| 2014-06-02 09:08:29 |
Matthew Paul Thomas |
description |
1. In a private/incognito window, go to <https://wiki.canonical.com/>.
2. Click "Login" [sic].
3. Click the icon next to the URL.
What you see:
* In Firefox: "The connection to this website is not fully secure because it contains unencrypted elements (such as images)."
* In Chromium/Chome: "However, this page includes other resources which are not secure. These resources can be viewed by others while in transit and can be modified by an attacker to change the look of the page."
The culprit is the Canonical logo next to the words "Canonical Wiki".
The same problem occurs both on the sign-in page and the two-factor auth page. |
1. In a private/incognito window, go to <https://wiki.canonical.com/>.
2. Click "Login" [sic].
3. Click the icon next to the URL.
What you see:
* In Firefox: "The connection to this website is not fully secure because it contains unencrypted elements (such as images)."
* In Chromium/Chome: "However, this page includes other resources which are not secure. These resources can be viewed by others while in transit and can be modified by an attacker to change the look of the page."
The culprit is the Canonical logo next to the words "Canonical Wiki".
<http://assets.ubuntu.com/sites/ubuntu/latest/u/img/icons/sso_icon_wiki-canonical.png>
The same problem occurs both on the sign-in page and the two-factor auth page. |
|
