Category Random Stuff       Thread starter Wultra       Start date Sep 16, 2016 at 6:42 AM       4,831       19            
Following the addition of SSL to PSXHAX and some HTTPS assistance a couple of users (including @abzii) were having trouble accessing certain HTTPS sites on Windows XP and XP PRO SP3, and from the title you know that one of these sites was PSXHAX.COM.

I have found a fix for people below who are using certain OS's.

SSL Error.png


Fix Below

!_____________!


SSL Fixed.png

Image: PSXHAX Working on Windows XP Pro SP3 With Firefox

Requirements:
| Windows XP PRO SP3 |
| Firefox 32.0.3 |
| Installing Latest Update For Windows XP |
______________________________________

I was not able to find any real solution other than using downgraded FireForx version 32.0.3. So I would have to continue using FireFox v.32.0.3 whenever I hit that ERR_SSL_VERSION_OR_CIPHER_MISMATCH error in Chrome. Version 33 and 34 may also work - it looks like the latest version of FireFox that still works with SSLv3 would be 34. However, I am using 32.0.3.

Here is the link to install English Win32 version of FireFox v.32.0.3 from Mozilla official FTP site:

Firefox Setup 32.0.3.exe -- 24-Sep-2014 05:21 -- 34Mb

You would need to disable autoupdates so it does not catch that SSLv3 paranoia again:

Menu btn > Options icon > "Update" tab > "Never check for updates"

I was "lucky" that I disabled Firefox updates some time ago and ended up with Firefox version 32 which is not afraid of POODLE and it will be kept that way (i.e. without upgrades), so I have some way to read those poor socially excluded websites with SSL 3.0 next time Chrome shows me

Security Notes

  • If this is your laptop and you often browse from public WiFi, try not to use that FireFox while on a public WiFi, or someone evil may steal your https cookies (below)
  • If you do not trust your Internet Provider, delete all existing FireFox cookies and do not ever use that FireFox to login into any sensitive websites, or your evil Internet Provider may steal your https cookies (below).
Here is the root cause of this error:
  • The HTTPS site I wanted to connect to only supports old version of TLS called SSL 3.0 or SSLv3
  • That version 3.0 of SSL is proven to be insecure, because of the newly discovered POODLE vulnerability (here is much better description of POODLE) which can only be exploited if you ever visit unsecured WiFi with malicious owner who would then trick you to visit his malicious website with certain Javascript (or inject malicious Javascript into non-protected HTTP response from a regular website you are visiting there).

  • That malicious Javascript that would need to submit to about 8,000 web requests from your browser to some good site that they know you use, and then, if everything works perfect, they may get to conclude the value of your 32-byte cookie. They would need around 256 requests on average to decrypt one byte. Multiply that with the number of bytes in the cookie, and most often, this attack can be done in seconds or minutes. As far as I understand, even then they would not be able to actually intercept your HTTPS communication. Well, stealing your cookie is bad, don't get me wrong.
  • Because I visit WiFi hotspots full of POODLE hackers with my desktop computer in a bag every other day, Google has rightfully decided to protect me from reading those old sites that cannot be reconfigured for using more recent version of SSL, without giving me any option to decide on it. Why is that important? Because for example people run certain hardware that is being administered through HTTPS SSLv3 interface and upgrades are not always possible, for example Tomato and DD-WRT routers - dd-wrt 25408, Asus RT-N66U, Linksys e4200, etc. To see what kind of hoops people have to jump through with Wireshark and lower lever SSL debugging to make their routers back accessible, click here.
Tried this, and it DID NOT WORK for me, because I have Chrome version 41. Apparently IT DID WORK for some people who had Chrome version before 40, so I am still posting it from here:
  • Copy this to your address bar in chrome: chrome://flags
  • Find a setting named "Minimum SSL/TLS version supported."
  • Choose SSLv3
  • Click on "Relaunch now" button
  • Go back to the HTTPS page that was giving you ERR_SSL_VERSION_OR_CIPHER_MISMATCH error
  • You will be redirected to a "Your connection is not private" page. If you do not worry about this security issue click on the "Advanced" link.
  • Click on "Proceed to <your https page> (unsafe)".
SOURCE: BITEXPERTS
Windows XP Professional.jpg
 
:idea: Reminder: Those without a Verified Badge yet on Discord to access the private areas we recommend Joining Us! Why? The waiting process takes a week for new Members, and there's a lot we're unable to share on public forums including the latest PS4 PKG Games. 🏴‍☠️

Comments

abzii

Senior Member
Contributor
Thanks for that confirmation @misiozol, and @abzii if you can confirm for me that what @VultraAID posted worked for you (it sounds like it does?) then even if he doesn't want anything from you I'd still like to make a small donation to him for his time on behalf of the site :cool:

I don't completely follow why without these extra 'nuances' posted in this thread our site PSXHAX.COM doesn't just work as sites like 'Xenforo.com' do, but as long as a working fix is available for XP users I will let sleeping dogs lie. :X3:
Im using the latest ff with settings unchanged or are you talking about chrome coz i couldnt find a lower version
 
:idea: Reminder: Those without a Verified Badge yet on Discord to access the private areas we recommend Joining Us! Why? The waiting process takes a week for new Members, and there's a lot we're unable to share on public forums including the latest PS4 PKG Games. 🏴‍☠️

PSXHAX

Staff Member
Moderator
Contributor
Verified
Ahh, so the latest FireFox (stock, default options) seems to be working on your desktop PC and you can view PSXHAX.COM fine with it correct @abzii?

I'm sure what @VultraAID posted will help others who have versions of Windows XP with different browsers also... so many different variables to this lol ;)
 

abzii

Senior Member
Contributor
Thats right boss...ive never liked firefox thou it doesnt support html5 video ? I tired the html5 extension for ff but it didnt work...so i can reach psxhax but i cant lool at videos....conundrum
scratch that...it works...these tramadols are getting to me i think :cautious:
 

Wultra

Developer
Senior Member
Contributor
Thats right boss...ive never liked firefox thou it doesnt support html5 video ? I tired the html5 extension for ff but it didnt work...so i can reach psxhax but i cant lool at videos....conundrum
scratch that...it works...these tramadols are getting to me i think :cautious:
I shall see if I can find a downgrade version off chrome but At least Firefox is working atm
 

misiozol

Senior Member
Contributor
Verified
Thanks for that confirmation @misiozol, and @abzii if you can confirm for me that what @VultraAID posted worked for you (it sounds like it does?) then even if he doesn't want anything from you I'd still like to make a small donation to him for his time on behalf of the site :cool:

I don't completely follow why without these extra 'nuances' posted in this thread our site PSXHAX.COM doesn't just work as sites like 'Xenforo.com' do, but as long as a working fix is available for XP users I will let sleeping dogs lie. :X3:
Site was working all the time for me from beginning on FF and XP have same FF 37 , new FF is pissing me off as in privacy you can't set custom settings and chose which cookies to keep and which sites to black listed :D
 

Wultra

Developer
Senior Member
Contributor
Thanks for that confirmation @misiozol, and @abzii if you can confirm for me that what @VultraAID posted worked for you (it sounds like it does?) then even if he doesn't want anything from you I'd still like to make a small donation to him for his time on behalf of the site :cool:

I don't completely follow why without these extra 'nuances' posted in this thread our site PSXHAX.COM doesn't just work as sites like 'Xenforo.com' do, but as long as a working fix is available for XP users I will let sleeping dogs lie. :X3:
A donation is not required this site is a community for The Players who wants to about upcoming news of PlayStation JB and Games and more, we where here to help people keep up with the latest news and the least I can do is help people with problems and update the site with new news
 

Kraken

Senior Member
Contributor
I booted up my Windows XP VM, and the site is working fine on Firefox 38, 39.0, 43.0.1, and 47.0.1 (the latest).

You really shouldn't be running an out of date browser, especially since XP itself is out of date and vulnerable. Don't ever use IE/Edge.

Note that I have the Windows Update registry hack in place, so it's possible that this was fixed via an update. If you are still using Windows XP (even in a VM), I strongly suggest you install the hack so that you can get the latest security updates.

To enable updates, paste this into a .bat file and run it:
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\WPA\PosReady]
"Installed"=dword:00000001
 
Recent Articles
PS4HEN 2.1.4 Github Fork with Save Data Mounting by xXxTheDarkprogramerxXx
Following the PS4 HEN 2.1.3 updates, PlayStation 4 homebrew developer @TheDarkprograme shared a PS4HEN 2.1.4 Github fork (from SiSTR0's repository, also forked from xvortex) via Twitter that...
PS4 ROP 8CC: Return-Oriented Programming Port by Sleirsgoevy for 6.51 WebKit Exploit
We've seen PS3 Browser ROP Exploitation, a PS4 ROP Tool, a PS4 ROP / SPRX / ELF File Archive, PS4 ROP Gadgets, a PS4 ROP Kernel Dumper and following his Blu-Play DOOM I Port PlayStation 4 scene...
Sony Unveils PlayStation Plus Free PS4 Games for June 2020
Whether you're journeying to a galaxy far, far away or heading into the trenches with a pair of first-person adventures packed with explosive campaigns and multiplayer modes Sony has it covered in...
The Last of Us Part II via Sony's State of Play & More PS4 Videos!
Since announcing The Last of Us Part 2 Limited Edition PS4 Pro Bundle, Naughty Dog VP and Director Neil Druckmann shared a special preview of The Last of Us Part II during Sony's State of Play...
Top