• The move to the new server is done. There are some software and database maintenance updates in process. This has us passing the hat around to help out. We appreciate any donations. Seriously, even a dollar helps. The payment page may be found here - https://www.audiokarma.org/support.html

Log out, log in anomaly - change bookm@rk to https

Just happened to me again, come on to AK and i've been logged out, try to login and it takes me back to the main page where i'm still not logged in. Browsed a few pages and suddenly i'm logged in again. Very annoying.

Edit, this only happens on Chrome on my macbook, Iphone is fine and never logs out.
Happens on my iPhone too. In Safari.
 
Hey Admins, can you please address this? I am sure it is a pain for you folks too. It would be nice and hopefully helpful to receive some communication or some sort of announcement of what is being done to address the problem and some tips to try for those of use being affected.
 
Hello,

You don't need to do three rapid fire posts and try and badger people to see there is an issue. There is a problem for sure but jumping up and down is not going to help at all.

Frannie
 
I mean any time I do anything. "Like" a post, quote a post, reply, edit, I get kicked out and have to log back in.

Same here, but since this morning, so far, the site has been stable, without un-logging me.... yet !!

Also, and strangely enough, when I became frustrated yesterday, when the site started acting up again, like sunvalleylaw`s experience, I un-logged and left the site, only to find out later on, when I returned hours later, that I was still logged on !!

Yeah, I was comfortable with that anomaly !! Not !!

Mercy Sakes Alive, on this can of worms that has been opened since the 14th of February !!
 
Hello,

You don't need to do three rapid fire posts and try and badger people to see there is an issue. There is a problem for sure but jumping up and down is not going to help at all.

Frannie
Was trying to provide information to someone who had quoted me and asked, then make sure that I was thorough in that telling concerning where and when it was happening (thinking that thorough information would help), and then make a request of someone in charge. Sorry to rapid post. Will shut up now and see if anyone in charge will address it.

PS, you mistake my intention. I was trying to provide information thoroughly, and as I get logged out when I edit, it is easier to post separate posts. Did not mean to badger anyone.
 
Was trying to provide information to someone who had quoted me and asked, then make sure that I was thorough in that telling concerning where and when it was happening (thinking that thorough information would help), and then make a request of someone in charge. Sorry to rapid post. Will shut up now and see if anyone in charge will address it.

PS, you mistake my intention. I was trying to provide information thoroughly, and as I get logged out when I edit, it is easier to post separate posts. Did not mean to badger anyone.
Fair enough.

Just know I was called out badly by folks here when I suggested this was not as easy a change.

The staff also got beat to hell over not having SSL and the "AK members" who were beating them up are "Surprise" not here helping anyone at all.

Frannie
 
Fair enough.

Just know I was called out badly by folks here when I suggested this was not as easy a change.

The staff also got beat to hell over not having SSL and the "AK members" who were beating them up are "Surprise" not here helping anyone at all.

Frannie
I am sure it is very frustrating for the powers that be behind the scenes that make this place work. I mean no disrespect to any of them and hope they can get things figured out. As I said, it has to be a pain for them as well. Sorry you got called out. I sure didn't mean to call anyone out.
 
You didn't call anyone out. Her reference is to those practically demanding that this site needed to be secure. I do sense your frustration, and there have been users trying to help wherever they can. However, the frustrating part is trying to figure out what is going on with those who are having issues. I, for one, am not having any issues whatsoever. So that lends me to believe there's an OS/browser configuration problem. Best I can say is hang in there.
 
The frustration is the lack of official communication from the admins working on the issue. All I recall seeing are a few scattered messages from mods acting as intermediaries. This has been going on for a couple of weeks now without at least a "we know and we're on it" from the wizards behind the curtain. As a paid subscriber I think I'm not asking for too much there.
 
The frustration is the lack of official communication from the admins working on the issue. All I recall seeing are a few scattered messages from mods acting as intermediaries. This has been going on for a couple of weeks now without at least a "we know and we're on it" from the wizards behind the curtain. As a paid subscriber I think I'm not asking for too much there.

DITTOS
 
OnTheBlitz said:
Just revert the site back to http. Why do we need https anyway.....

We dont really,this site doesnt need SSL..... I dont understand why people are having problems though.....hipforums.com/forum is setup the same way. (Not blocking HTTP sessions) and no one has issues there.....
 
I'm not sure what the exact problem is, but I'm sure that they are both aware of it and working on a solution. Inconvenience is nothing to get upset about, things happen.

I'm using Chrome on my Android phone always and this is one problem I'm having.
When I do a search using Google and select any of the displayed links to an AK site it does not know that I'm always logged in. If I go to the address bar and fill in the missing prefix "https://www." versus "Audiokarma.org. blablabla" it recognizes that I'm logged in and things are normal, or else I get the prompt to login in the upper right of the screen. Just passing some info along here, be patient folks.
 
Last edited:
You didn't call anyone out. Her reference is to those practically demanding that this site needed to be secure. I do sense your frustration, and there have been users trying to help wherever they can. However, the frustrating part is trying to figure out what is going on with those who are having issues. I, for one, am not having any issues whatsoever. So that lends me to believe there's an OS/browser configuration problem. Best I can say is hang in there.
Well, hmm, it was working fine before. And now it seems to be working again, as it seems to for a time, since this began. I am on the same OS and the same browsers, though I did switch back to Chrome. I do have Safari running as well. I will hang in there. But I am frustrated by the lack of official communication, and that they are relying on forum good samaritans instead of addressing it by at least say they recognize a problem and are working on it.
 
FYI,

The thread in question that I am referencing was in fact locked and actually deleted. So you will likely never see what went on there. When I was talking about beating up the staff over SSL implementation ?? You would have to go back to before SSL was actually implemented here to know what I am talking about. That would be before Feb 12th.

Anything since has been a lot of complaints from the community

Which I foresaw but was told in so many words that I had no clue what I was talking about.

In any case I have been on the side of the people running this place and making this place as accessible for all with as little technical skill pretty much from day one when this "We Need SSL Because My Browser Says So" started.

Yes SSL is great , Yes its needed but no we don't want to be impacting the user base just because something/someone says so.

And that is all SSL is here. Some entity telling us we need it or the site (Chicken Little Reference) will be horribly insecure.

Frannie
 
First link is from Feb 12th and is offering support to the people running this site. (Note Feb 12th is the time the switch was done plus or minus 24 hours and hardly anyone was noting issues)

Second link is yours of course and full of recent helpful information.

Okay, but the primary issue at hand with logins, cookie scope, and multiple realms is well known. It's been happening since www.audiokarma.org was changed to audiokarma.org (or vice versa), circa 2+ years. Less of an issue that primarily surfaced (at least for me) when dealing with google results. Now that two protocols are in play the issue is 2x, exacerbated by every single link previous to TLS being http://. Not rewriting or redirecting to one realm under one protocol violates best practices; this outcome was 100% predictable and easy to mitigate barring anything profoundly odd with the server config.

My post simply restated what @Wildcat highlighted as the issue on day one, though a bit more succinctly with a pseudo-repro case. Sure, people can use my post to compensate for the issue on their own by logging in to the site four times, but the point was to illustrate to the powers that be that the server is misconfigured.

Running ops, including devops and secops, in the premium streaming space, dealing with attack proxies and vectors, etc. on a daily basis, I respectfully disagree on the general sentiments about TLS in this context.
 
Okay, but the primary issue at hand with logins, cookie scope, and multiple realms is well known. It's been happening since www.audiokarma.org was changed to audiokarma.org (or vice versa), circa 2+ years. Less of an issue that primarily surfaced (at least for me) when dealing with google results. Now that two protocols are in play the issue is 2x, exacerbated by every single link previous to TLS being http://. Not rewriting or redirecting to one realm under one protocol violates best practices; this outcome was 100% predictable and easy to mitigate barring anything profoundly odd with the server config.

My post simply restated what @Wildcat highlighted as the issue on day one, though a bit more succinctly with a pseudo-repro case. Sure, people can use my post to compensate for the issue on their own by logging in to the site four times, but the point was to illustrate to the powers that be that the server is misconfigured.

Running ops, including devops and secops, in the premium streaming space, dealing with attack proxies and vectors, etc. on a daily basis, I respectfully disagree on the general sentiments about TLS in this context.

And yet its not mitigated many weeks after the implementation.

Who knows why and who actually has a right coming here as a guest to even wonder why.

So who are you addressing. Me or the site administration ??

I don't spend my time telling other administrators how to do their job. I have enough of this sort of nonsense 24/7 365 days a year.

I learned many many years ago I could be wrong in a way that I did not see from my comfy chair.

I am just in effect saying there are reasons outside our control of this is how it is.

And that the SSL implementation as a result should have been thought out better rather or resources lined up. Rather than bowing to people complaining.

But honestly no one has a clue what is going on with the site administration and honestly as guests its not really our business.

And I firmly am of the "Camp" that the site administration owes me NOTHING at all. Rather I owe them. And since I really don't know what is going on all I can really offer is to be a buffer and avoid direct "Here is how this should be done" bullcrap.

In the end I come here to discuss audio. I personally come here to escape issues like this. But I will not tolerate personally any brow beating of the staff or administration of this site.

Frannie
 
Last edited:
I appreciate your taking the time to elaborate on your perspective. While I obviously differ on tact in a couple areas, I get it and agree overall.
 
Back
Top Bottom