9

I'm trying to vote up a good answer. But button does not working, then i open other some question for checking but these (Up Vote, Down Vote, Favorite star) are not working. Also this error is showing.

enter image description here

  • @DeerHunter Yes this Locked post but I also checked some others, same issue on all. – Ayaz Shah Mar 13 '16 at 14:52
  • 1
    Do you have the same problem when connecting over HTTPS? – Deer Hunter Mar 13 '16 at 14:52
  • @DeerHunter Ohh i check with HTTPS now its working. Thank You – Ayaz Shah Mar 13 '16 at 14:53
  • 1
    It might be that your ISP injects javascript (for advertisements) in http/html content. There are similar reports – rene Mar 13 '16 at 14:55
  • Are you from India? meta.stackoverflow.com/questions/318384/… – Deer Hunter Mar 13 '16 at 14:57
  • No, from UAE dubai – Ayaz Shah Mar 13 '16 at 14:59
  • 3
    Oh, there is an upvote button? Forgot about that feature entirely.... – David Arenburg Mar 13 '16 at 15:08
4

You should switch to HTTPS since your ISP is evidently MITMing your connection to inject advertisements (and does so by ruining valid JavaScript).

You should really consider switching to another ISP, because an ISP that introduces a Man-In-The-Middle attack is in fact hacking your connection and you shouldn't assume it's benign (original advice here).

Please note that there is an long standing and on-going effort to fully support secure connections over HTTPS/TLS across the Stack Exchange network that is riddled by both technical challenges and costs. See Accessing per-site metas gives 403 forbidden from cloudflare-nginx among other posts on the subject. Among the meta sites only MSE, MSO, MSU, MSF, and Meta Ask Ubuntu support TLS, yet all main sites are accessible through a secure connection.

Other things to consider:

  • Make your browser disallow mixed content (with, e.g. NoScript and HTTPS Everywhere browser extensions).
  • Force the browser to use TLS for all Stack Exchange and related sites (through NoScript settings, for instance), including sstatic.net, imgur.com, stackauth.com, gravatar.com etc.
  • Fiddle with parameters until you see no mixed/dubious content is being loaded.
  • Thoroughly check what Certificate Authorities your browser trusts.
  • To securely access site metas other than those listed above, use either mobile apps, or Emacs with the SX extension.

This post is intentionally made community wiki since I have already posted practically the same answer over at M.SO.


Related questions:

  • You sure there is a "on-going" effort? – Zizouz212 Mar 13 '16 at 16:10
  • @Zizouz212 - please feel free to edit that in. That's a community wiki, after all. – Deer Hunter Mar 13 '16 at 16:14
  • @Zizouz212 - I'm not sure if anything can be done at this point. SE users are being hacked, and that was predicted many times. – Deer Hunter Mar 13 '16 at 16:18
  • 1
    Related: meta.stackexchange.com/questions/226030/… – Deer Hunter Mar 13 '16 at 16:23
  • @Zizouz212 - it is certainly ongoing, however slowly (there are a lot of considerations for us to complete the work and a bunch of complications). – Oded Mar 14 '16 at 10:54

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .