NoOp wrote:
> On 12/15/2008 02:58 PM, NoOp wrote:
>   
>> On 12/13/2008 08:34 PM, Justin Wood (Callek) wrote:
>>
>>     
>>> Of note to everyone here is that Mozilla (SeaMonkey, Firefox etc.) 
>>> report EVERY security bug once fixed and what it was. Some companies 
>>> like IE, Apple, and possibly even Google (for chrome -- no data), if a 
>>> security bug is only ever found and reported internally, they won't make 
>>> it even known that it _ever_ existed. Where we do and fix it anyway. It 
>>> is a very open community, therefore the potential for others to 
>>> accurately gauge what bugs are fixed on our side is high, whereas on 
>>> Microsoft or Apple's side is relatively low.
>>>
>>>       
>> Agree.
>>
>> Along these lines, this might be of interest to try with SeaMonkey...
>>
>> http://www.info-svc.com/news/2008/12-12/
>> [Google Chrome Receives Lowest Password Security Score]
>>   http://www.info-svc.com/news/2008/12-12/pm-evaluator/
>> [Password Manager Evaluator v2.0]
>>
>> If I get some time later I'll try it with SM 1.1.14 and 2.0a3pre to see
>> what the results are.
>>
>>     
>
> 1.1.14:
> Report
> Test Performed        Result
> Action Authority Checked on Retrieval FAILED
> Action Authority Checked on Save      FAILED
> Action Authority Raises Warnings      FAILED
> Action Path Checked on Retrieval      FAILED
> Action Path Checked on Save   FAILED
> Action Scheme Checked on Retrieval    FAILED
> Action Scheme Checked on Save         FAILED
> Action Scheme Raises Warnings         FAILED
> Action Scheme Prevented if Unsafe     FAILED
> Autocomplete=Off Prevents Form Fills  FAILED
> Invisiblility Prevents Form Fills     PASSED
> Method Checked on Retrieval   FAILED
> Method Raises Warnings        FAILED
> Multiple Paths Per User Per Authority FAILED
> Multiple Ports Per User Per Host      FAILED
> Multi. Schemes Per User Per Authority FAILED
> Page Path Checked on Retrieval        FAILED
> Random Name Attr. Prevents Form Fills PASSED
> User Required for PW Retrieval        FAILED
> User Required for PW Save     FAILED
> Valid URIs Don't Break Anything       PASSED
>
> I reckon I'll run the test again to make sure that I did everything
> correct.
>   
To ALL: There is a question that comes to my mind, as I see a SM 1.1.14
is mentioned, but cannot find that anywhere. Is there really a version
1.1.14 or is that a typo? :-[

-- 
Old Sarge-John Boyle
_______________________________________________
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Reply via email to