When I tried to follow that, I’m told to login. I was logged in, but logged in again. And then told on top of already being logged in that “Could not authenticate you from Ldapmain because “Invalid credentials for [removed by moderator]”.”
Note that that link goes to a different domain. It is not a link to another post in the Purism forum.
The other domain is using Anubis as a defence against various malicious parties.
Do you see Anubis “making sure that you are not a bot” (or similar wording)?
If you don’t see Anubis then perhaps your browser settings are too fierce (which isn’t necessarily a bad thing).
If you do see Anubis then after he goes away (having weighed your heart and guided your soul), you should just see the Issue report, without a demand for a login.
Unfortunately, no. The log in that it is talking about is different from your forum login - so I have my doubts that you were logged in or that you have valid credentials for the other domain - and if you do have valid credentials for the other domain, bear in mind that they will be different credentials as compared with your Purism forum credentials.
I reviewed my steps. I was logged in. I can check stuff like that. If I wasn’t logged in then my browser was lying based on the feedback from the site. Take it up with Google.
What I did find is that while logged in to Puri forum, I followed a link - that link, as it turns out goes to a very similar page theme and was a log in to Github or Gitlab, I forgot which.
There was no Anubis - I’d have recognized that large piece of annoyance and promptly find another source for the answer I sought.
Making sure I am not a bot?!? Just how can we test test bots to make sure they are not another means of harvesting emails. Hackers have won. it’s the honest folk that have to lean against the wall, spread them and give up rights to privacy. Heaven help those that use stalker blockers.
I imagine that you have disabled Javascript. It is possible that the web site fails to handle that scenario and gets confused.
Note that you don’t actually have to do anything with Anubis. It’s not like a CAPTCHA where you spend ages picking out pieces of pedestrian crossing / bicycle / motorcycle / bus / fire hydrant / …
Anubis merely delays you by a few seconds. It appears on the screen and a few seconds afterwards it disappears and then you get the web page that you actually wanted.
It really only stops lazy bots.
I would hope that Purism reviewed the code used by Anubis before deploying it.
If I remember right, Google has a invisible test of the device, not the person. I believe that Anubis popping up does the check like HashCash does, only the popup of Anubis acts as middle-person to announce that the visit is being tested.
Trust no one. The devil was once an Angel No offence to Puri, but looking for software for the L5 is hard to trust results. I thought everything we might (one day) get for the L5 via “PureOS Store” would have been tested before hand. I wonder about “Show Only Mobile Friendly Apps”?
I hope the PureOS Store works soon.
I don’t want to take you away from your invaluable post (you’re busy I’m sure), and this topic has run it’s course. The link when Anubis popped up was, I’m certain, by Git. I just wanted to point out what happened when I followed a link there.
Fair enough. Maybe some other browser setting. If you are using Firefox then you could temporarily create a new profile and access the web site while using that profile to see whether you still experience the problem.
Either way though if Anubis does not appear for you then it is likely to cause a problem.
Yes, it is similar to HashCash.
The web server sets the web browser a ‘difficult’ mathematical problem. The browser has to solve that problem and send the solution back to the web server. The web server can then relatively easily check the solution. Anubis is the software that organises that, both on the server side and on the client side.
Other web sites are running similar software e.g. any company using CloudFlare as a CDN.
You might want to note whether you have this problem (non-appearance of Anubis) only with Anubis or in a similar way with any web site running similar software.
No, other sites with similar plugins show up; like the Google’s stalker ‘Find the Bicycle’ game or ‘I am not a bot’ yadda yadda… The price we pay to keep trackers and stalkers out of our lives - it’s a losing battle.
By “similar” I meant “enforced client side computation” … like CloudFlare CDN.
Note that “find the frigging bicycles/cars/buses/fire hydrants/…” and “enforced client side computation” are taking two conceptually quite different approaches and are in a sense tackling different problems.
The former is genuinely attempting to determine whether there is a human-being driving a web browser. (This is often protecting a login page so that a bot can’t brute force weak passwords but may serve to defend against other unwelcome visitors as well.)
The latter is really attempting to determine whether there is a lazy bot not driving a web browser i.e. it is attempting to impose a computational cost for visiting the web site, without really caring whether the visitor is a human being or a bot. (It is really attempting to dissuade bots that crawl the entire web site by making that computationally expensive e.g. dissuade spiders, search indexers, AI training, …)