Home ยป Forum ยป Bug Report and Feature Requests

Forum: Bug Report and Feature Requests

Norton Reports website as Dangerous

MyTWolf58 ๐Ÿšซ

Here is the error message I get from Norton when I try to access the site now:
Dangerous Web Page Blocked You attempted to access: https://storiesonline.net/home.php This is a known dangerous web page. It is highly recommended that you do NOT visit this page.

You need to fix this with Symantec.

Lazeez Jiddan (Webmaster)

@MyTWolf58

You need to fix this with Symantec.

I submitted a request for re-evaluation of the page.

It's a false positive of course. Their system is in error.

Hopefully it can be resolved quickly.

zebra69347 ๐Ÿšซ

I had same problem with Norton report! Now using different browser and computer with normal access.

Michael Loucks ๐Ÿšซ

I'd strongly suggest turning off Norton if you have it checking the content of encrypted sites. In that scenario, the Norton software decrypts and reads all of your traffic, including for your bank. Not good.

Replies:   Keet
Keet ๐Ÿšซ

@Michael Loucks

I'd strongly suggest turning off Norton if you have it checking the content of encrypted sites. In that scenario, the Norton software decrypts and reads all of your traffic, including for your bank. Not good.

If you are up-to-date this is not possible. This was a bug in the Norton app which has been solved. The real danger is that software like Norton can't verify content if it's encrypted. Malware 'companies' simply use https traffic to make content checks impossible. On the other hand you don't want them to being able to decrypt. If they can do it anyone else could do it which would defeat the whole purpose of encryption.

Replies:   Michael Loucks
Michael Loucks ๐Ÿšซ

@Keet

If you are up-to-date this is not possible. This was a bug in the Norton app which has been solved. The real danger is that software like Norton can't verify content if it's encrypted. Malware 'companies' simply use https traffic to make content checks impossible. On the other hand you don't want them to being able to decrypt. If they can do it anyone else could do it which would defeat the whole purpose of encryption.

TLS interception is not due to a bug, but by design. If a vendor's product tells you it scans downloads, etc, then it more then likely installs an SSL certificate and actually decrypts the data along the way. And that's dangerous:

https://www.us-cert.gov/ncas/alerts/TA17-075A

And this:

https://tlseminar.github.io/tls-interception/

And this:

https://www.securitynewspaper.com/2017/03/18/us-cert-security-products-perform-https-interception-weaken-security/

Norton isn't listed, so they don't do it, and that was an error on my part. But just because you see the lock in your browser doesn't mean the data isn't being decrypted by your AV software (or your company firewall/proxy equipment).

Replies:   Keet
Keet ๐Ÿšซ

@Michael Loucks

Correct, but that would mean your anti virus software acts as a MITM which you definitely don't want. That type of interception is a great danger, especially now people start trusting the green locks in their browser.
I was referring to the bug that caused the false positive. After further reading that was a year ago on the mobile app (Norton Mobile false warning, just one of multiple reports) so it's probably not the same as what the OP is talking about.
I don't use Norton or any other anti-virus or anti-malware software. Of course I don't use windows either so I dare to say I don't need it ;) The biggest vulnerability is the person behind the keyboard.

Replies:   Michael Loucks
Michael Loucks ๐Ÿšซ

@Keet

The biggest vulnerability is the person behind the keyboard.

True no matter what the OS happens to be! I'm on a Mac, so I haven't run AV in decades. :-)

Replies:   Switch Blayde
Switch Blayde ๐Ÿšซ
Updated:

@Michael Loucks

I'm on a Mac, so I haven't run AV in decades

I'm on a Mac and Apple Tech Support suggested I run Malwarebytes. Not that it's ever found anything.

Replies:   Michael Loucks
Michael Loucks ๐Ÿšซ

@Switch Blayde

I'm on a Mac and Apple Tech Support suggested I run Malwarebytes. Not that it's ever found anything.

I do have that and run it on occasion, but no real-time checks. uBlock origin in my browser + firewall provide sufficient protection (not to mention a spam filter that has a less than 0.1% false positive/false negative rate).

zebra69347 ๐Ÿšซ

Mac's are not immune to Malware. Not found trouble on my PC either, but keep the checks up.

Glad the Norton alarm has been silenced.

StarFleet Carl ๐Ÿšซ

@MyTWolf58

the error message I get from Norton

Actually, right there's your problem. Back when I worked as Geek Squad, when we were paid to set up a customer's computer, the first thing we'd do was delete any trace of everything by Norton because over time, it'd take over your whole computer.

They may have fixed it since then, but it was almost the original bloatware.

Back to Top

 

WARNING! ADULT CONTENT...

Storiesonline is for adult entertainment only. By accessing this site you declare that you are of legal age and that you agree with our Terms of Service and Privacy Policy.


Log In