Re: Java is Blocked again today

2013-03-04 Thread Rickles

David E. Ross wrote:

On 3/3/13 12:23 PM, Rickles wrote:

MCBastos wrote:

Interviewed by CNN on 02/03/2013 15:51, question told the world:


My wife has not used her computer this week.. So this explains why
Java works on hers this morning..on pogo
Block list has not been updated more in likely.
Both computers are identical...
But her JAVA is 7u10
Mine is 7u15
I told her not to update her Java .

Reading the bugzilla. We are being Blocked Because FACEBOOK got hacked..

Could be FACEBOOK does not have Java Configured Correctly . So Ever
other WEBSITE that uses JAVA has to Suffer Because The Almighty
FACEBOOK's Security is not Enabled correctly .

Let Facebook take care of itself .


I think you misunderstood the issue.

The problem is not that a few computers belonging to Facebook engineers
got hacked; the problem is that this event demonstrates that:

a) There is a bug in Java
b) Which is ALREADY BEING EXPLOITED by hackers.

If this exploit only affected Facebook, there would be no reason for
worry. But the thing is, it DOES present a risk for EVERY user. Facebook
can take care of itself, but most small users CANNOT. It's to protect
those small users that the block has been implemented.  So, for the
moment, it's considered dangerous to have Java running automatically.

Even if the latest exploit has been band-aided, the recent pattern of
security problems with Java raises serious doubts about its overall
security. Simply stated, Java is no longer worth the trust of Internet
users -- until such a time as it can regain that trust, Mozilla opted to
place it in the click-to-run category, which needs an explicit OK
from the user every time it is invoked by a site.

Staying with an older Java release won't help; if anything, it will be
worse, since those older releases are bound to be even more emphatically
blocked.


You raise a point I'd appreciate clarification on: explicit OK from the
user.  The problem several of us have is that, when visiting a site
which uses Java, we are not ASKED if it's OK to run Java, the site
simply fails.  Despite continually un- and re-installing Java to allow
for 'clean' installs, certificate updates, etc., we're not being
prompted to click a permissions dialog, we're simply A) told by the web
site that we don't have Java running, or B) nothing happens at all.

The current state of the Java 7u15 plugin states this plugin is known to
have vulnerabilities, but nothing actually says it's blocked (at least
on my machine at the mo.)  In fact, the 'disable' button is available if
I want to turn it off, which infers it's still running.  But the Pogo
web site now looks for Java before allowing a Java-based game to run,
and it tells me I haven't got Java installed.

And that's contradictory, based on the observed interface.



When you go to a Web page that uses Java but the blocklist prevents Java
from running, you should see an icon at the left end of the URI bar
(address bar).  The icon resembles a small Lego block.  Click on that
icon to get a pull-down menu to override the blocklist for that Web
page.  No, this is NOT intuitive and definitely NOT user-oriented.  And
no, I know of no way to undo the override.

And THAT's what I hadn't seen before in any previous posts!  Thank you 
for that head's up.  At least it is site-specific, so the wife can carry 
on playing her games.

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: adding profile manager to windows 7 desktop.

2013-03-04 Thread Daniel

cqbrodie wrote:

Thank you very much to Messrs Gallagher and Taylor for your solution. It
was easy to do.
  However, in having the profile manager now on the desktop, when I
click on any of the 3 additional users, it revert to the primary one
only, and before on the XP version, each
of the additional ones were separate and had their own default webpages.
When I tried to add their respective email accounts using the first
additional one,
it became a sub-folder of the main account that's not what I would like
to do.

So again I would appreciate any guidance in how to solve this.
regards
Cliff


Cliff, when you set up the three accounts, (Tools-Switch 
Profiles-Manage Profiles-Create Profile), on the second screen, where 
you gave the new profile a distinctive name, (on the same screen) did 
you also choose a different location (i.e. Choose Folder) for the new 
profile??


--
Daniel

User agent: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:19.0) 
Gecko/20100101 SeaMonkey/2.16 Build identifier: 20130207001007

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Java is Blocked again today

2013-03-04 Thread question

Rickles wrote:

David E. Ross wrote:

On 3/3/13 12:23 PM, Rickles wrote:

MCBastos wrote:

Interviewed by CNN on 02/03/2013 15:51, question told the world:


My wife has not used her computer this week.. So this explains why
Java works on hers this morning..on pogo
Block list has not been updated more in likely.
Both computers are identical...
But her JAVA is 7u10
Mine is 7u15
I told her not to update her Java .

Reading the bugzilla. We are being Blocked Because FACEBOOK got
hacked..

Could be FACEBOOK does not have Java Configured Correctly . So
Ever
other WEBSITE that uses JAVA has to Suffer Because The Almighty
FACEBOOK's Security is not Enabled correctly .

Let Facebook take care of itself .


I think you misunderstood the issue.

The problem is not that a few computers belonging to Facebook engineers
got hacked; the problem is that this event demonstrates that:

a) There is a bug in Java
b) Which is ALREADY BEING EXPLOITED by hackers.

If this exploit only affected Facebook, there would be no reason for
worry. But the thing is, it DOES present a risk for EVERY user.
Facebook
can take care of itself, but most small users CANNOT. It's to protect
those small users that the block has been implemented.  So, for the
moment, it's considered dangerous to have Java running automatically.

Even if the latest exploit has been band-aided, the recent pattern of
security problems with Java raises serious doubts about its overall
security. Simply stated, Java is no longer worth the trust of Internet
users -- until such a time as it can regain that trust, Mozilla
opted to
place it in the click-to-run category, which needs an explicit OK
from the user every time it is invoked by a site.

Staying with an older Java release won't help; if anything, it will be
worse, since those older releases are bound to be even more
emphatically
blocked.


You raise a point I'd appreciate clarification on: explicit OK from the
user.  The problem several of us have is that, when visiting a site
which uses Java, we are not ASKED if it's OK to run Java, the site
simply fails.  Despite continually un- and re-installing Java to allow
for 'clean' installs, certificate updates, etc., we're not being
prompted to click a permissions dialog, we're simply A) told by the web
site that we don't have Java running, or B) nothing happens at all.

The current state of the Java 7u15 plugin states this plugin is known to
have vulnerabilities, but nothing actually says it's blocked (at least
on my machine at the mo.)  In fact, the 'disable' button is available if
I want to turn it off, which infers it's still running.  But the Pogo
web site now looks for Java before allowing a Java-based game to run,
and it tells me I haven't got Java installed.

And that's contradictory, based on the observed interface.



When you go to a Web page that uses Java but the blocklist prevents Java
from running, you should see an icon at the left end of the URI bar
(address bar).  The icon resembles a small Lego block.  Click on that
icon to get a pull-down menu to override the blocklist for that Web
page.  No, this is NOT intuitive and definitely NOT user-oriented.  And
no, I know of no way to undo the override.


And THAT's what I hadn't seen before in any previous posts!  Thank you
for that head's up.  At least it is site-specific, so the wife can carry
on playing her games.

 Don't forget to cancel the Appointment with the Divorce Lawyers 
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: adding profile manager to windows 7 desktop.

2013-03-04 Thread Daniel

Daniel wrote:

cqbrodie wrote:

Thank you very much to Messrs Gallagher and Taylor for your solution. It
was easy to do.
  However, in having the profile manager now on the desktop, when I
click on any of the 3 additional users, it revert to the primary one
only, and before on the XP version, each
of the additional ones were separate and had their own default webpages.
When I tried to add their respective email accounts using the first
additional one,
it became a sub-folder of the main account that's not what I would like
to do.

So again I would appreciate any guidance in how to solve this.
regards
Cliff


Cliff, when you set up the three accounts, (Tools-Switch
Profiles-Manage Profiles-Create Profile), on the second screen, where
you gave the new profile a distinctive name, (on the same screen) did
you also choose a different location (i.e. Choose Folder) for the new
profile??


Cliff responded to me via e-mail:-

Quote
Thanks very much for your reply to my question about setting up profile 
manager on my new PC.


What I did do, was to delete the least important user name in the group 
of 3 and then used profile manager to open a new user and I did not 
change the profile location and went thru the new setup and it worked.


I suppose that did create a new folder.  Then I did the same for the 2 
remaining users.


I presume you are in Australia.  I'm in sunny northern California ( but 
somewhat cool to cold at night!)

regards

Cliff Brodie
End Quote

Yes, I'm in Australia, and it's been *very* sunny here for the past few 
months!! and bloody hot, too!! (apparently, we've just set a new record 
for days in a row with a top temp of over 35 degrees Celsius (97 degrees F)


--
Daniel

User agent: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:19.0) 
Gecko/20100101 SeaMonkey/2.16 Build identifier: 20130207001007

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Deleted Cookies Blocking Future Cookies

2013-03-04 Thread David E. Ross
When I delete a cookie, there is a checkbox that -- if checked --
prevents its domain from setting any future cookies.  Does this checkbox
have a preference variable?

-- 
David E. Ross
http://www.rossde.com/

Are taxes too high in the U.S.?  Check the bar graph
at http://www.rossde.com/taxes/trickling.html to see.
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey