Here is the error message I get from Norton when I try to access the site now:
Dangerous Web Page Blocked You attempted to access: https://storiesonline.net/home.php This is a known dangerous web page. It is highly recommended that you do NOT visit this page.
You need to fix this with Symantec.
You need to fix this with Symantec.
I submitted a request for re-evaluation of the page.
It's a false positive of course. Their system is in error.
Hopefully it can be resolved quickly.
I'd strongly suggest turning off Norton if you have it checking the content of encrypted sites. In that scenario, the Norton software decrypts and reads all of your traffic, including for your bank. Not good.
I'd strongly suggest turning off Norton if you have it checking the content of encrypted sites. In that scenario, the Norton software decrypts and reads all of your traffic, including for your bank. Not good.
If you are up-to-date this is not possible. This was a bug in the Norton app which has been solved. The real danger is that software like Norton can't verify content if it's encrypted. Malware 'companies' simply use https traffic to make content checks impossible. On the other hand you don't want them to being able to decrypt. If they can do it anyone else could do it which would defeat the whole purpose of encryption.
If you are up-to-date this is not possible. This was a bug in the Norton app which has been solved. The real danger is that software like Norton can't verify content if it's encrypted. Malware 'companies' simply use https traffic to make content checks impossible. On the other hand you don't want them to being able to decrypt. If they can do it anyone else could do it which would defeat the whole purpose of encryption.
TLS interception is not due to a bug, but by design. If a vendor's product tells you it scans downloads, etc, then it more then likely installs an SSL certificate and actually decrypts the data along the way. And that's dangerous:
https://www.us-cert.gov/ncas/alerts/TA17-075A
And this:
https://tlseminar.github.io/tls-interception/
And this:
https://www.securitynewspaper.com/2017/03/18/us-cert-security-products-perform-https-interception-weaken-security/
Norton isn't listed, so they don't do it, and that was an error on my part. But just because you see the lock in your browser doesn't mean the data isn't being decrypted by your AV software (or your company firewall/proxy equipment).
Correct, but that would mean your anti virus software acts as a MITM which you definitely don't want. That type of interception is a great danger, especially now people start trusting the green locks in their browser.
I was referring to the bug that caused the false positive. After further reading that was a year ago on the mobile app (Norton Mobile false warning, just one of multiple reports) so it's probably not the same as what the OP is talking about.
I don't use Norton or any other anti-virus or anti-malware software. Of course I don't use windows either so I dare to say I don't need it ;) The biggest vulnerability is the person behind the keyboard.
The biggest vulnerability is the person behind the keyboard.
True no matter what the OS happens to be! I'm on a Mac, so I haven't run AV in decades. :-)
I'm on a Mac, so I haven't run AV in decades
I'm on a Mac and Apple Tech Support suggested I run Malwarebytes. Not that it's ever found anything.
I'm on a Mac and Apple Tech Support suggested I run Malwarebytes. Not that it's ever found anything.
I do have that and run it on occasion, but no real-time checks. uBlock origin in my browser + firewall provide sufficient protection (not to mention a spam filter that has a less than 0.1% false positive/false negative rate).
Mac's are not immune to Malware. Not found trouble on my PC either, but keep the checks up.
Glad the Norton alarm has been silenced.
the error message I get from Norton
Actually, right there's your problem. Back when I worked as Geek Squad, when we were paid to set up a customer's computer, the first thing we'd do was delete any trace of everything by Norton because over time, it'd take over your whole computer.
They may have fixed it since then, but it was almost the original bloatware.
