Sweet revenge [was: FireFox and Bank haPoalim]

2006-12-23 Thread Dan Kenigsberg
Haifa University's HighLearn system (used to disseminate course material) did not even let Firefox log in. If one do log in (using IE), one finds a host of complex ASP-generated pages with frames and security checks and whatnot. Guess what? http://online.haifa.ac.il/ now features the note

Re: FireFox and Bank haPoalim

2006-12-22 Thread Zvi Har'El
These are good news. But the fix is not complete. If you go to Meida Meatar Isracard, the right hand menu is still reversed. So, I continue to use Effie's extension... :'( Ilya Konstantinov wrote, On 21/12/06 20:25: Looks like the bank has finally fixed the reversed menus on Firefox. The

Re: FireFox and Bank haPoalim

2006-12-21 Thread Ilya Konstantinov
Looks like the bank has finally fixed the reversed menus on Firefox. The Javascript code that previously caused the bug is no longer there and has the comment // new above it. The sources also refer to Firefox in various points, so it looks like they're no longer oblivious to Firefox (though

Re: FireFox and Bank haPoalim

2006-12-08 Thread Ira Abramov
Quoting Zvi Har'El, from the post of Fri, 08 Dec: Once you installed it, it really doesn't matter if somebody later breaks to Effie's site (to Effie it would matter :'( ). If you haven't installed it yet - you can download it, and examine the file contets (an XPI file is just a fancy extension

Re: FireFox and Bank haPoalim

2006-12-08 Thread Amos Shapira
On 08/12/06, Zvi Har'El [EMAIL PROTECTED] wrote: fancy extension to a ZIP archive) before installing it (from the local file, of course). I would do it even if the file were signed, and even if it came by a stork directly from mozdev :-) . So is this what you do for every extension you

Re: FireFox and Bank haPoalim

2006-12-08 Thread Tzahi Fadida
Just being a bit argumentative, you have 2 issues with this claim: 1) You can't tell by that logic if the zip has already been cracked. The many eyes principle says that only you is probably not enough. Now, if it was tab mix plus... :) 2) 6 months from now, when it will ask for an update, someone

Re: FireFox and Bank haPoalim

2006-12-08 Thread Zvi Har'El
I install extensions, but check what they do... Of course, with popular extensions you can rely on the fact that somebody else checked them, but when it goes to your bank account, you cannot be too careful. Amos Shapira wrote, On 08/12/06 11:12: On 08/12/06, *Zvi Har'El* [EMAIL PROTECTED]

Re: FireFox and Bank haPoalim

2006-12-08 Thread Ilya Konstantinov
Argh! There's no security model for Firefox extensions like there is for, say, Java, where the external host (i.e. Firefox) limits what an extension can do. The fact the extension claims to handle a banking site doesn't make it a more or less likely vector of attack; its ability to access your

FireFox and Bank haPoalim

2006-12-07 Thread Michael Sternberg
Hello. For everybody who's tired of looking on reversed hebrew of Bank haPoalim personal account web interface I have found a wonderful extension for FireFox that solves this problem: http://www.effie.co.il/mozvuvu/home.html enjoy :) P.S. I do not understand why Bank haPoalim still did

Re: FireFox and Bank haPoalim

2006-12-07 Thread Gilad Ben-Yossef
Michael Sternberg wrote: Hello. For everybody who's tired of looking on reversed hebrew of Bank haPoalim personal account web interface I have found a wonderful extension for FireFox that solves this problem: http://www.effie.co.il/mozvuvu/home.html enjoy :) P.S. I do not understand why

Re: FireFox and Bank haPoalim

2006-12-07 Thread ik
On 12/7/06, Gilad Ben-Yossef [EMAIL PROTECTED] wrote: Michael Sternberg wrote: Hello. For everybody who's tired of looking on reversed hebrew of Bank haPoalim personal account web interface I have found a wonderful extension for FireFox that solves this problem:

Re: FireFox and Bank haPoalim

2006-12-07 Thread Alex Dover
Actually I'm currently looking at their site in firefox and it looks fine to me. They used to have a problem with incorrect encoding detection that needed manual ajustment, but now even that is gone...So what reverse font are you talking about? On 12/7/06, ik [EMAIL PROTECTED] wrote: On

RE: FireFox and Bank haPoalim

2006-12-07 Thread Michael Sternberg
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alex Dover Sent: Thursday, 07 December, 2006 02:26 PM To: Linux-IL Subject: Re: FireFox and Bank haPoalim Actually I'm currently looking at their site in firefox and it looks fine to me. They used to have

Re: FireFox and Bank haPoalim

2006-12-07 Thread Alex Dover
On 12/7/06, Michael Sternberg [EMAIL PROTECTED] wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alex Dover Sent: Thursday, 07 December, 2006 02:26 PM To: Linux-IL Subject: Re: FireFox and Bank haPoalim Actually I'm currently looking

RE: FireFox and Bank haPoalim

2006-12-07 Thread Michael Sternberg
http://mishka.freeshell.org/bank_poalim.JPG Check out right column and tabs headers = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail

Re: FireFox and Bank haPoalim

2006-12-07 Thread Tzahi Fadida
Just a warning, Installing an unsigned plugin that affects the connection with your bank is not very smart (i remembered late myself, so don't feel bad). On Thursday 07 December 2006 13:00, Michael Sternberg wrote: Hello. For everybody who's tired of looking on reversed hebrew of Bank

Re: FireFox and Bank haPoalim

2006-12-07 Thread Ilya Konstantinov
There's nothing in this extension which limits it to work only with the bank's site, nor is there anything to limit any other extension you've installed from stealing your data from any site. While I agree this is risky, I must correct your assumption that the fact this extension claims to deal

Re: FireFox and Bank haPoalim

2006-12-07 Thread Tzahi Fadida
Let me refine this. Very much like linux kernel is more or less trusted to have no secret evil code because of the many eyes principle, so does, for example, tab mix plus. However, an obscure plugin like this bank hapoalim plugin does not have many eyes on its code and thus, more dangerous than

Re: FireFox and Bank haPoalim

2006-12-07 Thread Oded Arbel
On Thu, 2006-12-07 at 18:38 +0200, Ilya Konstantinov wrote: There's nothing in this extension which limits it to work only with the bank's site, Actually, there is - from reading the extension's source its obvious that it does its magic only when it detects the URL of bank hapoalim. nor is

Re: FireFox and Bank haPoalim

2006-12-07 Thread Amos Shapira
On 08/12/06, Oded Arbel [EMAIL PROTECTED] wrote: On Thu, 2006-12-07 at 18:38 +0200, Ilya Konstantinov wrote: While I agree this is risky, I must correct your assumption that the fact this extension claims to deal with a banking site makes it more or less likely to be spyware. I think the

Re: FireFox and Bank haPoalim

2006-12-07 Thread Zvi Har'El
Once you installed it, it really doesn't matter if somebody later breaks to Effie's site (to Effie it would matter :'( ). If you haven't installed it yet - you can download it, and examine the file contets (an XPI file is just a fancy extension to a ZIP archive) before installing it (from the