Security Alert while using Amazon

Waylander · 09-02-2014, 12:24 PM

I clicked to download a free Kindle book from Amazon.co.uk a few minutes ago, and Google chrome said my network is not secure, and I could be subject to attackers who will try to get my personal details. It then gave a button that said "return to safety". Anyone know what is going on? I have not entered my personal details into anywhere dodgy, and I have no threats on my computer, as I ran a virus scan which came up clear. Has anyone had something similar?

Edit:
I did some digging, and found some information on it, and this happens when the URL listed in the website's certificate doesn't match the actual URL of the site. I'm slightly confused as to why this happened on Amazon though, when all I was doing was downloading a free kindle book via usb.

CWatkinsNash · 09-02-2014, 06:43 PM

When you clicked to download the book, it may have connected to a fulfillment server on a domain without a matching cert.

Lately I've been seeing a lot of certificate warnings in Chrome for Wordpress sites that have top level domans redirecting to .wordpress.com URLs.

crich70 · 09-02-2014, 07:42 PM

Have you scanned your system for malware and virus recently? It's possible something might have slipped through as well. Even if it hasn't though it is a good idea to practice "Constant Vigilance" with all that is out there now days.

susan_cassidy · 09-02-2014, 08:10 PM

Sounds like a bogus message from malware, to me.

CWatkinsNash · 09-02-2014, 08:59 PM

I know in my case, it's definitely not malware - I can see that the actual certificate error is happening by checking the site info. I think they just aren't being processed correctly.

Wordpress sites that are hosted by wordpress but also use top level domains are very common. The cert warnings happen sometimes when, for example, joeblow.com resolves to joeblow.wordpress.com. Chrome throws an warning that the URL doesn't match. Stuff like this should be handled automatically when the account is set up to use the domain. Now that I think about it, what's probably happening is that people are using URL forwarding instead of using Wordpress' domain mapping service, and their registrars aren't creating new certs.

In Waylander's case, if it only happened the one time, it's likely just a glitch. Sometimes certs don't get updated quickly enough, even at a company that owns its own web services division.

Waylander · 09-03-2014, 06:40 AM

Thanks for the reassurances people! I did a scan immediately after I got this message, and there were no threats detected, so that was ok. I think it was just a glitch, albeit an unexpected one.

little and large · 09-03-2014, 09:03 AM

Good to know these things, thanks.

jersysman · 09-03-2014, 10:45 AM

This happens a lot during holidays. Sometimes those certs just don't get sent out on time.

09-02-2014, 12:24 PM	#1
Waylander Guru Posts: 662 Karma: 2905052 Join Date: Oct 2013 Device: Kindle Paperwhite 5 16GB, Kindle Paperwhite 6, Kobo Clara,	Security Alert while using Amazon I clicked to download a free Kindle book from Amazon.co.uk a few minutes ago, and Google chrome said my network is not secure, and I could be subject to attackers who will try to get my personal details. It then gave a button that said "return to safety". Anyone know what is going on? I have not entered my personal details into anywhere dodgy, and I have no threats on my computer, as I ran a virus scan which came up clear. Has anyone had something similar? Edit: I did some digging, and found some information on it, and this happens when the URL listed in the website's certificate doesn't match the actual URL of the site. I'm slightly confused as to why this happened on Amazon though, when all I was doing was downloading a free kindle book via usb. Last edited by Waylander; 09-02-2014 at 12:28 PM. Reason: More info

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Bank of America security alert....	carpetmojo	General Discussions	65	01-14-2012 03:25 PM
Cover Alert - N. Va!	retro	Sony Reader	0	07-16-2011 01:54 PM
Amazon security flaw?	jocampo	Amazon Kindle	6	02-01-2011 04:30 PM
Amazon's answer to Kindle vs airport security	desertgrandma	Amazon Kindle	23	03-01-2009 05:06 PM

09-02-2014, 06:43 PM	#2
CWatkinsNash IOC Chief Archivist Posts: 3,950 Karma: 53868218 Join Date: Dec 2010 Location: Fruitland Park, FL, USA Device: Meebook M7, Paperwhite 2021, Fire HD 8+, Fire HD 10+, Lenovo Tab P12	When you clicked to download the book, it may have connected to a fulfillment server on a domain without a matching cert. Lately I've been seeing a lot of certificate warnings in Chrome for Wordpress sites that have top level domans redirecting to .wordpress.com URLs.

09-02-2014, 07:42 PM	#3
crich70 Grand Sorcerer Posts: 11,310 Karma: 43993832 Join Date: Feb 2010 Location: Monroe Wisconsin Device: K3, Kindle Paperwhite, Calibre, and Mobipocket for Pc (netbook)	Have you scanned your system for malware and virus recently? It's possible something might have slipped through as well. Even if it hasn't though it is a good idea to practice "Constant Vigilance" with all that is out there now days.

09-02-2014, 08:10 PM	#4
susan_cassidy Wizard Posts: 2,251 Karma: 3720310 Join Date: Jan 2009 Location: USA Device: Kindle, iPad (not used much for reading)	Sounds like a bogus message from malware, to me.

09-02-2014, 08:59 PM	#5
CWatkinsNash IOC Chief Archivist Posts: 3,950 Karma: 53868218 Join Date: Dec 2010 Location: Fruitland Park, FL, USA Device: Meebook M7, Paperwhite 2021, Fire HD 8+, Fire HD 10+, Lenovo Tab P12	I know in my case, it's definitely not malware - I can see that the actual certificate error is happening by checking the site info. I think they just aren't being processed correctly. Wordpress sites that are hosted by wordpress but also use top level domains are very common. The cert warnings happen sometimes when, for example, joeblow.com resolves to joeblow.wordpress.com. Chrome throws an warning that the URL doesn't match. Stuff like this should be handled automatically when the account is set up to use the domain. Now that I think about it, what's probably happening is that people are using URL forwarding instead of using Wordpress' domain mapping service, and their registrars aren't creating new certs. In Waylander's case, if it only happened the one time, it's likely just a glitch. Sometimes certs don't get updated quickly enough, even at a company that owns its own web services division.

09-03-2014, 06:40 AM	#6
Waylander Guru Posts: 662 Karma: 2905052 Join Date: Oct 2013 Device: Kindle Paperwhite 5 16GB, Kindle Paperwhite 6, Kobo Clara,	Thanks for the reassurances people! I did a scan immediately after I got this message, and there were no threats detected, so that was ok. I think it was just a glitch, albeit an unexpected one.

09-03-2014, 09:03 AM	#7
little and large Enthusiast Posts: 35 Karma: 1043954 Join Date: Apr 2014 Device: kindle fire	Good to know these things, thanks.

09-03-2014, 10:45 AM	#8
jersysman Wizard Posts: 1,747 Karma: 3761220 Join Date: Mar 2011 Location: Pennsylvania Device: T1 Red, Kindle Fire, Kindle PW, PW2, Nook HD+, Kobo Mini, Aura HD	This happens a lot during holidays. Sometimes those certs just don't get sent out on time.

Advert

Advert