CPU-Z Validation Signature Pics Temporarily Blocked

[btarunr]

For reasons unknown, Google Chrome is flagging the "valid.canard*c.com" URL as a malicious site, and is blocking access to TechPowerUp Forums pages containing posts in which a CPU-Z signature picture is present.



We have removed the CPU-Z validation sig pic from all users' custom signature fields. If and when CanardPC clears things up with Google, we'll consider restoring access to CPU-Z sig pics.

[qubit]

Hey, nothing like a false positive to instill confidence in google's security.

[Altered]

I presume something changed somewhere. Google Chrome is taking the "safe" route which we all know will always tick someone off. Cant please everyone everywhere all the time.

[rickss69]

It's on many forums now. PureOC claims to know who is responsible, but who knows. It also isnt just the cpu-z valid links either.

[TheMailMan78]

I'm sure its some "hero hacker" butt hurt W1zzard didn't give him the source code or something and wants social justice......or some crap he has no comprehension of. OR some Chinese scum bag trying to "infiltrate" western computers because they are to afraid to stand up to their own government.

F#$king script kiddie tools need a bullet to the head or as my father would say "Them boys need a 13 cent surprise."

[najiro]

ahh.. so this is perhaps the talk to the day.
yep this is happening to other tech forums as well.
some speculate it's the adblocks that's doing it

[btarunr]

It's no hacker. It's just that CanardPC got flagged, and any content from that site (CPU-Z validation sigpics) are considered by Google Chrome as malware. So any site displaying those images gets blocked.

As some of you may have observed, you can't have just any external sig pic. Because we wrote a plugin that filters out external images in the sigpic area. We removed canardpc from a whitelist, went to the user tables, searched for "canardpc" in the signature fields, and removed them all.

No evil conspiracy there. I'm sure it's a false-flag by Google, and they'll fix it. Unlike microsoft, which lost out on the big internet industry big time, Google has thousands of people who listen to siteops for appeals and false-flag claims.

[W1zzard]

Originally Posted by CPU-Z Validation Makers

As you should have seen, we had a big problem with Google Safe Browsing. They have blacklisted our entire domain and all sub-domains for ~12 hours two days ago. We worked with them really quickly to resolve the issue, but many delays were inevitable to spread the corrected whitelist “rules” into all Google servers everywhere. No malware were distributed from valid.canardpc.com at any time. The main issue was an XSS vulnerability on a server hosted by our ads provider, but because of a DNS delegation we set (xxxx.canardpc.com pointed to one of the hijacked server), we were blacklisted too. That’s a bit harsh but that’s Google’s rules. Dura Lex, Sed Lex.

This was a big problem for us, but also for you because of the CPU-Z signature image. I personally think Chrome is really paranoid about what is “safe” and what is not, but I want to apologize for the troubles on your forums. We have now changed our internal server architecture to avoid those “cross-blacklisting” in the future. We have also set a paranoid monitoring script to report every (well, almost) possible issues in our servers in the future.

Again, sorry for the troubles. Feel free to contact me if you need any information or need anything related to the CPU-Z validator in the future.

We will re-enable the sigpics next week

[qubit]

Is this all ok now?