Upcoming site move and security change
January 4, 2019 11:59 AM - BoerumHillScott
Over the last year, the site disk storage requirements have been getting closer to the limits of our current hosting provider. We have had the current provider for over three years, so it was time to evaluate competitors anyway. I ended up findng one that offers a lot more storage at a much lower price along with better performance, so it’s moving time.

With moving, I did some behind the scenes clean up, and decided to make one change: the new server will only support HTTPS, encrypting all traffic.
All existing links will still work, but will automatically redirect you from http to https.
The only difference you should notice besides an extra “s” in URLs is that the site will now be considered secure by your browser and you will not get annoying messages warning you to not enter your password on newer browsers.

I will most likely make the move this evening (Friday, January 4), meaning a few hours of downtime.
Edited by BoerumHillScott at January 4, 2019 12:26 PM

75 comments
January 4, 2019 12:02 PM - dibs
Awesome!!!!


#1
January 4, 2019 6:09 PM - BoerumHillScott
Site will be going down at 6:30 for the move.
Get all your insults in before then.
#2
January 4, 2019 6:55 PM - BoerumHillScott
I think we are back up on the new server.
I have a few house-cleaning tasks to do, but the site should be good to use.

Now, let the bug-hunting begin.
#3
January 4, 2019 6:56 PM - BoerumHillScott
Note: some people may have issues getting to the new site until DNS updates make it to their neck of the internet.
Of course, they can't see this message.


#4
January 4, 2019 7:09 PM - DH
Thank you dear leader.
#5
January 4, 2019 7:12 PM - dibs
Thanks!!!!!


#6
January 4, 2019 7:16 PM - BoerumHillScott
You are welcome.

Now time to launder all the money I took in today.
#7
January 4, 2019 7:42 PM - petebklyn
Thanks for keeping up with technology
#8
January 5, 2019 8:33 AM - dibs
One issue: I have to log back in on my Android phone after I haven't visited the site for a while on it.


#9
January 5, 2019 9:03 AM - BoerumHillScott
I am seeing the re-log in issue as well.
Looking into it, but stumped at the moment.

Is everyone else having the same issue?
#10
January 5, 2019 9:09 AM - rf
I am.
#11
January 5, 2019 9:19 AM - dibs
Just had it happen again. Only on my phone. Not a big issue as login deets pop up and just have to hit Login


#12
January 5, 2019 9:21 AM - DH
Same issue if using LifeinBkln.com

I changed bookmark to LifeinBklyn.com and seems to leave me logged in
#13
January 5, 2019 9:34 AM - dibs
I use LifeInBklyn.com on my phone


#14
January 5, 2019 9:34 AM - dibs
And doesn't seem to be any rhyme or reason as to when I get logged out.

Pretty random.


#15
January 5, 2019 9:36 AM - BoerumHillScott
I have a theory that it has to do with the site cookie that stores your login not liking the transition from http https.

To clear the cookie:
Chrome for Android: Click on the lock at the top, site settings, clear and reset
Chrome for Windows: Click on the lock at the top, cookies, remove

You will have to log in again, but hopefully that will be the last.
I am still testing the solution myself.
#16
January 5, 2019 9:42 AM - dibs
OK

Let's see if it logs me out later

Thanks


#17
January 5, 2019 10:02 AM - petebklyn
my computer logs out. Have not used phone for this site
#18
January 5, 2019 10:18 AM - dibs
Seems to be working.


#19
January 5, 2019 10:19 AM - dibs
Probably need a new computer


#20
January 5, 2019 10:23 AM - pepper
Same. My computer keeps logging me out. Haven't looked at the new site on either of my phones yet.




Edited by pepper at January 5, 2019 10:24 AM
#21
January 5, 2019 10:56 AM - BoerumHillScott
Has anyone cleared their cookie and still had the issue?
#22
January 5, 2019 11:06 AM - petebklyn
not cleared cookies but doesn't seem to be doing it though
#23
January 5, 2019 11:10 AM - dibs
Did what you posted to do and haven't had the issue again.

On my Android phone. No issues on my Mac



#24
January 5, 2019 12:03 PM - ij
Did Scott's fix and it seems to work now.

I've actually never, ever used Lifeinbklyn.com.
#25
January 5, 2019 12:09 PM - Partridge
I'm on a MacBook Air. All morning, following my computer falling into sleep mode, I would need to log back in. I cleared the cookies as Scott suggested, and now I'm okay.
#26
January 5, 2019 12:11 PM - dibs
Using Safari? I have no issues on my MacBook Air


#27
January 5, 2019 12:12 PM - Partridge
No, Chrome.
#28
January 5, 2019 12:23 PM - dibs
Chrome does seem to be the common issue.


#29
January 5, 2019 12:36 PM - BHI4
On my iPhone I am logged out every time.
#30
January 5, 2019 1:02 PM - ij
Uhoh, same issue again. Weird. Using Chrome.
#31
January 5, 2019 1:03 PM - pepper
I cleared the cookies as suggested in my IE on my laptop, and still keep getting logged out.
#32
January 5, 2019 1:25 PM - sixyearsandcounting
Internet Explorer?!?!
#33
January 5, 2019 1:33 PM - BoerumHillScott
Still looking into it. strange.
#34
January 5, 2019 1:34 PM - pepper
Yes. Is there a problem?
#35
January 5, 2019 1:37 PM - BoerumHillScott
I may be making things worse while testing now.
#36
January 5, 2019 1:53 PM - BoerumHillScott
No, that did not make things worse.
Now more confused.
I did turn on more logging to try to tack it down.
#37
January 5, 2019 1:54 PM - ij
Now is the time to abscond! Send a postcard to Dave in five years, "suckers."
#38
January 5, 2019 2:10 PM - petebklyn
seems better to me
#39
January 5, 2019 2:23 PM - dibs
Was just logged off on my Android phone


#40
January 5, 2019 2:24 PM - Partridge
Logged me off again.
#41
January 5, 2019 2:27 PM - pepper
Me too. On IE.
#42
January 5, 2019 2:28 PM - dibs
Not had any problems on Safari.


#43
January 5, 2019 2:37 PM - BoerumHillScott
Something is going on strange in the database the holds the user session information.
I just don't know what.

I think I will wipe it out and re-create it, which will log everyone off.
#44
January 5, 2019 2:40 PM - dibs
Just logged off on Safari


#45
January 5, 2019 2:47 PM - BoerumHillScott
Everyone got logged off - I did that when trying something.
I doubt things will work better now, but I am confused so I am trying different things.

The problem does not appear to have anything to do with cookies or browsers at this point.
#46
January 5, 2019 3:27 PM - BoerumHillScott
Damn, it is happenening again.
#47
January 5, 2019 4:27 PM - dibs
Can't login on Safari now


#48
January 5, 2019 4:39 PM - BoerumHillScott
should work again. Or not.
I am still troubleshooting.
Edited by BoerumHillScott at January 5, 2019 4:40 PM
#49
January 5, 2019 4:40 PM - dibs
No. Now it's telling me my login is wrong
#50
January 5, 2019 4:41 PM - dibs
I'm sure we'll get there eventually.
#51
January 5, 2019 4:41 PM - dibs
Not sure why it's working fine on phone


#52
January 5, 2019 4:42 PM - dibs
Success!!!

It's all greek to me.


#53
January 5, 2019 4:43 PM - BoerumHillScott
I am breaking shit all over the place.
Think it is stable again (with the log-offs every 3 minutes or so).

Will try for a few more minutes, then head out to a party.
#54
January 5, 2019 4:45 PM - dibs
I don't mind the occasional need for logging in.

At least it autofills and you just have to hit Login


#55
January 5, 2019 4:46 PM - rf
Have fun at the party, Scott!
#56
January 5, 2019 4:50 PM - BoerumHillScott
Now it is a battle of wits between me and the server.
The server is winning.
#57
January 5, 2019 4:52 PM - dibs
Do as I do and just let the server have his way with you!!!!


#58
January 5, 2019 5:08 PM - BoerumHillScott
One more round of breakage coming up.
#59
January 5, 2019 5:24 PM - BoerumHillScott
I think I'm done for the evening.

I put in a couple different types of logging to try to figure this thing out.
#60
January 5, 2019 5:49 PM - DH
Thanks for trouble shooting Scott !

FaceID on ios makes re-logging in super easy , FWIW
#61
January 6, 2019 7:32 AM - BoerumHillScott
Has anyone been forced off since yesterday around 5:15 PM?

I think I found the issue, and it turns out there was a bug on the old server.
By default, user sessions are set to time out after 24 minutes.
However, on the old server this did not work for some reason, meaning that you never got logged off from the server side unless you asked to be.
Note that your browser might decide for various reasons to destroy your cookie, also logging you off.

Since we have been running that way for almost 4 years, I am inclined to continue running with no forced log-offs, despite this being a horrible security practice.
As an alternative, I could set the log-off time to 1 day or a week.

Any thoughts?
Edited by BoerumHillScott at January 6, 2019 7:33 AM
#62
January 6, 2019 7:51 AM - dibs
Haven't experienced a logoff since yesterday.

Whatever you think is best for security.


#63
January 6, 2019 8:08 AM - BoerumHillScott
I think I might set the timeout to 1 week.

There are still some issues with logging in that I am working on.
It seems like logins from yesterday afternoon are still good, but new ones are getting timed out.
#64
January 6, 2019 8:15 AM - dibs
And all while Benson's off on a cruise. He'll come back to a Democratic House and login problems!!!!


#65
January 6, 2019 8:19 AM - petebklyn
I seem to be getting logged off more frequently/quickly....from laptop/chrome
#66
January 6, 2019 8:24 AM - BoerumHillScott
I have changed the session timeout to 1 week and I think I rolled back all the other changes made yesterday except the extra logging.

I will keep an eye out for anything strange.
If you have any log-out issues after now, please let me know.

If things go smoothly today, I will turn off the extra logging this evening.
#67
January 6, 2019 9:17 AM - sixyearsandcounting
Didn't have to log back in on Chrome just now. Desktop/Mac.
#68
January 6, 2019 9:19 AM - petebklyn
seems better to me now too
#69
January 6, 2019 11:05 AM - DH
Glitch seems to be fixed on my end
#70
January 6, 2019 11:55 AM - petebklyn
On my phone is good
#71
January 6, 2019 1:00 PM - pepper
Everything seems better on my computer on IE
#72
January 6, 2019 1:09 PM - ij
No issues for me since last evening!
#73
January 6, 2019 2:11 PM - BoerumHillScott
OK, will turn off the extra logging and hopefully things will be normal.

There is a bit of clean up work behind the scenes I will do this week, but there should be no impact
#74
January 6, 2019 2:14 PM - dibs
Is there a cleanup crew???

#75