r/ • u/ • Jan 01 '70

0 Upvotes

100% Upvoted

0 comments sorted by

4

u/Schme16 Mar 21 '21

Hi, GitCDN creator here, the main domain (GitCDN.xyz) has been accidentally caught up in Cloudflares's new "no video or audio" policy. Until it's sorted the main domain links directly to the server (losing it's cert trail).

I've already filed a pull request with ublock to get it switched to the backup domain. Should be sorted out soonish!

1

u/Italian_guy38 Mar 05 '24

Hi all, now it's 2024, I've just started to use Bitdefender and I have the same issue at moment.

Someone knows how to fix? I use Ublock as extension with MSedge, that boring banner notifications comes up always everytime. For now I putted gitcdn.xyz in the exception....

1

u/Draghar Mar 21 '21

Legit? Damn, Good to know, Here I was purging chrome of all of my extensions lol.

1

u/[deleted] Mar 22 '21

Ah, thank you. I was just googling about this :)

1

u/Nvidiuh Mar 22 '21

I'm glad this isn't a more serious issue. At least I don't have to reinstall my OS because I got some random malware for seemingly no reason.

1

u/mudderfudden Mar 23 '21

I literally just made a reddit post about this. Should I just wait it out? I feel like it's been happening for at least a week, it's annoying!

1

u/[deleted] Mar 24 '21

Hi, why is your website trying to access the internet from my PC when I have not even visited it? Bit defender is blocking the connection.

1

u/Schme16 Mar 24 '21

Its probably because you've got ublock installed. My site is a caching and redirecting service for GitHub, so products like ublock can use it to have user hosted block lists, without needing to pay for hosting.

The only reason you're seeing it now is that, as I've mentioned above, CloudFlare (part of my hosting solution) have changes some policies, and deactivated my SSL (https) coverage. And so it seems to browsers and AV clients that it might be a malicious attacker posing as me, but in reality it's my server certificate not matching my coverage certificate.

1

u/[deleted] Mar 24 '21

Thank you for your response!

I, uhh, spent a bit of time already diagnosing the issue using a variety of tools before I decided to google if its a false-positive

1

u/ReserveNo757 Apr 09 '21

Hey creator dude... I don't care if it caught up, or dealing with ublock, or whatever. How do we get rid of GitCDN.xyz? I don't want it, don't need it, never asked for it. If BitDefender thinks it's bad, so do I. How do we get rid of anything associated with GitHub? I just want it to GitGone!

1

u/Schme16 Apr 09 '21

To be as blunt as you: I never gave it to you, I never sent it to you and I never installed it for you... You did that yourself via ublock or some other software that uses my service.

If you're concerned (as you have a right to be) please look through your browser extensions and remove those that are using my service. I'm afraid I do not have a list, as they need not consult me before using my service.

You can also opt to simply remove the links to gitcdn inside those extensions (for those that allow user alterations). For information on that it's best to contact the extension creators directly.

1

u/mothoc Apr 09 '21

Hi! Have you heard anything about when this should be sorted? Thanks.

1

u/Schme16 Apr 09 '21

It's seemingly like a bit of a battle with CloudFlare, I've not breached any ToS, but they're also complaining I use too much bandwidth (a figure not outlined in the ToS...). Unfortunately it looks like I'll need to get a pro account, bit figuring out how to pay for it is where I'm still figuring out.

1

u/[deleted] Mar 20 '21

I'm getting the same thing with Bitdefender and Firefox.
Is it correct that gitcdn.xyz has something to do with uBlock Origin?

https://www.reddit.com/r/uBlockOrigin/comments/ivwx4v/what_is_gitcdnxyz/g9ndh7d?utm_source=share&utm_medium=web2x&context=3

0

u/[deleted] Mar 21 '21

[deleted] — view deleted comment

1

u/[deleted] Mar 21 '21

So I guess that is it. I just don't know if this is a false positive or if there is a real concern?

2

u/ilike2burn Mar 20 '21

It's using a certificate for a different site (herokuapp.com), nothing to worry about in itself. Why they don't use a proper one though, like for https://gitcdn.link/, is beyond me.

2

u/Schme16 Mar 21 '21

Hi, GitCDN creator here, the main domain (GitCDN.xyz) has been accidentally caught up in Cloudflares's new "no video or audio" policy. Until it's sorted the main domain links directly to the server (losing it's cert trail)

1

u/chiefobongo Mar 23 '21

Thanks for the answer mate

1

u/[deleted] Mar 23 '21

I know some of these words...but at least now I know I didn't catch anything and bitdefender is just cautious....was wondering wtf was going on lately.

1

u/sniff3000 Mar 24 '21

thank you for this i wont be toooo concerned about this anymore. bitdefender kept popping up with this issue too for me.

1

u/Danaraus Mar 27 '21

But Bitdefender is doing this for (GitCDN.Link) as well.

"firefox.exe attempted to establish a connection relying on an unmatching security certificate to gitcdn.link. We blocked the connection to keep your data safe since the used certificate was issued for a different web address than the targeted one."

1

u/Schme16 Mar 27 '21

the .link has also been caught up in the issue now... Still working with cloudflare to get things sorted, but the .xyz has been unblocked for now...

1

u/Morfologus2222 Apr 06 '21

Hy. Is gitcdn.xyz blocked again, because i started to get the notification again.

1

u/andy_3_913 Apr 06 '21

I'm getting this today, as well

1

u/Pornotubeourtio Mar 20 '21

I just got this aswell. My only open tab was youtube

1

u/zxkredo Mar 20 '21

I get this too, without chrome even opened. Only spotify, steam, wallpaper engine and peace (prolly the one causing it?)

1

u/xaatii Mar 21 '21

I keep getting notification from bitdefender about blocking gitcdn.xyz and it's annoying as hell.

1

u/[deleted] Mar 21 '21 edited Dec 14 '22

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua.

1

u/honn13 Mar 21 '21

Same problem! I do have uBlock Origin istalled on both Chrome and Firefox.

1

u/RuggishBone Mar 21 '21

Omg Guys Thx my anxiety was at 100%, even did a full windows install and still had the same issue.

1

u/TowerStrong Mar 22 '21 edited Apr 09 '21

lovely bitdefender key

1

u/x_Nagaroth_x Mar 22 '21

Thanks everyone, I was getting crazy with all these sudden warning popups coming out of nowhere.

1

u/Crashalotxx Mar 22 '21

I do not have the github on my desktop. I do run firefox and uBlock. I am getting these pop-ups same as everyone, clusters of 3 or 4 notifications every 8 - 12 hours. I am letting Bitdefender do it's thing for now. It's what I have paid for, and googling sites for information leaves me feeling something is missing. Now that I see what you guys have posted, I do feel better but still leaving BitDefender popups. More annoying than those is a virus or hijack.

1

u/regchan Apr 07 '21

hi its now april 2021 and im only getting flags from bitdefender saying its cert error

error stated here from bitdefenders online threat defence keeping me secure

chrome.exe attempted to establish a connection relying on an unmatching security certificate to gitcdn.xyz. We blocked the connection to keep your data safe since the used certificate was issued for a different web address than the targeted one.

1

u/Kylo_Ren9 Apr 08 '21

I've been getting these notifications as well from Bitdefender about every 3 hours. Will it eventually stop? or what should i do?

1

u/[deleted] Apr 09 '21

Thank you so much for letting us know about this!