[Solved] Avast account login problem

[Freezing Moon]

I can't login to my Avast account anymore.
https://id.avast.com/?target=https%3A%2 ... m%2F#login

I see this :
http://i.imgur.com/ArnsCB1.png

...and I should see this (Cyberfox) :

http://i.imgur.com/wOhczJD.png

Firefox compatibility mode didn't help.
Tested in Pale Moon 25.6 on Windows 7 and Windows XP.
I didn't receive any help at Avast forum.
Thanks.

[satrow]

Pale Moon 25.6 is Beta, if the problem did not exist in earlier/Release versions then this should be logged in the Goanna beta feedback topic: viewtopic.php?f=5&t=9060

[Freezing Moon]

You are wrong. Pale Moon 25.6.0 is the latest stable version.

http://www.palemoon.org/palemoon-win32.shtml

[satrow]

Sorry, I misread it, getting snowblind ^^

[Moonchild]

I'd say this looks like an Avast website error, since they have multiple errors on that login page...

First off, invalid fonts.

Timestamp: 09/08/2015 19:20:31
Error: downloadable font: invalid version tag (font-family: "avasticon-font" style:normal weight:normal stretch:normal src index:1)
source: https://static.avast.com/my/avasticon/0 ... 26719cde71
Source File: https://static.avast.com/my/avasticon/0 ... n-font.css
Line: 0
Source Code:
@font-face { font-family: "avasticon-font"; font-style: normal; font-weight: normal; src: url("../fonts/avasticon-font.eot?#iefix") format("embedded-opentype"), url("../fonts/avasticon-font.woff?d4fc25197047839907c2ca26719cde71") format("woff"), url("../fonts/avasticon-font.ttf?d4fc25197047839907c2ca26719cde71") format("truetype"); }
Timestamp: 09/08/2015 19:20:31
Error: downloadable font: rejected by sanitizer (font-family: "avasticon-font" style:normal weight:normal stretch:normal src index:1)
source: https://static.avast.com/my/avasticon/0 ... 26719cde71
Source File: https://static.avast.com/my/avasticon/0 ... n-font.css
Line: 0
Source Code:
@font-face { font-family: "avasticon-font"; font-style: normal; font-weight: normal; src: url("../fonts/avasticon-font.eot?#iefix") format("embedded-opentype"), url("../fonts/avasticon-font.woff?d4fc25197047839907c2ca26719cde71") format("woff"), url("../fonts/avasticon-font.ttf?d4fc25197047839907c2ca26719cde71") format("truetype"); }

Secondly, CSP errors:

[19:25:32.646] Content Security Policy: The page's settings blocked the loading of a resource at https://bat.bing.com/bat.js ("default-src https://*.ff.avast.com:* https://*.avast.com:* https://*.googleapis.com:* https://*.gstatic.com:* https://*.googletagmanager.com:* https://*.googleadservices.com:* https://*.doubleclick.net:* https://*.google-analytics.com:* https://*.facebook.net:* https://*.facebook.com:* https://*.google.com:* 'unsafe-eval' 'unsafe-inline'").

bing.com is not allowed.

[19:25:33.099] Content Security Policy: The page's settings blocked the loading of a resource at https://www.google.se/ads/user-lists/10 ... 8175&ipr=y ("default-src https://*.ff.avast.com:* https://*.avast.com:* https://*.googleapis.com:* https://*.gstatic.com:* https://*.googletagmanager.com:* https://*.googleadservices.com:* https://*.doubleclick.net:* https://*.google-analytics.com:* https://*.facebook.net:* https://*.facebook.com:* https://*.google.com:* 'unsafe-eval' 'unsafe-inline'").
[19:25:33.110] Content Security Policy: The page's settings blocked the loading of a resource at https://www.google.se/ads/user-lists/98 ... 9996&ipr=y ("default-src https://*.ff.avast.com:* https://*.avast.com:* https://*.googleapis.com:* https://*.gstatic.com:* https://*.googletagmanager.com:* https://*.googleadservices.com:* https://*.doubleclick.net:* https://*.google-analytics.com:* https://*.facebook.net:* https://*.facebook.com:* https://*.google.com:* 'unsafe-eval' 'unsafe-inline'").
[19:25:33.126] Content Security Policy: The page's settings blocked the loading of a resource at https://www.google.se/ads/user-lists/96 ... 5201&ipr=y ("default-src https://*.ff.avast.com:* https://*.avast.com:* https://*.googleapis.com:* https://*.gstatic.com:* https://*.googletagmanager.com:* https://*.googleadservices.com:* https://*.doubleclick.net:* https://*.google-analytics.com:* https://*.facebook.net:* https://*.facebook.com:* https://*.google.com:* 'unsafe-eval' 'unsafe-inline'").

Localized google domains are not allowed.

Why is it that nobody seems to know how to use CSP but still insist on trying to use it?
CSP is, however, not the issue for loading the login. But what is, is something only avast support can answer, I'm afraid.

I do, however, see the following thrown back at us, which may be a starting point for them:

Code: Select all

[19:33:06.761] "%cRactive.js: %cPassing a `data` option with object and array properties to Ractive.extend() is discouraged, as mutating them is likely to cause bugs. Consider using a data function instead:

  // this...
  data: function () {
    return {
      myObject: {}
    };
  })

  // instead of this:
  data: {
    myObject: {}
  }" "color: rgb(114, 157, 52);" "color: rgb(85, 85, 85);"

[Moonchild]

Although, I guess. they don't want to support us anyway, considering the front and center placement of the following on their home page... :

avastchrome.png

[Night Wing]

I use the free Avast anti-virus program and I do recommend it to my friends since it has never let anything onto my computers.

I do not have an Avast account since I use the free version of Avast in Windows 7. However, Avast may recommend the Google Chrome browser, but Avast is "always" pushing Chrome. Everytime Avast updates to a newer version of Avast, in order to complete my upgrade, I "always" have to UNCHECK the two small windows with the prompts"

1. Install the Google Chrome browser and make your default browser.
2. Also install the Google Toolbar for Internet Explorer.

So the small banner is really nothing new for those in the know about why Avast is "always" recommending Chrome. Google is paying Avast.

[ninaholic]

Sorry, I misread it, getting snowblind ^^

Haha, that confused me as well. When I upgraded to v25.6 I thought it was the Goanna version, it took me quite a while before I said "wait a minute...". A few days later, I downloaded v26 beta1 and was reading the "changelog start page", and I was tricked again... not realizing it was changelog for v25.6 and not v26 until much later.

[Freezing Moon]

Is it possible to fix this on user side with userscript or something ?
I can use IE Tab V2, but honestly I don't want to because this add-on also includes a plugin and I avoid using plugins.

[Moonchild]

You can work around it by disabling CSP in the browser.
Set security.csp.enable to false.

Although it's kind of ironic that you have to make your browser less secure to log into a site that markets increased security

[Freezing Moon]

You can work around it by disabling CSP in the browser.
Set security.csp.enable to false.

Although it's kind of ironic that you have to make your browser less secure to log into a site that markets increased security

Thanks, but it didn't work. Nevermind, I'll just use different browser for Avast account.

[Moonchild]

Well if CSP errors aren't the issue, then it's likely the latter I indicated (which is something they need to fix in their scripting)

[Zitrus]

...............

[Freezing Moon]

it works in Pale Moon up to version 25.0.2

Interesting.

[_Poke_]

25.1.0 (2014-11-14)
Enhanced feature: Content Security Policy (CSP)
Pale Moon now fully supports the CSP 1.0 specification allowing websites to set restrictions on content to prevent XSS (Cross-site scripting) attacks.
Updated the Firefox Compatibility mode version to 31.9.

There are plenty more changes, so it's worth checking the rest but those two do sound like the most likely causes to me. Since you already tried disabling CSP, try use a different user agent or disable Firefox compatibility mode.

Off-topic:
Just because it happened to work in the past doesn't mean they were trying to support PM.

[Zitrus]

...............

[lunalupus]

I started this thread http://forum.palemoon.org/viewtopic.php?f=3&t=9653 last week, not realising that this thread was already running. During my investigations I discovered that the problem does not only involve Pale Moon 25.7.0 but also IE 9, so Vista users are locked out too unless they change to the likes of Chrome.

[Moonchild]

If 25.0.2 works and 25.1.0 does not, the likely change would indeed be CSP, but it isn't (since disabling CSP doesn't solve this).
Another change was that the UA override was changed. I tried several variations there, and it also doesn't work. Avast does use UA sniffing but I'm not sure how it's used because it's all passed to some fusion back-end that throws an error for supported OS/API.
It may also be related to the work done on ES6 in that period, and Avast's feature detection being incomplete, assuming a certain set of functions is available by only checking 1 or 2 of them, and mapping that to "known major browsers' sets" or similar.

There really isn't much more I can suggest from my end.

[nana2]

Look here: https://forum.avast.com/index.php?topic=177015.0

I also cannot login here with Palemoon browser and do not have
avast at the time loaded on my machine
but two days ago everything was fine with the older version of Palemoon

I cannot login at Avast using Pale Moon latest version but IE11 and Firefox latest version work fine.

Could it be something else in Pale Moon? Where can I download the previous version of Pale Moon so that I can verify if the poster at Avast (which I quoted above) is correct?

[Pallid Planetoid]

Pale Moon:
1) Cannot login to Avast forum
2) Cannot login to "My Avast account"

Firefox:
1) Cannot login to Avast forum
2) Could not login to "My Avast account", but later after logging in with the other two browser below I found I was able to login to "May Avast account".

Chrome:
1) Cannot login to Avast forum
2) Can login to "My Avast account" (but doing so doesn't help to login to forum)

IE:
1) Cannot login to Avast forum
2) Can login to "My Avast account" (but doing so still does not hep to login to forum)

So I have absolutely no access to the Avast forum at all using all four browsers (all browsers are current release), but do have access to at least the "My Avast account" in Chrome, Firefox and IE (see comment above re: FF).

I cannot post any of this on the Avast forum because I can't even login to do so.

It would appear there's a big problem with the Avast forum.

I always stay logged in but found that I had been logged off and now I can't get back in again.

I didn't notice any of this until I was doing some website "testing" on my newly installed Pale Moon and found this issue (I don't use the Avast forum much, some of the moderators are very obnoxious, so I have no idea how long this issue has been the case with the Avast forum)

There is an Avast forum thread on this issue regarding a topic in behalf of Pale Moon users, but probably the best possible answer in that topic was to try and login to "My Avast account" and stay logged in and see if Pale Moon users could then access the Avast forum. Obviously for me this didn't work.

And as I've posted the Avast forum issue is impacting ALL my browsers!!!