Text 1364, 111 rader
Skriven 2012-07-27 17:07:42 av mark lewis (1:3634/12.0)
   Kommentar till text 1356 av Roy Witt (1:387/22)
Ärende: Too Funny
=================
 ml>> like noscript or abp?

 RW>> Don't follow me (on the internet) and the usual Flash player and
 RW>> Adobe reader, some anti-pop up, etc.. They're all up to date.

 ml> the don't follow me shouldn't be needed any more...

 RW> If it's incompatible with FFv12, then it would have been disabled
 RW> when v12 was installed. That's one of the greatest things about FF,
 RW> it knows what's good for FF and what isn't.

i didn't say it was incompatible... i said not needed because it is built-in...

as far as disabling plugins and addons, that's a simple version check in most
cases... the plugin/addon lists the highest version of FF that it is compatible
with... if the FF being installed is a higher version, it will disable them...

 ml> it is built into FF these days... since FF12 i beleive... noscript
 ml> and adblockplus take care of popups as does the built in popup
 ml> blocking stuff...

 RW> Not that I'm aware of (although I don't see any mention of it
 RW> listed at 'about:addons'). 

      FF12->Tools->Options->Privacy : first box at top... 
        Tell websites I do not want to be tracked

 RW> My Yahoo webmail site has this nasty habit of posting ads next to 
 RW> my email. They actually kick my email to one side so it's less 
 RW> readable. I usually (block) those when they appear.

noscript and adblockplus... i'm in my yahoo webmail thing right now... this
account has been around for 11 years or so according to the two waiting emails
from yahoo from april and july of 20011... they are about upgrading to the new
webmail interface ;)

there is a bar on the right where ads would appear but there's nothing there at
all... noscript and/or adblockplus are blocking them... there is a small right
pointing triangle that i hovered over and it said to click that to hide the
advertising... but, like i say, there's nothing in there... it is an empty
area...

 ml>> if the css file was from another domain/host, one or both of these
 ml>> would have prevented it...

 RW>> I would have seen a request to allow a switch to that domain/host.
 RW>> That is the first flag I get when a web-site wants to shovel me off
 RW>> to something else.

 ml> i didn't say switch... i meant "pulled from"... they do this stuff
 ml> all the time... you go to foobar.com and they are using scripts
 ml> pulled from googleanalytics, for instance... or they have a java
 ml> based menuing system and those .js files are pulled from another
 ml> domain...

 RW> Java is also disabled in FFv12...at least Java Deployment Toolkit
 RW> and Java Platform SE are both disabled. Both of them are noted as
 RW> creating security and stability issues, thus the disablement by
 RW> FFv12 install. 

have you not uninstalled java and installed the newest version? i used to have
those until i updated... they were still there so i uninstalled and reinstalled
and they are gone... right now i do have the java deployment toolkit
6.0.230.5... it is not disabled and it is up to date...

[trim]

 ml> i won't even mention the systems that have dedicated machines
 ml> capturing /all/ network traffic packets and saving them off to large
 ml> storage for later analysis... and then there are those systems that
 ml> automatically take those pcaps (what the network packet captures are
 ml> called) and actually carve the binary files out of them for analysis
 ml> to find stuff that folk haven't even seen yet...

 RW> LOL! Those people need a hobby...

that IS their hobby... and livelyhood... they are the security researchers that
find all these critters and let us know about them ;)

 ml> i've seen way too many java scripts that download PDFs that in turn
 ml> use java to download other things trying numerous methods of
 ml> infesting a machine all at once and in just a few seconds... i wish i
 ml> had an easy example to post showing at least just an example URL that
 ml> these things call where the parameters indicate which adobe, java,
 ml> flash and other versions of known holey software you are running...
 ml> they know which ones have certain holes and they take advantage of
 ml> them all too fast to think about...

 RW> Those people need a different hobby.

for some of those people, it is their livelyhood... coding to make money to
live on... whether they know they are coding for a virus or trojan or whatever
is something else, though...

 ml> ignorance is bliss but i prefer to know whats going on and be
 ml> paranoid about what could be happening so that i can look and find
 ml> that which is truly out to get me and my machines ;)

 RW> I like being in the dark and go about daily life without worrying
 RW> about that crap.

ummmhummm... not when blackhole infests your system and your bank account is
cleared out because it watched you doing your online banking stuffs... without
someone doing the above, those things would run more rampant than they already
do... some of them disable anti-vir but leave it looking like it is still
running and doing its job... other stuff simply isn't even known about and so
the anti-vir doesn't even look for it...

)\/(ark

 * Origin:  (1:3634/12)