrored servers. On one, the certificate has already expired, on the other it will expire soon.

Somehow the Let's Encrypt bot seems to be broken for the EEVBlog. These certs are shortlived, and no one should renew them manually and Let's Encrypt usually has a quite robust automatic way of doing that.

[paulca]

Certificate expiry is the classic bad Monday morning.  The number of times I have been there ... when we really shouldn't be.... but are.  I do not envy you.

Hopefully for your sake there all have nice need LetsEncryt bots which are just having a bad mood.  In my last case in home lab, there were 20 components out of which only 5 had LetsEncrypt auto renew.  The other 15 took me 2 hours to fix.

The £450+ for a real long lived cert was looking more and more appealing.

[Kean]

Long lived certificates are going away.  It is currently 200 days max as of a week or so ago, and will be reduced over the next few years.

https://www.digicert.com/blog/tls-certificate-lifetimes-will-officially-reduce-to-47-days

Let's Encrypt no longer send renewal reminders, so if using them it is important to set up an external monitoring & reminder service like Red Sift.

[gnif]

Sorry about that everyone, the issue has been fixed.

We do have monitoring for this but when I added the anti-bot measures it had broken the service that checks for it, as it was being served up a captcha page. I have fixed the issue (which was also caused by the anti-bot captcha), and updated the method we use to monitor for this.

[AVGresponding]

I'm currently getting a database error when I try to start a new topic in Buy/Sell/Wanted


EDIT: Still not working for me

EDIT 2: Now tried; clear browser cache, browser refresh, disable adblocker, different broswers (Firefox, Chrome), still getting the same error.

EDIT 3: Added screenie of error message for completeness

[gnif]

I am sorry but I wont be able to look at this for a day or so. I have been in hospital recovering from a spider bite.

[TUMEMBER]

I am sorry but I wont be able to look at this for a day or so. I have been in hospital recovering from a spider bite.

Get well soon, forget about the buyers and beat the next "spiderman" with a slipper before he even walks through the door - no mercy for the biting critters.

[AVGresponding]

I am sorry but I wont be able to look at this for a day or so. I have been in hospital recovering from a spider bite.

Get well soon lad.

I shall pass your experience on to a work colleague who is planning to emigrate to Australia later this year...



EDIT: Just to add as much information as possible, though I still can't start a new topic in Buy/Sell/Wanted, I can start new topics elsewhere; I have started one in Supporters Lounge asking if anyone else has had this problem.

[gnif]

I am finally back on board and looking into this.

For anyone interested, I was bitten by the Australian Red Back spider several times on a toe (For international folk, it's in the Black Widow family but unlike the international members, usually gives a full dosing of venom when it bites). I have attached a photo of the little bugger here. I got a good dosage, coupled with the fact that I seem to be lucky enough to be in the minority that are severely affected by the venom.

What made matters worse was the local doctors had no experience with a bite like this, or the severe reaction I had, so the entire cook book of pain killers was thrown at me. In order I had Paracetamol, Ibuprofen and then Endone (multiple times) which didn't touch it. I was then canulated and given a strong IV morphine shot, which helped, but only for about 20 minutes. Magnesium Sulfate was also used after attaching me to an EKG monitor. I was then given IV Fentanyl which helped, but for an even shorter period. Finally I was fully admitted and put on a Ketamine pump along with a Oxycodone PCA (Patient-Controlled Analgesia) pump. Over the next 4 hours the Ketamine dosage was dialed in and I was finally able to get some rest after being up at that point for 36 hours. I remained in this state for 4 days, before being sent home with more painkillers and told to come back if it becomes unbearable again.

It took another 4 days to get back to some normalcy going through withdrawals after being on such a high dosage for so many days. At this point I am still a bit sore, but nothing worse then had I stubbed my toe.

I highly recommend if you come to Australia, you avoid being bitten by one of these buggers. It likely wont kill you, but you will wish you were dead.

[AVGresponding]

Blimey, I think I'd rather be savaged by a drop-bear, that sounds horrendous.

Disappointing that the medics took so long to get it right, as well.

[TUMEMBER]

I am finally back on board and looking into this.



What made matters worse was the local doctors had no experience with a bite like this, or the severe reaction I had, so the entire cook book of pain killers was thrown at me. In order I had Paracetamol, Ibuprofen and then Endone (multiple times) which didn't touch it. I was then canulated and given a strong IV morphine shot, which helped, but only for about 20 minutes. Magnesium Sulfate was also used after attaching me to an EKG monitor. I was then given IV Fentanyl which helped,
It took another 4 days to get back to some normalcy going through withdrawals after being on such a high dosage for so many days. At this point I am still a bit sore, but nothing worse then had I stubbed my toe.

I highly recommend if you come to Australia, you avoid being bitten by one of these buggers. It likely wont kill you, but you will wish you were dead.

I don't have a very high opinion of "Polish medicine" (two inguinal hernia surgeries, one "complicated"), but the basic reaction in your country doesn't inspire optimism either. If a cobra bit you, would they try to cheat with paracetamol for 48 hours? (Because it's cheaper and simpler). Then, as I see, they went into "junkie mode": morphine and phenetanyl—at least you feel less pain, but the "withdrawal" isn't very pleasant. Ketonal tablets also "curb the sickness," especially high doses for two weeks. So, after such a recommendation to "visit the kangaroos," I'm not going to do that.
British-style medicine—paracetamol for everything.
Always carry your slipper with you, beat that bastard. Two days ago, I blissfully killed a hornet that came to me for a "courtesy visit." I have no remorse.

[tszaboo]

I am finally back on board and looking into this.

Good to hear. Get well soon.
The same seems to happen here:

EEVblog® Electronics Community Forum »Products »Thermal Imaging

Database Error
Please try again. If you come back to this error screen, report the error to an administrator.

I highly recommend if you come to Australia, you avoid being bitten by one of these buggers. It likely wont kill you, but you will wish you were dead.

The only way I'm going to Australia is in one of these things, apparently everything is trying to kill you there:

Take care.

[tszaboo]

Update: I was able to start a new thread from another PC.
Something with the cookies maybe?
mod: No it's not that. I edited the text I wanted to post, and it worked. So it's related to some characters, maybe EUR sign or something like that.

[AVGresponding]

That's curious; I cleared cache and refreshed browser, but neglected cookies. I'll have another look when I get home from work.



EDIT: Yeah I tried clearing cookies, no good. I just checked and I have £ and @ symbols, maybe that's it   

EDIT2:  It was one of those!

[gnif]

Aha, thanks for nailing that. Is it in the subject line or the body. I have been trying to reproduce and have not been able.

[AVGresponding]

Aha, thanks for nailing that. Is it in the subject line or the body. I have been trying to reproduce and have not been able.

It was in the text body, for me

[golden_labels]

I’m not sure what characters are exotic. It’s no longer the 80s, so we could say anything non-ASCII (or EBCDIC ) is “uncommon.” Certainly I didn’t use any codepoint I didn’t use for years on this forum.

Testing with the actual post body I tried to send: [FAIL]
Testing with some mentioned codepoints above U+007E (redacted): [FAIL]
Testing with the first 3 out of 5 (€ £ @): [PASS]
Testing with the last 2 out of 5 (≥ …): [PASS]

… ok, that leaves me confused.

edit: I conducted some tests in another place (to not spam here). Something insane is going on. I can send the characters I did send above, but then I can’t, then I can send them again.

[Ranayna]

edit: I conducted some tests in another place (to not spam here). Something insane is going on. I can send the characters I did send above, but then I can’t, then I can send them again.

Sounds a bit as if the two EEVBlog hosts do not have identical configuration?