11 Replies Latest reply: Oct 24, 2012 9:14 PM by canucksgirl01
bruxxx Level 1 Level 1 (30 points)

Today I started to get these very annoying popups on my Safari.

 

So far it has appears when I hit the site RSN.com Reader Supported News.

 

The message I get is:

 

Safari can't verify the identity of the website

"static.ak.facebook.com"

The certificate for this website is invalid.  You might be connecting to a

website that is pretending to be "static.ak.facebook.com", which could put

your confidential information at risk.  Would you like to connect to the

website anyway?

 

?     |     Show Certificate    |     Cancel     |      Continue

 

Looking at the certificate the subject appears to be from Akamai Technologies,

the issuer appears to be from GTE Corporation, GTE Cyber Trust Solutions Inc.

 

The most sensible hint I got from reading through Apple Communities here is

that this might be from pages with Facebook widgets on them.

 

The RSN.Com site does have a Facebook Like Widget on it.

 

I have Javascript enabled on Safari, and Java disabled.

 

Starting and stopping my machine did not help

 

I deleted all of my cookie data, that did not help.

 

I doubt this has anything to do with it, but I am also recently upgraded to

Mountain Lion.


iMac, Mac OS X (10.6.7)
  • 1. Re: static.ak.facebook.com certificate popup
    bruxxx Level 1 Level 1 (30 points)

    I can consistently reproduce this problem by going to the rsn.com website.

    The websites does have a facebook like button on it ...

    but the imdb website has some of these buttons on them and i don't get the popup there.

  • 2. Re: static.ak.facebook.com certificate popup
    erikvdo Level 1 Level 1 (20 points)

    I just passed this by my white hatted, 'network security handy' friend. He dug into it and it seems that this is a simple issue of akamai.net (a well established content delivery company) using a certificate that has Facebook's name in it, instead of theirs. Nothing to worry about, as far as he can tell.

     

     

    More specifically, he says "it is probably an akamai ad hoping you're an iPad user with Safari instead of the Facebook app.

    It probably is an add for you to download the FaceBook app IF you are using Safari with an iPad....It's a setup error. It's a BAD setup error that makes Akamai look like dummies."

     

    It looks like the issue may already have been resolved, server-side.

  • 3. Re: static.ak.facebook.com certificate popup
    bruxxx Level 1 Level 1 (30 points)

    So ... how do i get rid of it ?

  • 4. Re: static.ak.facebook.com certificate popup
    bruxxx Level 1 Level 1 (30 points)

    I notified the rsn.com site.

  • 5. Re: static.ak.facebook.com certificate popup
    bruxxx Level 1 Level 1 (30 points)

    also, i get this on two imacs and an iphone.

  • 6. Re: static.ak.facebook.com certificate popup
    erikvdo Level 1 Level 1 (20 points)

    The issue has to be resolved by Akamai and/or their certificate provider. It has nothing to do with the site you're visiting, per se. All we can do is wait for Akamai to figure out the issue is happening and correct it.

  • 7. Re: static.ak.facebook.com certificate popup
    gburgess01 Level 1 Level 1 (0 points)

    I've had the same issue come up today, Tues. 10-23-12 while accessing Urbanspoon.com.  About an hour later it stopped but as of Wed. 10-24-12 at 0300 it is reappearing on other sites as well now and this was after a fresh restart and checking for software updates.  I always cancel out of it.

    While the problem was occuring on Safari I tried Firefox and Chrome and they were unaffected.

     

    GB

  • 8. Re: static.ak.facebook.com certificate popup
    canucksgirl01 Level 1 Level 1 (55 points)

    I posted a very simple fix for this (as this question has been asked numerous times).

     

    The fix will perform a verification of ALL your certificates, update them and allow you to "repair" any as needed.

     

    https://discussions.apple.com/thread/4463457

  • 9. Re: static.ak.facebook.com certificate popup
    bruxxx Level 1 Level 1 (30 points)

    I did the keychain fix and it seems to have stopped the problem on the machine that I did it on, but it still appears on my other machine - so, thanks.

     

    What about on the IOS devices, is there a keychain verifier on them as well ?

     

    --

     

    I spoke too soon ... I have run this now on my other machine 3 times and still no joy.

    It's a newer and bigger iMac

  • 10. Re: static.ak.facebook.com certificate popup
    rockring Level 1 Level 1 (0 points)

    this occured today on my iPhone when I visit a site with FB on it.  However, what got me concerned was that I then attempted a google search through safari on the phone and Google requested I enter in the displayed code as there was an unusual number of requests coming from my ip address.  Did anyone else experience this?  Was not connected through WiFi, still through 3G.

  • 11. Re: static.ak.facebook.com certificate popup
    canucksgirl01 Level 1 Level 1 (55 points)

    rockring,

     

    Not sure what to say about the second part with Google, but I would be a little concerned...

     

    Google Support for this issue is explained here, but what they suggest is checking for malware or contact your network administrator...

     

    I know you have an IP even through 3G (its actually an IPv4), if you go to Whats My IP on your iPhone, you'll get your IP. I just can't tell you any more about your situation, or whether you are technically sharing your IP with others? so you'll have to inquire about this through your carrier.

     

    Be aware that if your phone is jailbroken, there is a greater possiblility for malware/trojan attacks; but even non-jailbroken phones were potentially at risk earlier this year... You can read more about that here (there's several articles out there, I just picked one). If you did install the offending "Find and Call" app (I almost did), then I would contact Apple directly to find out what you need to do to fully remove it, in case there's any possibility that its the cause of your "unusual traffic".