Hacker News Reader

Comment by MagicPropmaker | Hacker News Reader

Why is MalwareBytes giving a warning for this site?

MalwareBytes is wrong. seclists is a website containing security mailing lists, and CVE mails are a very common sight there.

Because MalwareBytes is scareware?

I'd still like to know why MalwareBytes is warning me about this page. If you can't answer that, why mock someone?

Edit: you’ve hacked your comment after I replied so much that this post no long bares any context to the question it was originally responding to....

And it's not true that MalwareBytes is "scareware". I'm sure the person saying that is simply some 12-year-old who wants to show the Windows user that he runs Linux and is a "l33t h4x0r" or something and knows better than my (commercial) security software.

MalwareBytes is actually reporting that something on that page is trying to make an outbound connection to port 50685 on ip address 45.33.49.119. I don't know what to make of this, but it smells fishy. It's very odd that this program will make a claim if there isn't something going on. I'm not going to risk visiting that page.

I don’t run nor have ever run MalwareBytes so I couldn’t comment on what’s being reported there but the site itself is one of the few of few I’d trust normally. So either the site has been hacked or MalwareBytes is reporting a false positive.

Are you connecting over HTTP or HTTPS? If the latter, have you checked who issued the SSL certificate?

45.33.49.119 is the same IP this website is hosted on.

I'm not sure on port 50685 but when I load the page there are no connections on port 50685.

well basically > 49k ports are private/dynamic. which means that if you open a website at 80/443 it will open a port on your computer above 49k, so nothing malicious.

Reply on news.ycombinator.com