Search found 131 matches

by WilliamK
2019-06-16, 00:56
Forum: General Discussion
Topic: Javascript Template Attack
Replies: 15
Views: 503

Re: Javascript Template Attack

I m a little thick this morning and would appreciate someone spelling out just what the problem is. Ok, so some browser properties are available. Well that is no biggy as the web depends on a modicum of browser info to better serve different visitors. I recall mention of ALL browsers but wonder whic...
by WilliamK
2019-06-14, 15:09
Forum: General Discussion
Topic: Javascript Template Attack
Replies: 15
Views: 503

Re: Javascript Template Attack

The research team said tests showed their method was able to distinguish between all 40 tested environments; distinguish browser down to exact version; determine installed extensions based on how they modified native property values; determine even individual extension settings; determine extremely...
by WilliamK
2019-06-08, 15:53
Forum: General Discussion
Topic: Article: "Most Secure Browser List," Palemoon on Top Five list
Replies: 10
Views: 929

Re: Article: "Most Secure Browser List," Palemoon on Top Five list

did you expect anything else? Well the press releases were impressive and must have impressed some technically minded folks because one client who is in the data protection industry depended on it as an integral part of their services. The PR was some of the most exquisite wordsmithing I have ever ...
by WilliamK
2019-06-08, 14:59
Forum: General Discussion
Topic: Article: "Most Secure Browser List," Palemoon on Top Five list
Replies: 10
Views: 929

Re: Article: "Most Secure Browser List," Palemoon on Top Five list

Sorry, but that list does not take into account the browsers specially designed to protect the user's computer from being hijacked. I was not aware until recently that there were such things until a client pointed one out to compare with browsers that I knew. That one in particular had funding of 12...
by WilliamK
2018-09-17, 19:42
Forum: General discussion (old)
Topic: The E.U. has gone insane today
Replies: 31
Views: 1698

Re: The E.U. has gone insane today

Breaching copyright seems to be privilege for journalists and Google makes billions from it.

What can we do about that?
by WilliamK
2018-09-11, 16:10
Forum: Development (discussion)
Topic: SDK error
Replies: 4
Views: 323

Re: SDK error

What version of the codebase are you trying to build? 27.9.3 32-bit. It works well on my main 64-bit PC but that has a variety of later VS resources and SDKs. This one hasn't been used since 2014 and is 32-bit using VS 2010 that I upgraded to VS 2013 and then updated with Update3 to get past a bunc...
by WilliamK
2018-09-11, 10:08
Forum: Development (discussion)
Topic: SDK error
Replies: 4
Views: 323

SDK error

I am away from my office and have setup PM builds on a different computer. But when I build on 32-bit using start-shell-msvc2013.bat I am getting this error...

configure: error: DirectX SDK at C:/Program Files/Microsoft DirectX SDK (March 2009) appears broken
by WilliamK
2018-08-14, 05:58
Forum: Browser plug-ins
Topic: Detect if plugin is running
Replies: 3
Views: 352

Re: Detect if plugin is running

Yes navigator.plugins will tell if they are installed/enabled, but I need to know when are being used... start to finish.
by WilliamK
2018-08-13, 22:42
Forum: Browser plug-ins
Topic: Detect if plugin is running
Replies: 3
Views: 352

Detect if plugin is running

Our custom browser supports a couple of NPAPI plugins and we would like to detect if those plugins are running so that we can accommodate them better. We considered detecting if their Object tags or mimetype were found in the HTML but because some users inject the object tag using JavaScript that ma...
by WilliamK
2018-08-05, 02:23
Forum: General support
Topic: PM portable-ish ??
Replies: 9
Views: 722

Re: PM portable-ish ??

While it's not "portable" it's pretty darned close, and I may actually experiment and try running from a thumbdrive I am testing our latest "non-portable" builds from a USB thumbdrive all the time. Then from the same thumbdrive I can test on Win XP, Vista, 7, 8 etc using VMware workstation. Where i...
by WilliamK
2018-08-02, 07:24
Forum: General support
Topic: Broken Website?
Replies: 10
Views: 499

Re: Broken Website?

Just another WordPress site. It takes a while to load. But it does eventually arrive.
by WilliamK
2018-07-29, 05:56
Forum: Browser extensions
Topic: Code signing extensions
Replies: 12
Views: 517

Re: Code signing extensions

Thanks for that. Where might I be able to locate the code for the status bar for some customisation?
by WilliamK
2018-07-28, 12:07
Forum: Browser extensions
Topic: Code signing extensions
Replies: 12
Views: 517

Re: Code signing extensions

I need to limit which plugins and extensions can be installed. Plugins are not a problem as I know where they live. The language extensions are invaluable. Codesigning and checking certs may be the long way around, so I am looking into ways of limiting extension install by using a whitelist, ie: lis...
by WilliamK
2018-07-28, 11:29
Forum: Browser extensions
Topic: Code signing extensions
Replies: 12
Views: 517

Re: Code signing extensions

We may look into whitelisting which extensions are allowed to be installed. A point in the right direction will be helpful. I see that the language XPIs remain unpacked and get installed to C:\Users\****\AppData\Roaming\Moonchild Productions\Pale Moon\Profiles\2lk5qn0i.default\extensions When instal...
by WilliamK
2018-07-27, 12:05
Forum: Browser extensions
Topic: Code signing extensions
Replies: 12
Views: 517

Re: Code signing extensions

AMO might be using their own self-signing. But a lot will have changed since FF24, including SHA256 certs which we are obligated to use today. From what I can see the only diff between signed and unsigned is 3 files in a META-INF folder. I suppose that they comprise a manifest and bitcount of each f...
by WilliamK
2018-07-27, 03:47
Forum: Browser extensions
Topic: Code signing extensions
Replies: 12
Views: 517

Re: Code signing extensions

After reading signing instructions on a Cert site... https://knowledge.digicert.com/solution/SO20728.html I decided to give the Key Manager one last try. But the latest Key Manager is not signed and would not install onto any Firefox version later than 24. By inspecting inside I noticed a limitation...
by WilliamK
2018-07-27, 01:13
Forum: Browser extensions
Topic: Code signing extensions
Replies: 12
Views: 517

Re: Code signing extensions

Is there a reason you can't try Key Manager? It looks to still be on AMO That is the one that I tried. Won't run in Firefox unless it's an old ESR version (17). Later versions of Firefox failed to support it due to the later plugin version not being signed (circa 2013). If they couldn't sign their ...
by WilliamK
2018-07-27, 00:05
Forum: Browser extensions
Topic: Code signing extensions
Replies: 12
Views: 517

Code signing extensions

I started a new post because existing topics were off in a different direction: - AMO automatically signs uploaded/approved extensions but that uses a Mozilla signature. I need to code sign some extensions with my own cert, ie: extensions that will be allowed to run in our custom browser. I used to ...
by WilliamK
2018-07-02, 11:27
Forum: General support
Topic: HTTPS & Palemoon
Replies: 20
Views: 1046

Re: HTTPS & Palemoon

Moonchild wrote:You may want to consider emptying your %TEMP% folder now and then
I was doing this anyway because my 500 GB Raid kept filling up. Now I have 179 GB free.
by WilliamK
2018-07-02, 05:43
Forum: General support
Topic: Captchas hell
Replies: 156
Views: 12946

Re: Captchas hell

I'm not sure why Google designs their captchas this way. Because they can be exploited. I have seen spamming software that can read the image and in most cases answer correctly. After a spam run the unsure Capthcas are left for you to answer manually, and in most of those cases it was guesswork bec...