search

zedeus / nitter

Alternative Twitter front-end
https://nitter.net
GNU Affero General Public License v3.0
10.12k stars 535 forks source link

nitter.net Privacy Error #1174

Closed JoLiKMC closed 9 months ago

JoLiKMC commented 9 months ago

Issue or Error

The nitter website is currently returning a "privacy error".

Further Details

I tried rebooting my wireless setup and my modem. I also tried clearing my browser cache and trying an entirely different browser. The results are the same.

I'm sure this is just a temporary thing but I figured I'd report it anyway.

Thank you for your project.

Relevant Screenshots


What nitter.net is currently displaying (Google Chrome)

EdwinKaburu commented 9 months ago

Yeah seems to be a certificate issue.

https://nitter.net/

Peer’s Certificate has expired.

HTTP Strict Transport Security: true HTTP Public Key Pinning: false

JoLiKMC commented 9 months ago

Ah. Yeah, I didn't even bother checking the certificate information…

But, yes. According to the Certificate Viewer in Chrome, it's a super-simple matter of not renewing the certificate:

Validity Period

Issued On: Sunday, October 29, 2023 Expires On: Saturday, January 27, 2024

Seems easy enough to fix. 👍

pin-grid-array commented 9 months ago

Already reported, but it won't be fixed because the dev isn't working on Nitter any longer. That site and all the other public instances will be dead by the end of the month.

I think it's possible to still access that site by disabling the HSTS preload service but I don't know how to do that in Chrome. In Firefox, you can do it by going to about:config and changing network.stricttransportsecurity.preloadlist to false, but this is considered an unsafe thing to do.

0xpr03 commented 9 months ago

Stop opening issues without searching!

Stop telling people to disable security features like HSTS!

Nitter. Is. Dead.

AutumnalModding commented 9 months ago

Stop opening issues without searching!

Stop telling people to disable security features like HSTS!

Nitter. Is. Dead.

HSTS is literally pointless, there's no reason for it to exist or for it to be used. It's not a "security feature". It's a "unsecurity antifeature". Also other instances work fine. It's not dead, lmao. Check your facts.

edit: someone with private activity is downvoting me lol. care to explain yourself @ofifoto? what have you got to hide such that you need to set your activity to private?

AutumnalModding commented 9 months ago

image In fact - THIS instance still works.

AutumnalModding commented 9 months ago

@ofifoto mind explaining your downvotes & private activity? what have you got to hide? do you work for Twitter or sum and tryna decredit this? probably tbh

ofifoto commented 9 months ago

HSTS good.

AutumnalModding commented 9 months ago

interesting to see the instructions and proof are now marked 'off-topic'... perhaps this is a glowie/Musk psyop?

JoLiKMC commented 9 months ago

Stop opening issues without searching!

I scanned the front page but didn't bother searching further. I'm usually a bit more aware than that. Sorry.

Inversely, I've noticed that some instances of Nitter do still work. Most seem "rate-limited", but some work alright. I'll be sad when it's gone, but it feels like a "necessary evil" since Twitter stonewalls logged-out users in various ways.

Here's hoping people one day figure out that there are better places to put their work than Twitter…