Comments on: Super Troopers?

By: mneptok

mneptok — Tue, 21 Apr 2009 00:41:04 +0000

@Michael

I suggest you take a look at the back of the traffic tickets you dispense.

Also, when being taken to a site asking for credit card payments, adding the “s” to the protocol is simply smart practice.

If you own the .gov domains, why not use them?

If you enable SSL services, back them up with real certs.

IOW, if I decide to add the “s” as a best practice, I should either get a site with a real certificate, or a 404. Period.

It’s your job to engineer a safe and secure site. It’s not the public’s job to navigate your mistakes.

By: Michael

Michael — Mon, 20 Apr 2009 16:32:02 +0000

Several things come to mind.

The Judicial Bureau web site is not a secure site. The address you reference is correct, http://www.vermontjudiciary.org/. The address you used to get the certificate above is incorrect, https://www.vermontjudiciary.org/ (note the “s” in https).

From the Judiciary site, if you follow the links to pay a ticket you will end up at our secure payment site which is https://secure.vermont.gov/courts/payments/index.php.

Vermont accepts many payments online to include campsite reservations, traffic ticket payments, hunting license, etc. All payment sites start off with https://secure.vermont.gov.

By: Aaron Strontsman

Aaron Strontsman — Mon, 20 Apr 2009 14:55:38 +0000

… and apparently isn’t even valid for https://www.vermontjudiciary.org, but for their internal servers or something. (Or am I wrong?)

By: Jason D. Clinton

Jason D. Clinton — Mon, 20 Apr 2009 14:50:56 +0000

That screen shot appears to have been taken on a Mac…

By: Chris Irwin

Chris Irwin — Mon, 20 Apr 2009 14:24:45 +0000

@mneptok

And that they didn’t get the proper hostname in there.

By: Dom

Dom — Mon, 20 Apr 2009 07:31:33 +0000

nice looking fonts, have you changed defaults for something?

By: UCFKnights

UCFKnights — Mon, 20 Apr 2009 05:30:18 +0000

Where did you get the https in the URL from? If you just type in vermontjudiciary.org it is not a secure site… and then click on pay tickets, it brings you to a secure site with a proper certificate. I think this problem isn’t them, its you entering the URL incorrectly.

By: James Henstridge

James Henstridge — Mon, 20 Apr 2009 00:06:49 +0000

So report that you believe someone has hacked their website to add a link to this obviously fake payment site, and are trying to steal money from upstanding citizens (who happen to travel faster than the posted speed limits).

By: mneptok

mneptok — Sun, 19 Apr 2009 23:00:46 +0000

@Steve

Not to mention a self-signed cert that expired four years ago!

By: nixternal

nixternal — Sun, 19 Apr 2009 22:18:49 +0000

HAHAHAHA! Super Troopers was awesome. I would have probably started laughing right from the get go thinking about that movie in your situation. I have been pulled over on I-95 in Rhode Island, and I always think of “Me, Myself, and Irene” which always gets me laughing a bit. At least you got that far though with paying your ticket. I went to pay a ticket online here in Illinois, and it said I had to have IE 6 or newer. I changed my user agent settings, and it would crash as soon as I tried to go in.