Daniel Veditz | 2 Jun 02:28 2004
Picon

Re: TrojanHorse with Mozilla / Firefox

Dirk wrote:

> a website tries to install the following software
>      http://www2.flingstone.com/cab/sbc_netscape.xpi
> if you d/l the xpi and expand the zip file your anti virus program will 
> alert you with something like... "keylog-briss" Trojan horse detected

We've noticed attempts like this recently and are taking steps to address
it. As a first stop-gap, sites are no longer be able to launch installs
during page load (easy to work around, but a quick band-aid to specific
abuses we've seen). This is already in recent nightlies of Firefox and
Mozilla. Second, at the cost of greatly reducing the usefulness of
XPInstall, we're restricting its use to whitelisted sites or else people can
explicitly download the file and then launch it (as they can do with an .exe
install).

> You can turn the software installation off on Mozilla but not in the 
> FireFox preferences.

you can turn it off manually through about:config, and I believe UI is being
added as part of the new "Extension Manager" interface going into 0.9

> I think most people believe they have no virus problems with 
> Mozilla/FireFox but that's not true...

This still requires the user to agree to install something on their machine
so it's not exactly a virus or worm, but probably too many people could
fooled into installing it. That's why we're changing things.

-Dan Veditz
(Continue reading)

Dirk | 2 Jun 18:09 2004
Picon

Re: TrojanHorse with Mozilla / Firefox

Daniel,

thanks for the fast and useful answer, I turned the installation off...

Ciao
  dirk
Daniel Veditz wrote:
> Dirk wrote:
> 
> 
>>a website tries to install the following software
>>     http://www2.flingstone.com/cab/sbc_netscape.xpi
>>if you d/l the xpi and expand the zip file your anti virus program will 
>>alert you with something like... "keylog-briss" Trojan horse detected
> 
> 
> We've noticed attempts like this recently and are taking steps to address
> it. As a first stop-gap, sites are no longer be able to launch installs
> during page load (easy to work around, but a quick band-aid to specific
> abuses we've seen). This is already in recent nightlies of Firefox and
> Mozilla. Second, at the cost of greatly reducing the usefulness of
> XPInstall, we're restricting its use to whitelisted sites or else people can
> explicitly download the file and then launch it (as they can do with an .exe
> install).
> 
> 
>>You can turn the software installation off on Mozilla but not in the 
>>FireFox preferences.
> 
> 
(Continue reading)

Greg R | 6 Jun 04:04 2004

Xpi directory question

When install an xpi items.  It sometimes ask what directory to put it
in?

What directory do I put it in or what is the best?
Daniel Veditz | 6 Jun 19:04 2004
Picon

Re: Xpi directory question

Greg R wrote:
> When install an xpi items.  It sometimes ask what directory to put it
> in?
> 
> What directory do I put it in or what is the best?

That's code written by the author of that specific package, so the answer
depends on what you're installing and what choice you're given.  Most of the
ones I've seen ask this kind of question give you a binary choice of a
"profile" installation or a "global" installation.

Unless you're the administrator of a multi-user machine "Profile" is almost
always the best choice.

-Dan Veditz
Lithian | 7 Jun 16:19 2004

Profile installation

Hi,

I'm converting my extenstion to the new firefox installation api. But 
before that I'm trying to install it on the profile directory. I notice 
that, with the news install.js script, it seems that the onload event of 
the main windows doesn't fire. After some test I see that this happen only 
if:

1. I register at least a locale 
2. The extension is installed on the profile directory
3. It run "standalone", not run throught the url bar but directly
   e.g.: mozilla -chrome chrome://moztest/content/
4. the problem happen only the "second time" (!?!?) I run the extension

Here http://downloads.mozdev.org/mozimage/moztest.xpi there's a simple 
extension (for the old installation api) that has only a listbox filled 
when the main window is loaded. But it doesn't work. I've test with 
Mozilla 1.4/1.5 e firefox 0.8 on both window and linux.

Thanks,
Lithian.
Sailfish | 8 Jun 18:18 2004

Registering Themes in Aviary

With the Aviary build it seems that the previous method for referencing 
one's theme development files has been deprecated. Specifically, a 
developer could simply add a statement similar to the following to their 
installation chrome folder installed-chrome.txt file:

skin,install,url,file:///C:/MyLatestKewlThings/KewlThing1/

where the KewlThing1 directory contained the theme contents.rdf file.

This capability was extremely useful and productive since it didn't 
require a developer to create new jar files to test every change.

Is there another way to set up a similar development environment for the 
Aviary branch?

PS: This method still works for extension development...

--

-- 

Netscape FAQs: http://www.ufaq.org/
Netscape 6/7 Tips: http://www.holgermetzger.de/net6e.html
Web page validation: http://validator.w3.org
About Mozilla: http://www.mozilla.org
Mannomann Berlin | 8 Jun 21:56 2004
Picon
Picon

Q: Are there local .pac files possible?

Hi,

I want to configure my proxy settings with a local .pac file. That 
doesn't seem to work with Mozilla/5.0 (Windows; U; Windows NT 5.1; 
de-DE; rv:1.4) Gecko/20030619 Netscape/7.1 (ax).

With Netscape 4.7x, there was no problem. Do I really have to configure 
a http service for that? If yes, is there a recommendation for that 
(howto's, freeware, ...)?

Any replies are highly appreciated.

TIA

Volker
Imovel apartamento casa | 9 Jun 15:47 2004

apartamento casa vitória

Temos vários imóveis a venda em Vitória-es (Espírito Santo)
Casas , apartamentos , imóveis na planta....
www.imoveisvitoria.com.br
chip tuning | 9 Jun 16:45 2004

chip tuning

            Quer economizar ganhando Potência? Temos chip de conversão gasolina para álcool
trazendo uma boa economia mensal.

 Para conversão a álcool veja exemplo de

Economia:

Veiculo: Fiat palio 1.0 8v ano 98 com 78.000 km

Media feita com 1.500 km rodados entre cidade e estrada

Gasolina:1500km consumo (10km/l)=150lts x r$1.85 = r$ 277,50

Álcool: 1500km consumo (7,5km/l) = 200lts x r$ 0,70 = r$ 140,00

Diferença (economia no bolso!)        =       r$ 137,50

Preço especial apenas para as 100 primeiras vendas.

http://chipvix.vilabol.uol.com.br/index.html
conversão gnv gasolina alcool gás natural potencia turbo aspirados carros
automoveis "chip tuning" chip tuning

5
chip tuning | 10 Jun 14:06 2004

chip tuning

            Quer economizar ganhando Potência? Temos chip de conversão gasolina para álcool
trazendo uma boa economia mensal.

 Para conversão a álcool veja exemplo de

Economia:

Veiculo: Fiat palio 1.0 8v ano 98 com 78.000 km

Media feita com 1.500 km rodados entre cidade e estrada

Gasolina:1500km consumo (10km/l)=150lts x r$1.85 = r$ 277,50

Álcool: 1500km consumo (7,5km/l) = 200lts x r$ 0,70 = r$ 140,00

Diferença (economia no bolso!)        =       r$ 137,50

Preço especial apenas para as 100 primeiras vendas.

http://www.tmq.net/chipvix/index.html
conversão gnv gasolina alcool gás natural potencia turbo aspirados carros
automoveis "chip tuning" chip tuning

S

Gmane