Re: Microsoft may be Firefox's worst vulnerability
David E. Ross wrote: On 6/20/2009 6:02 PM, David E. Ross wrote: On 6/20/2009 5:00 PM, Nairda wrote: Hi everyone. Can someone with a bit more understanding of these things please read this article and say weather this applies to SM as well? http://blogs.techrepublic.com.com/security/?p=1716tag=nl.e011 Snip: In a surprise move this year, Microsoft has decided to quietly install what amounts to a massive security vulnerability in Firefox without informing the user. Find out what Microsoft has to say about it, and how you can undo the damage. Microsoft pushed out its .NET Framework 3.5 Service Pack 1 update this February End Snip. It looks rather nasty, and I wish I had read it sooner. Cheers. The malware is a Firefox extension that (among other things) disables the ability of Firefox to remove it. This apparently affects only Firefox 3.x because of the way extensions are installed. SeaMonkey 1.1.x is related to Firefox 2.x and is not affected because of a different scheme for installing extensions. I don't know if SeaMonkey 2.x will be affected, but it does use the same extension installation scheme as Firefox 3.x. In any case, I've avoided this problem. My Automatic Updates is set for Notify me but don't automatically download or install them. Since I use Internet Explorer only to get Windows updates and to check my own Web pages, I have rejected all .NET Framework (and ActiveX) updates. Suddenly, I'm very glad I did not update my Windows XP SP2 to Windows XP SP3. The latter would have included this malware. See bug #499521 at https://bugzilla.mozilla.org/show_bug.cgi?id=499521. It turns out that this problem was known at the beginning of February. New bug #499521 is a duplicate of bug #476430 (see https://bugzilla.mozilla.org/show_bug.cgi?id=476430). I find it strange that there is some debate whether to take any corrective action. Thank you David for your most adroit observations. ___ support-seamonkey mailing list support-seamonkey@lists.mozilla.org https://lists.mozilla.org/listinfo/support-seamonkey
Re: Firefox 3.5 RC1 is appearing
Rostyslaw Lewyckyj wrote: Daniel wrote: Lester Caine wrote: JR WG wrote ... And are we really interested in what 'the opposition' are doing :) No, not really, except that it may influence where SM browser goes. Daniel I certainly read that as you contradicting yourself. Yeah!! Now that I re-read it, it does seem like I'm contradicting myself. Must have been one of those days. Daniel ___ support-seamonkey mailing list support-seamonkey@lists.mozilla.org https://lists.mozilla.org/listinfo/support-seamonkey
Re: Microsoft may be Firefox's worst vulnerability
David E. Ross wrote: On 6/20/2009 5:00 PM, Nairda wrote: snip Since I use Internet Explorer only to get Windows updates and to check my own Web pages, I have rejected all .NET Framework (and ActiveX) updates. Sorry, David! You only use IE to get updates and check your own webpages. As you use SM, I suspect your web pages would be more rules complaint than IE would need, so what do you find out by checking your web pages with IE?? Just interested! Daniel ___ support-seamonkey mailing list support-seamonkey@lists.mozilla.org https://lists.mozilla.org/listinfo/support-seamonkey
Re: Is this spam, or what??
Graham wrote: Paul B. Gallagher wrote: I see no indication that anything has been stripped out en route (by antivirus software, for example). My local AV log shows nothing, too. So I don't get the point of it... Two things are possible. First, it didn't bounce: your email address has been verified as existing, more junk may be on its way. Second, there's a URL in the message id. If something links to that, it may open a malicious web site (I'm not going there to find out). There may be other possibilities I've missed. Actually, siteprotect.com is my mail host's website, so if there's malware there, I'm in big trouble. ;-) Could this be a glitch in their mail processing software? I'll ask... -- War doesn't determine who's right, just who's left. -- Paul B. Gallagher ___ support-seamonkey mailing list support-seamonkey@lists.mozilla.org https://lists.mozilla.org/listinfo/support-seamonkey
Preferences hangs
Using 1.1.16. I go into Preferences within Mail and News. Click Mail and Newgroups. The options for making SeaMonkey the defaults for mail and news are not checked. I check them and click on OK. It hangs and have to shut down. I am using my new Acer computer, 64 bit, Vista. Stan ___ support-seamonkey mailing list support-seamonkey@lists.mozilla.org https://lists.mozilla.org/listinfo/support-seamonkey
Re: Preferences hangs
stan wrote: Using 1.1.16. I go into Preferences within Mail and News. Click Mail and Newsgroups. The options for making SeaMonkey the defaults for mail and news are not checked. I check them and click on OK. It hangs and have to shut down. I am using my new Acer computer, 64 bit, Vista. Can you set the default mail and news programs through the operating system? In previous versions of Windows you could... -- War doesn't determine who's right, just who's left. -- Paul B. Gallagher ___ support-seamonkey mailing list support-seamonkey@lists.mozilla.org https://lists.mozilla.org/listinfo/support-seamonkey
Re: Preferences hangs
Paul B. Gallagher wrote: stan wrote: Using 1.1.16. I go into Preferences within Mail and News. Click Mail and Newsgroups. The options for making SeaMonkey the defaults for mail and news are not checked. I check them and click on OK. It hangs and have to shut down. I am using my new Acer computer, 64 bit, Vista. Can you set the default mail and news programs through the operating system? In previous versions of Windows you could... The list Vista has to choose from doesn't include SeaMonkey. There is another function for choosing SeaMonkey and when I do that it hangs. Stan ___ support-seamonkey mailing list support-seamonkey@lists.mozilla.org https://lists.mozilla.org/listinfo/support-seamonkey
Re: Microsoft may be Firefox's worst vulnerability
David E. Ross wrote: By the way, the latest W3Schools report now indicates that more people are now using Gecko browsers than IE. Of course, the specialized nature of the W3Schools Web site skews their survey so that it really doesn't reflect the general audience of Internet users. Well, the number you get depends on whom you ask http://en.wikipedia.org/wiki/Usage_share_of_web_browsers --but the trend is clear: folks are tried of infection-friendly ecosystems; attempts at vendor lock-in; poor rendering; browsers that are lagging WRT features[1]. . . [1] WRT the multi-process thing, WebKit-based browsers (like Google Chrome) and shudder Trident-based IE8 are out front of Gecko-based browsers. ...but not being able to BLOCK bandwidth-hogging/screen-space-wasting junk is a big negative for those offerings. ___ support-seamonkey mailing list support-seamonkey@lists.mozilla.org https://lists.mozilla.org/listinfo/support-seamonkey
Re: Preferences hangs
On 06/21/09 07:16, stan wrote: Martin Feitag wrote: stan schrieb: Using 1.1.16. I go into Preferences within Mail and News. Click Mail and Newgroups. The options for making SeaMonkey the defaults for mail and news are not checked. I check them and click on OK. It hangs and have to shut down. I am using my new Acer computer, 64 bit, Vista. Stan Have you tried running SM as with administrative rights? (Being an administrator is not enough on Vista and above. Right-click on the shortcut = ...) SM1 is known to have trouble on 64bit Vista/Win7 afaik. If the hint mentioned above doesn't work, you might want to have a look at the current SM2.0 alpha. regards Martin I don't understand what you mean by Right-click on the shortcut = ...) Stan He means that you can right-click on the shortcut used to launch SeaMonkey, and there is an option to run it as administrator (or something like that - it's been a while since I've seen Vista). Just select that and you should be asked for the Administrator password. Then it will run with Administration rights. If you then make the setting changes you may have better luck with them working. Note: I don't know whether or not this is your problem or if this will work, I'm just interpreting the response for you. Best of luck. ___ support-seamonkey mailing list support-seamonkey@lists.mozilla.org https://lists.mozilla.org/listinfo/support-seamonkey
What most advanced Java compatible with Seamonkey?
Hi: I have the latest version of SeaMonkey -- SeaMonkey 1.1.16 Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.21) Gecko/20090403 SeaMonkey/1.1.16 I just installed Java-6-Update-14 but it's not working. Java doesn't show up on the test website [i.e. http://java.com/en/download/help/testvm.xml ]. Also games using Java don't work. So I had to go back to using Java-6-Update-13. Now everything except my Excite Mail account is working. Apparently the Excite Mail application requires the latest version of Java as of a couple of days ago. What's going on here? What is the latest version of Java that SeaMonkey is fully-compatible with? Alternatively, what is the most advanced Mozilla-based, non-Firefox browser that is fully-compatible with Java-6-Update-14? I don't like Firefox or Internet Explorer at all. I prefer SeaMonkey or Mozilla-Suite anytime. Thanks a bunch ___ support-seamonkey mailing list support-seamonkey@lists.mozilla.org https://lists.mozilla.org/listinfo/support-seamonkey
Re: Is this spam, or what??
Paul B. Gallagher wrote: Graham wrote: Paul B. Gallagher wrote: I see no indication that anything has been stripped out en route (by antivirus software, for example). My local AV log shows nothing, too. So I don't get the point of it... Two things are possible. First, it didn't bounce: your email address has been verified as existing, more junk may be on its way. Second, there's a URL in the message id. If something links to that, it may open a malicious web site (I'm not going there to find out). There may be other possibilities I've missed. Actually, siteprotect.com is my mail host's website, so if there's malware there, I'm in big trouble. ;-) Could this be a glitch in their mail processing software? I'll ask... I think that you did not get spam. There is no url on your message - so no malicious things :-) The siteprotect.com you see is the last part of the message ID of the mail. (all is normal) Doing some research on the web, i have found a reception of a similar mail. The problem came from the mail server .. or something like that. Here is the Site Administrator answer: Okay, it seems it was a booboo with the postfix aliases on an internal mail server. An address which should have been aliased to /dev/null was actually aliased to mailer-daemon. Anything that winds up at mailer-daemon gets sent out to our general mailing list, hence you all got that mail. oops! sorry, everyone. just a mistake, there was nothing malicious in the email, so nothing to worry about. Sorry again. -- You may read the complete finding at: http://forum.mandriva.com/viewtopic.php?p=422313 ___ support-seamonkey mailing list support-seamonkey@lists.mozilla.org https://lists.mozilla.org/listinfo/support-seamonkey
Re: What most advanced Java compatible with Seamonkey?
GreenXenon wrote: Hi: I have the latest version of SeaMonkey -- SeaMonkey 1.1.16 Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.21) Gecko/20090403 SeaMonkey/1.1.16 I just installed Java-6-Update-14 but it's not working. Java doesn't show up on the test website [i.e. http://java.com/en/download/help/testvm.xml ]. Also games using Java don't work. So I had to go back to using Java-6-Update-13. Now everything except my Excite Mail account is working. Apparently the Excite Mail application requires the latest version of Java as of a couple of days ago. What's going on here? What is the latest version of Java that SeaMonkey is fully-compatible with? Alternatively, what is the most advanced Mozilla-based, non-Firefox browser that is fully-compatible with Java-6-Update-14? I don't like Firefox or Internet Explorer at all. I prefer SeaMonkey or Mozilla-Suite anytime. Thanks a bunch Try reinstalling because I'm running Java 6, Update 14 just fine here without problems... -- Jaime A. Cruz Secretary Nassau Wings Motorcycle Club http://www.nassauwings.org/ AMA District 34 http://www.AMADistrict34.com/ Pop's Run http://www.popsrun.org/ ___ support-seamonkey mailing list support-seamonkey@lists.mozilla.org https://lists.mozilla.org/listinfo/support-seamonkey
Re: What most advanced Java compatible with Seamonkey?
Cruz, Jaime wrote: GreenXenon wrote: Hi: I have the latest version of SeaMonkey -- SeaMonkey 1.1.16 Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.21) Gecko/20090403 SeaMonkey/1.1.16 I just installed Java-6-Update-14 but it's not working. Java doesn't show up on the test website [i.e. http://java.com/en/download/help/testvm.xml ]. Also games using Java don't work. So I had to go back to using Java-6-Update-13. Now everything except my Excite Mail account is working. Apparently the Excite Mail application requires the latest version of Java as of a couple of days ago. What's going on here? What is the latest version of Java that SeaMonkey is fully-compatible with? Alternatively, what is the most advanced Mozilla-based, non-Firefox browser that is fully-compatible with Java-6-Update-14? I don't like Firefox or Internet Explorer at all. I prefer SeaMonkey or Mozilla-Suite anytime. Thanks a bunch Try reinstalling because I'm running Java 6, Update 14 just fine here without problems... May not be necessary. I had the same failure on their test page, read the instructions, and solved it. The answer was here: http://java.com/en/download/help/521500.xml Print or memorize the instructions, close SeaMonkey, update the setting in the Java Control Panel, then relaunch SeaMonkey and revisit the test page. -- War doesn't determine who's right, just who's left. -- Paul B. Gallagher ___ support-seamonkey mailing list support-seamonkey@lists.mozilla.org https://lists.mozilla.org/listinfo/support-seamonkey
Re: SM 2.0 and Firefox 3.5 RC1 is appearing
JR WG wrote: Exactly the reason that I left the original memo, that Firefox 3.5 RC1 was out in the wild. Hopefully, this means that SM 2, an obviously even better idea browser-and-then-some, is ever nearing its own introduction. This doesn't affect SeaMonkey 2.0 at all, as the problem is syncing with a Thunderbird release. ___ support-seamonkey mailing list support-seamonkey@lists.mozilla.org https://lists.mozilla.org/listinfo/support-seamonkey
Re: Microsoft may be Firefox's worst vulnerability
Benoit Renard wrote: David E. Ross wrote: The malware is a Firefox extension that (among other things) disables the ability of Firefox to remove it. As far as I know, they didn't disable uninstallation. It just isn't possible while using Firefox because it's installed on the application level, and not in the user's profile. If only that was the case. Please see below. http://annoyances.org/exec/show/article08-600 Snip: Unfortunately, Microsoft in their infinite wisdom has taken steps to make the removal of this extension particularly difficult - open the Add-ons window in Firefox, and you'll notice the Uninstall button next to their extension is grayed out! Their reasoning, according to Microsoft blogger Brad Abrams, is that the extension needed support at the machine level in order to enable the feature for all users on the machine, which, of course, is precisely the reason this add-on is bad news for all Firefox users. http://blogs.techrepublic.com.com/security/?p=1716tag=nl.e011 Snip: We added this support at the machine level in order to enable the feature for all users on the machine. Seems reasonable right? Well, turns out that enabling this functionality at the machine level, rather than at the user level means that the “Uninstall” button is grayed out in the Firefox Add-ons menu because standard users are not permitted to uninstall machine-level components. ___ support-seamonkey mailing list support-seamonkey@lists.mozilla.org https://lists.mozilla.org/listinfo/support-seamonkey
Re: Microsoft may be Firefox's worst vulnerability
In news:brsdnaea4pknukpxnz2dnuvz_vqdn...@mozilla.org, Nairda a...@me.first wrote: http://blogs.techrepublic.com.com/security/?p=1716tag=nl.e011 Snip: We added this support at the machine level in order to enable the feature for all users on the machine. Seems reasonable right? Well, turns out that enabling this functionality at the machine level, rather than at the user level means that the “Uninstall” button is grayed out in the Firefox Add-ons menu because standard users are not permitted to uninstall machine-level components. Irresponsible journalism, all too typical in the tech press. The techrepublic guy is quoting Brad Abrams' blog entry, http://blogs.msdn.com/brada/archive/2009/02/27/uninstalling-the-clickonce-support-for-firefox.aspx, but he neglected to quote this part: Update (5/2009): We just release an update to .NET Framework 3.5 SP1 that makes the firefox plug in a per-user component. This makes uninstall a LOT cleaner.. none of the steps below are required once this update is installed. That update was made to the blog *before* the techreport article was posted. No browser, including Firefox and SeaMonkey, can protect the user from anything any app that the user chooses to run with administrative privileges. In this case, the app was Windows Update, which a lot of people trust, but it could have been anything. -- »Q« /\ ASCII Ribbon Campaign \ / against html e-mailX http://asciiribbon.org/ / \ ___ support-seamonkey mailing list support-seamonkey@lists.mozilla.org https://lists.mozilla.org/listinfo/support-seamonkey
Re: What most advanced Java compatible with Seamonkey?
On 06/21/09 15:37, Paul B. Gallagher wrote: Cruz, Jaime wrote: GreenXenon wrote: Hi: I have the latest version of SeaMonkey -- SeaMonkey 1.1.16 Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.21) Gecko/20090403 SeaMonkey/1.1.16 I just installed Java-6-Update-14 but it's not working. Java doesn't show up on the test website [i.e. http://java.com/en/download/help/testvm.xml ]. Also games using Java don't work. So I had to go back to using Java-6-Update-13. Now everything except my Excite Mail account is working. Apparently the Excite Mail application requires the latest version of Java as of a couple of days ago. What's going on here? What is the latest version of Java that SeaMonkey is fully-compatible with? Alternatively, what is the most advanced Mozilla-based, non-Firefox browser that is fully-compatible with Java-6-Update-14? I don't like Firefox or Internet Explorer at all. I prefer SeaMonkey or Mozilla-Suite anytime. Thanks a bunch Try reinstalling because I'm running Java 6, Update 14 just fine here without problems... May not be necessary. I had the same failure on their test page, read the instructions, and solved it. The answer was here: http://java.com/en/download/help/521500.xml Print or memorize the instructions, close SeaMonkey, update the setting in the Java Control Panel, then relaunch SeaMonkey and revisit the test page. Interesting. I went to that control panel and found that Java was not enabled for Mozilla browsers, yet my SeaMonkey runs Java just fine (I went to the Java test page, and it showed that Java was installed and ran the little dancing whatever applet). ___ support-seamonkey mailing list support-seamonkey@lists.mozilla.org https://lists.mozilla.org/listinfo/support-seamonkey
Re: What most advanced Java compatible with Seamonkey?
On Jun 21, 3:42 pm, GreenXenon glucege...@gmail.com wrote: Hi: I have the latest version of SeaMonkey -- SeaMonkey 1.1.16 Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.21) Gecko/20090403 SeaMonkey/1.1.16 I just installed Java-6-Update-14 but it's not working. Java doesn't show up on the test website [i.e.http://java.com/en/download/help/testvm.xml ]. Also games using Java don't work. So I had to go back to using Java-6-Update-13. Now everything except my Excite Mail account is working. Apparently the Excite Mail application requires the latest version of Java as of a couple of days ago. What's going on here? What is the latest version of Java that SeaMonkey is fully-compatible with? Alternatively, what is the most advanced Mozilla-based, non-Firefox browser that is fully-compatible with Java-6-Update-14? I don't like Firefox or Internet Explorer at all. I prefer SeaMonkey or Mozilla-Suite anytime. Thanks a bunch Hi GreenXenon, You make no mention of having read the faq's at http://seamonkey.ilias.ca/browserfaq/ So I'll suggest it here. bH ___ support-seamonkey mailing list support-seamonkey@lists.mozilla.org https://lists.mozilla.org/listinfo/support-seamonkey
