Text 1356, 134 rader
Skriven 2012-07-27 05:19:59 av Roy Witt (1:387/22)
   Kommentar till text 1327 av mark lewis (1:3634/12.0)
Ärende: Too Funny
=================
26 Jul 12 21:16, mark lewis wrote to Roy Witt:


 ml>> i should have asked before... any addons?

 RW>> Yeup.

 ml>> like noscript or abp?

 RW>> Don't follow me (on the internet) and the usual Flash player and
 RW>> Adobe reader, some anti-pop up, etc.. They're all up to date.

 ml> the don't follow me shouldn't be needed any more...

If it's incompatible with FFv12, then it would have been disabled when v12
was installed. That's one of the greatest things about FF, it knows what's
good for FF and what isn't.

 ml> it is built into FF these days... since FF12 i beleive... noscript
 ml> and adblockplus take care of popups as does the built in popup
 ml> blocking stuff...

Not that I'm aware of (although I don't see any mention of it listed at
'about:addons'). My Yahoo webmail site has this nasty habit of posting ads
next to my email. They actually kick my email to one side so it's less
readable. I usually (block) those when they appear.

 ml>  i have to specifically allow for some site to do this...

There's only one that I have to contend with that interferes with
browsing and that is the pop-up that disallows a website to show me stuff
from off of the site I'm on.

 ml>> if the css file was from another domain/host, one or both of these
 ml>> would have prevented it...

 RW>> I would have seen a request to allow a switch to that domain/host.
 RW>> That is the first flag I get when a web-site wants to shovel me off
 RW>> to something else.

 ml> i didn't say switch... i meant "pulled from"... they do this stuff
 ml> all the time... you go to foobar.com and they are using scripts
 ml> pulled from googleanalytics, for instance... or they have a java
 ml> based menuing system and those .js files are pulled from another
 ml> domain...

Java is also disabled in FFv12...at least Java Deployment Toolkit and Java
Platform SE are both disabled. Both of them are noted as creating security
and stability issues, thus the disablement by FFv12 install.

 ml> that kind of thing... this is where noscript comes in nicely and i'm
 ml> always looking to see what domains sites are pulling stuff from to
 ml> decide if i want to allow it or temp allow it or not allow it at
 ml> all... in some cases, the site won't work at all because they are
 ml> needing code from 'over there' but in a lot of cases, they are
 ml> hosting the code somewhere on a sub-domain of their main one...
 ml> ie: www.foobar.com displaying images from images.foobar.com... that's
 ml> fine but anything coming from ads.snakeshit.info or such are
 ml> definitely not allowed ;)

Well, I finally ported that tinyurl to my laptop and got a look at the one
that didn't work in v12. I have no idea what it was good for, since it
looked to me like a bunch of weirdos dancing and singing in the crap that
passes for 'music' these days. The laptop uses FFv14 on Vista, so the
problem has to be with v12 and W2k...no big deal.

 ml>> but i run both and did enable a couple of others in the same jibjab
 ml>> domain but never saw similar errors...

 RW>> Funny that I could load the first one, but not the second one...oh
 RW>> well.

 ml> the first of those two URLs? well, the one was just a photo... the
 ml> other was an animated video thing in jibjab and it wanted crap from
 ml> all over the place...

And that crap is a good description of what it was.

 ml> i'm not going to chance my machines to a possible drive-by
 ml> infestation by opening them up like that...

My laptop has MES to take care of that crap and it updates daily...not a
problem for me.

 ml>  i see way too much stuff in the security groups i participate in and
 ml> an awful lot that my perimeter firewall captures as a normal part of
 ml> its functions...

That's another thing that keeps this PC and the laptop from getting all
wrapped up in crapola from the outside.

 ml> i won't even mention the systems that have dedicated machines
 ml> capturing /all/ network traffic packets and saving them off to large
 ml> storage for later analysis... and then there are those systems that
 ml> automatically take those pcaps (what the network packet captures are
 ml> called) and actually carve the binary files out of them for analysis
 ml> to find stuff that folk haven't even seen yet...

LOL! Those people need a hobby...

 ml> i've seen way too many java scripts that download PDFs that in turn
 ml> use java to download other things trying numerous methods of
 ml> infesting a machine all at once and in just a few seconds... i wish i
 ml> had an easy example to post showing at least just an example URL that
 ml> these things call where the parameters indicate which adobe, java,
 ml> flash and other versions of known holey software you are running...
 ml> they know which ones have certain holes and they take advantage of
 ml> them all too fast to think about...

Those people need a different hobby.

 ml> ignorance is bliss but i prefer to know whats going on and be
 ml> paranoid about what could be happening so that i can look and find
 ml> that which is truly out to get me and my machines ;)

I like being in the dark and go about daily life without worrying about
that crap.

                R\%/itt

... besides, IMNSHO, Ward Dossche should resign as ZC2 and surrender his
... net node-number to the ZCC !            - Cato the Elder -

... Reminder:

... On Friday September 8th 2006, Mike Godwin's 16 year experiment was
... concluded and Godwin's Law was officially repealed by a popular vote
... among millions of individuals.

... http://repealgodwin.tripod.com/


--- Twit(t) Filter v2.1 (C) 2000-10
 * Origin: Roiz Flying \A/ Service * South Texas * USA * (1:387/22)