Jump to content

False Positives for: y-c.eu, your-consultant.eu, carabulea.net


Hristian
Go to solution Solved by gonzo,

Recommended Posts

Hi.

I am reporting false positives by the Malwarebytes Browser Guard for Firefox. My domains are carabulea.net, your-consultant.eu, y-c.eu. These domains share the same address, and there is nothing bad on the respective server whatsoever.

Website blocked due to suspicious activity:

Website blocked: y-c.eu
Malwarebytes Browser Guard blocked this website because it may contain scam activity.
We strongly recommend you do not continue.

Website blocked: your-consultant.eu
Malwarebytes Browser Guard blocked this website because it may contain scam activity.
We strongly recommend you do not continue.

Website blocked: carabulea.net
Malwarebytes Browser Guard blocked this website because it may contain scam activity.
We strongly recommend you do not continue.

Thanks.

Hristian Carabulea

malwarebytes-reaction.png

Link to post
  • Staff
  • Solution

The blocks were traced to (at least one instance of) unrequested audio player activity in your keyboard typing test.  I tried a few other highly suspect links but did not find anything else, not to say there were not any more instances of that.  We recently started blocking those, in keeping with the following Google policy change:

https://developers.google.com/web/updates/2017/09/autoplay-policy-changes

Google themselves has not begun to enforce that policy change, likely because most infractions are no more harmful to the world than yours.  In truth, most people who employ audio are simply trying to enhance the user experience, and most are very unlikely to understand what would be needed from them to comply with Google's new policy.  There are certain circumstances which are cause for blocks, and at the same time, we are reviewing how we do it.

The sites have been whitelisted. Please allow 15-30 minutes for changes to take effect.

  • Thanks 1
Link to post

Hi, gonzo. Thanks for the response with an actual solution. I read the google policy, and I will have to read it again and again. :D Not sure I understand it.

For example, the following page starts with an audio playing, but the user can pause it. Yet, Malwarebytes blocked this page as well. Please do take a look it at it if you have the time. https://hristian-carabulea.bitbucket.io/USSBowen.v2/

I guess, it would be better if it started with the audio not playing at all?!

 

Link to post
  • Staff

I did not get a block, so I stepped back one and tried all three versions you have available.  v0 and v1 both blocked.  v2 did not, nor did the audio play automatically though the audio player was visible.  Having audio available for the user is fine, but making that decision to click the play button for them is the problem.

 

Link to post

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.