Announcement

Collapse
No announcement yet.

Google Web Accelerator = vB security breach?

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Google Web Accelerator = vB security breach?

    Hi,

    I read this. It is on Google's Web Accelerator. I think it says that our private forums are no longer secure?

    Can someone clear this up?

    Thanks.

  • #2
    That would be Google being in the wrong then most likely. We send an HTTP header that specifically says not to allow public/shared caches to cache the page:
    http://jigsaw.w3.org/HTTP/cc-private.html

    Maybe it's only an HTTP 1.0 cache...

    Comment


    • #3
      This did happen a while back on vB 2.x with some of those cache proxy/accelerators.

      I think it was resolved in vB 3.x (and maybe newer vB 2.x), but I'll let more knowledgable devs confirm/correct.
      vB Drupal Community Plumbing | vB Survey | vBusy | vB Spell | vBouncer

      Comment


      • #4
        vB3 also has an option to add no-cache headers. For the really paranoid

        Comment


        • #5
          There are some more issues with the Web Accelerator as pointed out here:
          http://www.benjaminadam.com/archives...ccelerator-bad

          I uninstalled it after I figured out it acts like a proxy server which means to me I can't use my normal proxy server anymore. It could be my dsl connection but the speed dropps drastically when this Google software is running
          That's the end of that!

          Comment


          • #6
            Originally posted by Floris
            vB3 also has an option to add no-cache headers. For the really paranoid
            Floris,

            What is the down side to this?

            Comment


            • #7
              Your users/visitors produce more traffic since the files (images, js-files) aren't cached and need to be reloaded every single time they reload one of your sites
              That's the end of that!

              Comment


              • #8
                As I noted here I blocked the service myself as I don't have the pragma headers set up correctly and I honestly don't want google hosting my site anyway since I'm rather addicted to looking over logs and such and I should imagine this would play havoc with traffic analysis.

                As a note the only people who have reported problems with GWA using vb are still on vb2. vb3 forums don't appear to be affected at all. Should you want to block the service there are simple instructions for doing so here for those running apache servers.

                Comment


                • #9
                  I got report that on some forums (I do not know if it is vbulletin), GWA would follow links that delete your messages!
                  http://37signals.com/svn/archives2/g..._designers.php
                  Lumina, aventurière des mondes fantastiques et petite rédactrice au grand cœur
                  Cœur Lumière - vBulletin-fr
                  Join the vBulletin French community social group!

                  Comment

                  widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
                  Working...
                  X