2019-01-06 Security Certificate Expired

merci et heureusement j'ai vue et lue votre message ce qui m'a permis de pouvoir me connecter
! je venais justement de vous écrire pour vous signaler le problème ! en tout cas ça fonctionne ! merci encore IMA ! belle soirée et bon courage

I had no problems today. I just noticed very few colleagues were online...

same for me !

Worked for me! It was annoying to get past all the safety barriers Safari put in my path, only to get a spinning circle.

I changed the date, logged in, and changed back. All good for now.

There was so much going for Ipernity even just one day ago and then I wake up this morning unable to log in which is like spilling a cup of coffee all over your morning paper before it has been read. It is disheartening for both the ima team and us the user. It is even worse for some of us who are not tech savvy to read windows messages that Ipernity is not safe and sends you packing back to the start screen. I then log into Facebook only to see a message telling me that I can change the date of my computer to an earlier time and then Log in! That didn't work either !!.
So how come I can write this message (22:54 GMT) 6th January? I don't know!! I just typed Ipernity.com in my search engine and found myself logged in to my home page on ipernity.
Next! once fixed how can we prevent this issue from occurring again and how much will it cost? Is the cost reasonably achievable via the donate button or is it to expensive to contemplate at this time? We need to get back to being the best in the business and I would want to know if this is at all possible in a short space of time.

Thanks for the Info....now I know why my Anti-Virus warning keeps appearing and telling me the site is "not secure" whenever I try to log in :-)

I never log out. Why should I? That way Ipernity is always available. But I cannot reach my profile or my account settings.

The same for me !!

Idem...

Damn! I do not dare to touch the system date settings on my computer at work. But later today I will check how it goes on my laptop.

Not to mention how to do the workaround on Android phone either...

Hier avec mon téléphone Androïd , j' ai pu après plusieurs tentatives , poster des tags sur une image envoyée de mon PC par mail ..(?!)
J'ai pu aussi avec l'Android , ce qui est étonnant, changer mon code secret sans avoir accès à mes images ...
Donc je ne touche pas à la date du PC ; j'écris ce commentaire du téléphone et j'attends la résolution du problème .

Hier également , j'ai pu demander des renseignements , sans connection avec "aide et contact" et recevoir une réponse sur ma messagerie ; l'information pour tous à été plus tardive sur la colonne d'ima .
:)

Yesterday I manage to do the suggested date change after all, both on my Ubuntu Linux and on my Android phone. The work around is good for one session only. Next day, today, I had to do the trick again.

I'm afraid so. But we really have to wait and see that Christophe Ruelle can do it. After all, he knows his software best. If not him, then who?

...habe auf meinem Laptop, trotz des Hinweises, dass die Seite unsicher sei, zugestimmt, und schon war das Problem gelöst. Danke für die Info...und Dank an Gerrit Fischer...

Thank you for the tip, I had been having problems.

John.

Internal message from Christophe Ruelle to ima at 10h20 CET: "The certificat validation procedure is now running. It should be ok before noon".

moi j'ai fait du forcing sans rien corriger et cela à fonctionner,, merci

Important Alert Subscription page is marked UNSECURE (https://www.test.ipernity.com/club/subscribe) SHOULD READ HTTPS TO SECURE THIS PAGE.


For many reasons I will not change my computer 's date and times settings.

Tipp mit dem geänderten Datum (4. Januar) klappt ! Danke !

Wir werden uns das ganze Verschlüsselungsthema nochmal vorknöpfen, sobald wir genügend Geld angesammelt haben. Leider sind Januar/Februar jedoch "einkommenschwache" Monate, wo ipernity von den Reserven lebt. Aber danach sollte wieder was möglich sein.

mit geändertem Datum hat es wieder geklappt, anschließend habe ich das Datum wieder aktualisiert, allerdings darf ich mich jetzt nicht mehr abmelden oder muss erneut mit dem Datum spielen ...
obige neueste Nachricht mit dem Datums-Tipp habe ich zufällig nicht angemeldet auf der Startseite erfahren

Zum Glück klappt das mit den Nachrichten ganz gut! Und zum Glück ist nicht das ganze ipernity verschlüsselt, sonst hätten wir jetzt ein richtig dickes Problem. Denn selbst Christophe R. hat es wohl nicht einfach. Eigentlich sollte alles längst wieder normal laufen.

You have a huge problem As I wrote earlier the most important aspect of how ipernity operates is subscription payments on line. And as I wrote earlier the Site in this area is unsecure.
Important Alert Subscription page is marked UNSECURE (https://www.test.ipernity.com/club/subscribe) SHOULD READ HTTPS TO SECURE THIS PAGE.

For many reasons I will not change my computer 's date and times settings.

Dear Tess: Not "You have a huge problem...", please!

We are a community since one and a half year! We have a problem all together because there is no longer an owner, but we users are the owners ourselves. And please excuse me, this isn't really supposed to be a hair-splitting. It is important. Otherwise we volunteers will feel pushed into a corner where we really don't want to be. We are not responsible for ipernity! We only help that our group of users can continue to use this website.

Since yesterday morning Eric and I (with the help of Rob and Tobias) are sacrificing most of our free time for the community to solve the problem. But even Christophe Ruelle, who came back from skiing last night, can't get it done quickly and easily.

ipernity is an old software that was written before all the modern security techniques existed. It is quite normal that there is a lot of problem potential. It will come down to not adapting the old ipernity, but actually reprogramming it with modern techniques. The question, however, is how are we going to pay for this?

+1 (we have a problem)

Hi Bernard
"You have a huge problem...", please!
This was not intended to be personal to you. I should have said IMA and Membres have a "huge problem if the site remains insecure when it comes to renewing subscriptions or transacting any financial input on Ipernity. I understand Ipernity is "strapped" for cash but as yet we as members cannot find a way to help ( or if this is possible) without knowing the actual cost involved to resolve the problems you have described, or how many members can afford to donate financially to help with the issues involved.

Hi Tess,
sorry, I guess I'm a little touchy right now. But I'm pretty worn out by the ipernity software we've taken over, which is causing such unexpected problems again nad again. Tobias Bauer, the IT security expert who once again examined the feasibility of fast encryption, characterizes it as follows: "Well, the source code (of the ipernity programm) is a rather confused story. I'm used to some things but I don't really see through them. ;)
And instead of being able to take care of something productive, I have to spend hours on this little shit of the expired certificate. Even Christophe Ruelle doesn't seem to be able to do that at short notice, even though he's been on it since 9 this morning and the software is his!
It is precisely because of such completely incalculable things that no serious service provider will give us a cost estimate. They won't put a cuckoo's egg in their nest, but will bill us according to their efforts. And if such a trifle suddenly takes three days, it costs 2000 EUR. You rub your eyes when you read elsewhere that encryption should be "free". Don't you?

+1

+1 !

Danke Gerrit ;)

First the good news: The new certificate has been running for a few minutes. Christophe finally managed to implement it. Many thanks!

Secondly - excuse me - a contradiction: Ipernity is as secure as it has been since 2013! The only thing that has changed are the standards that browsers have recently set. This forces our community to actually use completely nonsensical encryption - in other words, to spend money without any added value! Tell me please: Does it make sense to encrypt a comment, which I make publicly anyway, during transmission? Or these lines here? They are meant for the public. No hacker will come up with the stupid idea of intercepting something he can read in public during the data transfer between the servers.

But even that is completely irrelevant with regard to financial transactions, what status ipernity has. Payments have never been processed directly through ipernity's subscription page. Not even the smallest Internet shop does this. We all use the services of payment service providers because the professionals are in the field. For financial transaction process you will be redirected to Paypal. And there the payment is as safe as Paypal is. Global standard in other words.

Still can not open my account settings.

Sorry, you're right. I had the system date from the last log-in backdated to 05 January. I'm probably overtired by the 14 hours I'm already working for ipernity again. Don't understand - like all of you - in any way why this simple matter takes so long.
It doesn't only concern the new login page that Qwellcode has built, but also the ancient account management page. So it must be an old, deeper ipernity problem that we took over. It's desperate.
(See you tomorrow...)

I can get in via my laptop, where I keep signed in. I can't get in via my iPad, which I sign in and out of. The iPhone app. is also working as it was before.

Always carry a towel. Don't panic. That's my Hitchhiker's Guide to Ipernity.

Thanks to Bergfex, Tobias, Christophe et al. I'm sure it will get sorted, as other Ipernity glitches have as we've gone along.

thank you very much - it has temporarily helped :)

Thankss ik heb het in orde nu !

You can't use Letsencrypt?

Free server certificates accepted and trusted by all modern browsers.

letsencrypt.org

The problem is not the certificate provider, except that at Gandi we have 144 Euro annual fees. In return we get a wildcard and a long validity period, so that we are overcharged with the regular administration costs. Theoretically at least.

The problem is the nested old ipernity code. You can see from the current situation that even Christophe Ruelle is struggling to get the updated certificate up and running.

To all,

The security certificate expiration is a formality only. When you renew a subscription regardless of the method, the page is diverted to https:// protocal. It is safe and secure. Considering every method of payment reverts to an https:// page when you click on "VISA", "Mastercard", etc., I would have no hesitation or concerns about renewing since this info is encrypted.

The only thing that is not part of https:// protocal is the various photo pages since at this time we have not been able to achieve this despite many efforts. Test cases have resulted in freezes and shutdowns.

Also Bernhard deserves a lot of appreciation. He has worked tirelessly with the IT team for months and like all of us doesn't receive compensation. He deserves a hearty thank you and when the certificate renewal issue is resolved the sign-in page will revert back to https:// protocol.

Thank you, William. And it's true, I'm frustrated right now that such minor details cause us so much trouble. But they also show that it's really best not to change anything at all about the old ipernity. The old program code has probably reached the end of its life cycle because it is no longer technically up to date.

We'd better focus on how we can replace it with reprogramming.

I agree. Reprogramming is in the future down the road.

Thank you Christophe, Bernhard and all who worked on the problem.

Can open my account settings again.
Problem solved ??

Das Probelm mit dem Sciherheitszertifikat ist behoben, das Anmelden klappt wieder.
Ich habe gerade Internet Explorer, Firefox und Chrome ausprobiert, das Anmelden klappt wieder. Danke für die schnelle Lösung des Problems.

For us in the ima team, the accident means that we now have to give the issue of encryption the highest priority in order to find a duary solution. This must never happen again.

Thank you Christophe, Bernhard and all others involved.

Danke für die geleistete Arbeit für uns alle.
Alles wieder so wie es soll.

A big thanks to the team working VOLUNTARILY on behalf of the ima membership, that is all of us. Great job, Bernhard et al!

Danke Lutz! Immer wenn man denkt, man könne sich um den nächsten Schritt nach vorne kümmern, wird man durch so was wieder zurückgeworfen.
Gleiches bei Wikipedia: Sylvain Wiart hatte Hilfe angeboten und eine Adaption der französischen Version versucht. Gleich im ersten Anlauf ist er bei den französischen Prüfern voll vor die Wand gelaufen. So arg sogar, dass dort jetzt ein Löschantrag für den Artikel in Gänze diskutiert wird. Nicht zu fassen, oder? Das weltweit größte Projet dieser Art, noch dazu in Frankreich als Verein eingetragen, soll im französischen Wikipedia nicht mehr vorkommen. Versteht einer das?

+ 1 vous avez raison de le spécifier ils font du travail ! merci Bernard et al

+1

+1!

O ja, ich bin auch der Meinung, der Einsatz von Bernhard, Eric und dem Team kann gar nicht hinreichend gewürdigt werden.
Herzlichen Dank dafür.
Ein Nachbar schilderte mir gestern die Situation aus einem Unternehmen in welchem er beschäftigt ist. Alte Programme müssen umgeschrieben werden damit man gegenwärtig und auch künftig ihre Arbeitsweise erkennt. 140€ Stundensatz nimmt der IT-Dienstleister dafür.
Übrigens: Wo gearbeitet wird gibt es Probleme. Probleme sind dazu da um gelöst zu werden.

I couldn't use the work-around, as I am on Mac OS X. (No phone.) But it's great to be able to log in again.

Wasn't there a similar issue at the beginning of 2018? Hopefully the problem can be accounted for so it doesn't recur in 2020.

:)

Thank you for the tips. I am logged in again, although I am not sure why I get logged out to begin with. I appreciate all the help!!

Can't we organize a crowdfunding action among our members to find the necessary funds?

We now do have a donation button/feature on front page sign up window. For example open a new incognito window and have a look.

Thank you all, and especially Christophe, for getting this solved.

It is of course our (IMA teams) fault that this even happened again, and in long run we indeed need to find resources to get the reprogramming done some day.

However, I would like to remind us all that we are more or less in the same boat. We all are Ipernity Members Association ;-) Unfortunately things do happen, and sometimes s**t hits the fan. But the good side is that we help each other to get the problems solved. Just like Gerrit Fisher found a work around to get past the last few days when the certificate did not work. The power is in the crowd! =)

There is also another way that I found. Open See all contacts, find one that is not a club member, chooseto give but don't you end up on your account page, then switch to the normal part of your page.

Crafty but well worked out John.

All well now, I can sign in with no problem. Brilliant work from the team, particularly when I remember how slow the previous Ipernity used to be in answering queries and problems.

:-))

Herzlichen Dank an das IMA-Team und alle Helfer, welche in doch recht kurzer Zeit das Problem lösten!

made a copy of the info Danke to the team and especially Gerrit Fischer. :)

Unfortunately the exact same problem has returned.
I tried to sign in at my other (older) laptop where I have my external hard drive and photos stored. I can only upload photos to that laptop from my external hard drive and all was well after the advice given here on going back to a date prior to the cerificate expiry date.
But now I can't sign in even when backdating it again. I am typing this on my new laptop which I keep signed in. I wish I had kept the other one signed in but was unable to do so ever since we had to change our passwords a while ago.
So no uploaded photos from me until it is fixed one way or another! :o(

I have just been able to login without a problem. What happens when You try? Are You sure that You haven''t accidentally made a mistake when adjusting the date? Did You restart Your older laptop an the browser?

Andy,

Please reset the date to the current date. The incorrect date causes a conflict now that the new certificates are operational.

Many thanks William! That was it!
And thanks to everyone who devoted valuable time to rectifying the problem! Much appreciated!
Best wishes,
Andy

Everything is back to normal as far as I can see.

Many thanks to all who helped resolve this issue! Felt SO good just now to try and sign in (here in Alberta, Canada) - and it worked!

Thanks to all for this quick fix of this problem. Remember volunteers don't need to put up with any abuse.
While I am here does anyone know what the "stay sighed in tick the square button" does?
I still need to sign each time..
Regards . Peter

If you use that function Peter you do not have to sign in each time you visit your Ipernity account, however for reasons of safteyit is best no tto remain signed in.
John.

It saves the sign-in details in a cookie on your pc, so it should not be ticked on a public machine. When you go to ipernity, you are logged in automatically, so you are not actually signed in all the time, when you exit the site. For it not to work for you, your browser must be set to block cookies, which I hope you can investigate.

Rob Stamp

Thanks for that Rob. I have the cookies set to clear when I leave Firefox, so that might be the problem. Peter

I have just extended my membership until April 2020 on the theory that if everyone extends their membership by six months or one year then there will be more money available to build some stronger code and foundations. None of us will 'lose' anything as we'll all have longer memberships on a stronger platform. :)

I’ve followed your example.

Well done. I even half of us members did the same it would solve so many problems-

I have already extended my membership two weeks ago until November 2020

Irgendwie kriegen wir das schon hin!

Ich versuch dann mal zu helfen, bin dann nun auch bis mindestens 5. März 2020 dabei. Auch wenn ich im Moment keine Fotos mehr hochlade, und mit meiner Digitalkamera fast nicht mehr fotografiere (meist macht man halt doch nur mit dem Smartphone Fotos, und die mochte ich bisher nicht auf ipernity hochladen...) - aber ich will hier bleiben und glaube an uns.
Und hoffe, dann irgendwann wieder Lust zu haben, auch wieder mit der Digicam durch Hamburg zu stapfen.

Danke Stefan!

Da bin ich ja mal direkt froh, dass ich mich hier zuhause gar nicht erst auslogge, sondern eingeloggt bleibe. Aber ich bin überzeugt davon, dass auch dieses Problem zeitnah gelöst werden wird. :-)

Auf meinem Schreibtisch liegt schon das Bahnticket nach Salzkotten für den 23. Januar. Dort werde ich mit Qwellcode über eine dauerhafte Lösung des Problem sprechen.

Noch etwas, Stefan: Hast Du eine Idee, wie man die drohende Löschung des französischen Wikipedia-Artikels verhindern kann? Eigentlich fehlt nur noch eine einzige (nach französischen Regeln) belastbare zusätzliche Sekundärquelle, egal in welcher Sprache. Ich finde aber partout keine.
Oder kann man sonst etwas tun?
Schau mal hier: fr.wikipedia.org/wiki/Ipernity

Außerdem: Kannst Du grad mal die deutsche Wikipedia-Version sichten? Ich hab eine neue gute Quelle gefunden, musste aber leider zwei alte rausstreichen, die inzwischen ins Leere führten. (Und ich hab im Kaptitel Geschichte zwei Absätze zusammengefasst, sowie den letzten Satz gestrichen. Details im Wikipedia-Diskussions-Blog.)

Keine Ahnung, ich spreche kein Wort französisch, insofern ist eine Beteiligung an der Abstimmung von mir da nicht machbar (weil zuwenig Bearbeitungen im französischen Wiki-Sprachraum), google translate ist in Sachen deutsch französisch absolut unbrauchbar. Reicht denen nicht, dass es weitere Sprachversionen in anderen Wikipedias gibt, um die Relevanz zu erkennen?

Schau ich gleich mal. Wenn Links inzwischen ins leere führen, schau mal bei web.archive.org nach, ob die dort noch was anzeigen.
Ansonsten zukünftig immer, wenn man bei Wikipedia einen Link als Referenz nimmt, die entsprechende Seite direkt vom Webarchiv abspidern lassen, dann hat man im Zweifel immer einen Nachweis. web.archive.org/web/20120929074530/http://www.techiequest.com/ipernity-flickr-clones-with-more-features wäre bspw. eine entsprechende Version.

On aimerait avoir la certitude que le problème est définitivement réglé.
A cet égard, il serait judicieux que l'équipe dirigeante d'Ipernity communique sur la question.

[EN] Urgent request:

It seldom happens that we members have the opportunity to advertise ipernity. Here's one: The reputable German technology website heise online just published an article about photo sharing in which ipernity was forgotten.

Please show the editors that we really are a community! Comment on the lack of ipernity on a massive scale! The more it do, the more attention we get in the future with this publishing house!

www.heise.de/newsticker/meldung/Cloud-Dienste-um-Fotos-unkompliziert-zu-teilen-4267839.html

[FR] Moyen urgent:

Il est rare que nous, les membres, ayons l'occasion de faire de la publicité pour l'ipernité. En voici une : Le réputé site technologique allemand heise online vient de publier un article sur le partage de photos dans lequel ipernity est oublié.

Veuillez montrer aux éditeurs que nous sommes vraiment une communauté ! Commentez le manque d'ipernité à grande échelle ! Plus il le fait, plus cette maison d'édition nous attirera l'attention à l'avenir !

www.heise.de/newsticker/meldung/Cloud-Dienste-um-Fotos-unkompliziert-zu-teilen-4267839.html

[DE] Dringende Bitte:

Selten ergibt sich die Gelegenheit, dass wir Mitglieder mal gezielt Werbung für ipernity machen können. Hier ist eine: Und zwar hat die renommierte deutsche Technik-Website heise online gerade einen Artikel über Foto-Sharing veröffentlicht, in dem ipernity vergessen wurde.

Bitte zeigt der Redaktion, dass wir wirklich eine Gemeinschaft sind! Kommentiert das Fehlen von ipernity massenhaft! Je mehr es tun, umso mehr Aufmerksamkeit bekommen wir zukünftig bei diesem Verlag!

www.heise.de/newsticker/meldung/Cloud-Dienste-um-Fotos-unkompliziert-zu-teilen-4267839.html

Lasst es aber bitte nicht zu sehr nach Eigenwerbung aussehen. Wenn nun viele Leute bei heise schreiben, die üblicherweise sonst nicht bei denen kommentieren, oder einen neu registrierten Account dafür benutzen, geht das eher nach hinten los...

Thanks ipernity team :-)

Voici le dernier message que j'ai reçu, je crois que c'est un escroc ! :
Dear Madeleine Defawes ,

I have been in search of someone with this last name“ Defawes “so when I saw your name I was pushed to contact you and see how best we can assist each other.I am
Mr.Rudolf Bless,Chief accounting officer Bank of America (United State of America ).I believe it is the wish of God for me to come across you on search now. I am
having an important business discussion I wish to share with you which I believe will interest you because, it is in connection with your last name and you are going
to benefit from it.

One Late Shafi Defawes, a citizen of your country had a fixed deposit with my bank in 2014, valued at US$14,500,000.00 (Fourteen Million, Five Hundred Thousand US
Dollars) the due date for this deposit contract was last 22nd of March 2019. Sadly Shafi was among the death victims in the August 25 2016 Earthquake disaster in
central Italy that killed over 247 people.He was in Italy on a business trip and that was how he met his end. My bank management is yet to know about his death, I knew
about it because he was my friend and I am his account officer. Shafi did not mention any Next of Kin/ Heir when the account was opened, and he was not married and no
children. Last week my Bank Management requested that Shafi should give instructions on what to do about his funds, if to renew the contract. I know this will happen
and that is why I have been looking for a means to handle the situation, because if my Bank Directors happens to know that Shafi is dead and do not have any Heir, they
will take the funds for their personal use, so I don't want such to happen.

That was why when I saw your last name I was happy and I am now seeking your co-operation to present you as Next of Kin/ Heir to the account, since you have the same
last name with him and my bank head quarters will release the account to you. There is no risk involved; the transaction will be executed under a legitimate
arrangement that will protect you from any breach of law.

It is better that we claim the money, than allowing the Bank Directors to take it, they are rich already. I am not a greedy person, so I am suggesting we share the
funds equal, 50/50% to both parties, my share will assist me to start my own company which has been my dream. Let me know your mind on this and please do treat this
information as TOP SECRET. We shall go over the details once I receive your urgent response strictly through my personal email address,

( rudolfbless13@gmail.com )

Have a nice day and God bless. Anticipating your communication.

Mr.Rudolf Bless

Oui, Mme Defawes, c'est certainement une arnaque. Il est préférable de supprimer simplement la communication et de signaler l'expéditeur. (traduit de l'anglais)

It is best not to open such messages at all, but to delete them immediately. This is a common swindle.