Re: ukash hijacked iceweasel

2013-10-20 Thread Bob Proulx
Robert Holtzman wrote:
> Ralf Mardorf wrote:
> > Robert Holtzman wrote:
> > > I'm running iceweasel 17.0.9 which,as you know, is just a rebranded
> > > firefox. When I access mozilla.org/en-US/firefox/new it tells me I'm
> > > using the latest version of firefox and doesn't give an option of
> > > downloading a new browser.
> > 
> > Firefox and Firefox ESR are at version 24:
> > http://www.mozilla.org/img/covehead/esr/release-overview.png
> > 
> > http://www.mozilla.org/en-US/firefox/organizations/all.html
> > http://www.mozilla.org/en-US/firefox/all/
> 
> I sure as hell wish their web site devs would make up their minds. Going
> in through www.mozilla.org, hitting the products link and then the FF
> link tells me I'm using the latest version. Hitting the download link on
> the home page offers version 24. Screw it. 

You seem to have an ESR release 17.0.9 which is still within the
support window.  Therefore it is current.  But so is ESR 24.0 now too.
There is overlap.  ESR 24 is also current.  And so is the consumer
"release" version 24.0 too.  All as describe in the previously quoted:

  http://www.mozilla.org/img/covehead/esr/release-overview.png

Therefore *all three* of them are current.  But if you go to download
the latest available version then you will get the consumer release
version 24 flavor because that is what upstream prefers and pushes.

[Note that this wouldn't be such a problem if Firefox (and chromium
too) didn't release every six weeks.  And if they weren't an 800lb
gorilla that is too big to be ignored.  They do what they want and the
majority of us can only react to it.]

Bob


signature.asc
Description: Digital signature


Re: ukash hijacked iceweasel

2013-10-20 Thread Robert Holtzman
On Sat, Oct 19, 2013 at 11:55:09PM +0200, Ralf Mardorf wrote:
> On Sat, 2013-10-19 at 12:46 -0700, Robert Holtzman wrote:
> > I'm running iceweasel 17.0.9 which,as you know, is just a rebranded
> > firefox. When I access mozilla.org/en-US/firefox/new it tells me I'm
> > using the latest version of firefox and doesn't give an option of
> > downloading a new browser.
> 
> Firefox and Firefox ESR are at version 24:
> http://www.mozilla.org/img/covehead/esr/release-overview.png
> 
> http://www.mozilla.org/en-US/firefox/organizations/all.html
> http://www.mozilla.org/en-US/firefox/all/

I sure as hell wish their web site devs would make up their minds. Going
in through www.mozilla.org, hitting the products link and then the FF
link tells me I'm using the latest version. Hitting the download link on
the home page offers version 24. Screw it. 

-- 
Bob Holtzman
Your mail is being read by tight lipped 
NSA agents who fail to see humor in Doctor 
Strangelove 
Key ID 8D549279


signature.asc
Description: Digital signature


Re: ukash hijacked iceweasel

2013-10-19 Thread Ralf Mardorf
On Sat, 2013-10-19 at 12:46 -0700, Robert Holtzman wrote:
> I'm running iceweasel 17.0.9 which,as you know, is just a rebranded
> firefox. When I access mozilla.org/en-US/firefox/new it tells me I'm
> using the latest version of firefox and doesn't give an option of
> downloading a new browser.

Firefox and Firefox ESR are at version 24:
http://www.mozilla.org/img/covehead/esr/release-overview.png

http://www.mozilla.org/en-US/firefox/organizations/all.html
http://www.mozilla.org/en-US/firefox/all/



-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1382219709.705.29.camel@archlinux



Re: ukash hijacked iceweasel

2013-10-19 Thread Robert Holtzman
On Mon, Oct 14, 2013 at 09:34:02AM +0200, Ralf Mardorf wrote:
> On Mon, 2013-10-14 at 16:00 +1300, Chris Bannister wrote:
> > Install the extension/addon 'noscript'
> 
> As already mentioned, I don't want to install another add-on. If I need
> javascript disabled, I can use another browser and if happens to me,
> what happens to the OP, I'm fixing it the way I described. IOW my
> intention was to point out, that modern Firefoxes don't provide an
> option to disable javascript.

What versionof firefox are you running? I'm running iceweasel 17.0.9 
which,as you know, is just a rebranded firefox. When I access 
mozilla.org/en-US/firefox/new it tells me I'm using the latest version 
of firefox and doesn't give an option of downloading a new browser.

As has been posted before, edit -> preferences -> content shows an
option to enable javascript (or not).

> 
> "I mean, why bother with complex solutions if there are simple ones?"
> 
> I also could have answered that Firefox don't provide such an option
> anymore and that an add-on is needed.

Not my experience.

-- 
Bob Holtzman
Your mail is being read by tight lipped 
NSA agents who fail to see humor in Doctor 
Strangelove 
Key ID 8D549279


signature.asc
Description: Digital signature


Re: ukash hijacked iceweasel

2013-10-14 Thread Ralf Mardorf
On Mon, 2013-10-14 at 17:27 -0400, John Lindsay wrote:
> Just an update --- ran clamtk (clamav) several times until it was clear. 
> Got avast downloaded and installed and ran it twice. Opened a new 
> iceweasel then closed it -- reopened and got the 'restore sessions' 
> message, selected new session and things are back to normal. Thanks for 
> the information.  Now all I have  to do is get clamtk (4.37) updated to 
> the latest at 4.45.

IMO antivir software for Linux is unneeded, unless a Linux install isn't
a server for usage with Windows.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1381789373.743.10.camel@archlinux



Re: ukash hijacked iceweasel

2013-10-14 Thread John Lindsay


Just an update --- ran clamtk (clamav) several times until it was clear. 
Got avast downloaded and installed and ran it twice. Opened a new 
iceweasel then closed it -- reopened and got the 'restore sessions' 
message, selected new session and things are back to normal. Thanks for 
the information.  Now all I have  to do is get clamtk (4.37) updated to 
the latest at 4.45.


John

On Sun, 2013-10-13 at 09:58 -0400, John Lindsay wrote:
   

>  Somehow my iceweasel has been infected with the UKASH scam. I have tried
>  my kapersky rescue disc and it told me my system has been cleaned (this
>  disc was made late 2011/early 2012 and it did an update prior to
>  scanning). If I run iceweasel after a reboot the ukash blocker shows up.
>  How can I get rid of this without 'blowing' away all the info on my HD
>  (primarily icedove mail).
 



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/525c61b7.1090...@sentex.net



Re: ukash hijacked iceweasel

2013-10-14 Thread André Nunes Batista
On Mon, 2013-10-14 at 10:04 +0200, Ralf Mardorf wrote:
> On Mon, 2013-10-14 at 14:15 +0900, Joel Rees wrote:
> > What? does everyone have their menus turned off?
> > 
> > (Edit menu -> Preferences -> Contents tab -> disable JavaScript.
> > Or am I missing something here?)
> 
> I didn't refer to Iceweasel for Debian, but tried to help the OP to
> solve the issue and I wasn't booted into Debian, but Arch Linux. The
> up-to-date version of Firefox doesn't support to disable javascript
> anymore, resp. you only can do it using about:config and when doing
> this, a warning is displayed, not to edit about:config.
> 
> 
> 

I've been using GNU LibreJS FF extension for the same purposes of
noscript. But there are some websites that really won't work.


-- 
André N. Batista
GNUPG/PGP KEY: 6722CF80



-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1381783459.5338.21.camel@tagesuhu-pc



Re: ukash hijacked iceweasel

2013-10-14 Thread Ralf Mardorf
On Mon, 2013-10-14 at 14:15 +0900, Joel Rees wrote:
> What? does everyone have their menus turned off?
> 
> (Edit menu -> Preferences -> Contents tab -> disable JavaScript.
> Or am I missing something here?)

I didn't refer to Iceweasel for Debian, but tried to help the OP to
solve the issue and I wasn't booted into Debian, but Arch Linux. The
up-to-date version of Firefox doesn't support to disable javascript
anymore, resp. you only can do it using about:config and when doing
this, a warning is displayed, not to edit about:config.



-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1381737856.723.63.camel@archlinux



Re: ukash hijacked iceweasel

2013-10-14 Thread Ralf Mardorf
On Mon, 2013-10-14 at 07:11 +0400, recovery...@gmail.com wrote:
> This is outdated page indeed. Apparently Mozilla Foundation decided
> that it will be more user-friendly to double-click on
> 'javascript.enabled' at about:config page :)

I agree that the smartest way is to use an add-on, assumed a good one
for this purpose is installed or it should be ok for the OP to install
one, but if not IMO the way I described might cause less confusion,
since about:config warns:

"This might void your warranty!

Changing these advanced settings can be harmful to stability, security,
and performance. You should only continue if you are sure of what you're
doing.

[x] Show this warning next time
 "


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1381736704.723.50.camel@archlinux



Re: ukash hijacked iceweasel

2013-10-14 Thread Ralf Mardorf
On Mon, 2013-10-14 at 16:00 +1300, Chris Bannister wrote:
> Install the extension/addon 'noscript'

As already mentioned, I don't want to install another add-on. If I need
javascript disabled, I can use another browser and if happens to me,
what happens to the OP, I'm fixing it the way I described. IOW my
intention was to point out, that modern Firefoxes don't provide an
option to disable javascript.

"I mean, why bother with complex solutions if there are simple ones?"

I also could have answered that Firefox don't provide such an option
anymore and that an add-on is needed.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1381736042.723.43.camel@archlinux



Re: ukash hijacked iceweasel

2013-10-13 Thread Bob Bernstein
On Sun, Oct 13, 2013 at 06:11:18PM +0200, Marko Randjelovic wrote:

> As far I see, Kaspersky supports only Windows.

There's Mac and Linux products also from them.


-- 
Bob Bernstein

I am dissatisfied, profoundly so, with the world as it is. But I 
would be dissatisfied with any world. And I'd hate to lose my 
dissatisfaction.

   Alfred Kazin
 


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20131014062608.ga30...@sixtiessurvivor.org



Re: ukash hijacked iceweasel

2013-10-13 Thread Joel Rees
On Mon, Oct 14, 2013 at 5:06 AM,   wrote:
>  Hi.
>
>> On Sun, 2013-10-13 at 09:58 -0400, John Lindsay wrote:
>>
>> IIUC this is the thingy that doesn't allow to close a tab. When this
>> happens for Firefox here, I kill Firefox and then start it again.
>> Firefox usually asks, if the last session should be restored or not, so
>> don't restore the killed session. If Firefox shouldn't ask but
>> automatically restore the killed session, then it usually does work, to
>> close the tabs, before the site is loaded. After this Firefox is ok
>> again and can be closed and opened without issues.
>
> Disable javascript, reload offending tab (optional), close offending
> tab, enable javascript.
> I mean, why bother with complex solutions if there are simple ones?
>
> Reco
>

What? does everyone have their menus turned off?

(Edit menu -> Preferences -> Contents tab -> disable JavaScript.
Or am I missing something here?)

-- 
Joel Rees

Be careful where you see conspiracy.
Look first in your own heart.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/CAAr43iMb1WnmZKbsfPsqDSyeDTYE=acwggxvo7dowfsta6h...@mail.gmail.com



Re: ukash hijacked iceweasel

2013-10-13 Thread recoverym4n
On Sun, 13 Oct 2013 23:54:41 +0200
Ralf Mardorf  wrote:

> > 
> > Disable javascript, reload offending tab (optional), close offending
> > tab, enable javascript.
> > I mean, why bother with complex solutions if there are simple ones?
> 
> I never tried it that way, because I couldn't find where to disable it
> and I had no time to do research when this issue happened. Just for fun
> I tried to find where it can be disabled for Firefox 24.0 right now, but
> I couldn't find it ;).
> 
> https://support.mozilla.org/en-US/kb/javascript-settings-for-interactive-web-pages

This is outdated page indeed. Apparently Mozilla Foundation decided
that it will be more user-friendly to double-click on
'javascript.enabled' at about:config page :)

OT: Curiously, they decided that certain checkbox is 'killing their
product':

https://bugzilla.mozilla.org/show_bug.cgi?id=851698

Clearly they've never got into accound an evil JavaScript that renders
browser unusable with no simple way to disable it.


> I've got Ghostery installed, I'm using Ghostery to detect trackers, but
> I can't find how to use it to disable scripts.
> 
> IOW disabling javascript is much more work, assumed you won't install
> many add-ons. I'm only using 2 add-ons, Ghostery and Anonymox.

Probably because none of this extensions are designed to disable
Javascript the way it should be done (i.e. whitelist for enabling JS
on specific domains). As a NoScript user I don't find enabling and
disabling Javascript that hard.

 
> My Firefox ERS 17.0.9 (Vidalia/TOR) provides to disable javascript by
> Edit > Preferences > Content, but I usually don't use the TOR browser or
> outdated versions of Firefox.

Good for you, I guess, but John (thread starter) uses stock Debian
Iceweasel (judging from his MUA version), so Mozilla's KnowledgeBase
solution should work for him.

Reco


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/20131014071158.cba03d9651ff13a41f213...@gmail.com



Re: ukash hijacked iceweasel

2013-10-13 Thread Chris Bannister
On Sun, Oct 13, 2013 at 11:54:41PM +0200, Ralf Mardorf wrote:
> I've got Ghostery installed, I'm using Ghostery to detect trackers, but
> I can't find how to use it to disable scripts.

Install the extension/addon 'noscript'

-- 
"If you're not careful, the newspapers will have you hating the people
who are being oppressed, and loving the people who are doing the 
oppressing." --- Malcolm X


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20131014030057.GA3831@tal



Re: ukash hijacked iceweasel

2013-10-13 Thread Ralf Mardorf
On Mon, 2013-10-14 at 00:06 +0400, recovery...@gmail.com wrote:
>  Hi.
> 
> > On Sun, 2013-10-13 at 09:58 -0400, John Lindsay wrote:
> > 
> > IIUC this is the thingy that doesn't allow to close a tab. When this
> > happens for Firefox here, I kill Firefox and then start it again.
> > Firefox usually asks, if the last session should be restored or not, so
> > don't restore the killed session. If Firefox shouldn't ask but
> > automatically restore the killed session, then it usually does work, to
> > close the tabs, before the site is loaded. After this Firefox is ok
> > again and can be closed and opened without issues.
> 
> Disable javascript, reload offending tab (optional), close offending
> tab, enable javascript.
> I mean, why bother with complex solutions if there are simple ones?

I never tried it that way, because I couldn't find where to disable it
and I had no time to do research when this issue happened. Just for fun
I tried to find where it can be disabled for Firefox 24.0 right now, but
I couldn't find it ;).

https://support.mozilla.org/en-US/kb/javascript-settings-for-interactive-web-pages

I've got Ghostery installed, I'm using Ghostery to detect trackers, but
I can't find how to use it to disable scripts.

IOW disabling javascript is much more work, assumed you won't install
many add-ons. I'm only using 2 add-ons, Ghostery and Anonymox.

My Firefox ERS 17.0.9 (Vidalia/TOR) provides to disable javascript by
Edit > Preferences > Content, but I usually don't use the TOR browser or
outdated versions of Firefox.



-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1381701281.723.17.camel@archlinux



Re: ukash hijacked iceweasel

2013-10-13 Thread recoverym4n
 Hi.

> On Sun, 2013-10-13 at 09:58 -0400, John Lindsay wrote:
> 
> IIUC this is the thingy that doesn't allow to close a tab. When this
> happens for Firefox here, I kill Firefox and then start it again.
> Firefox usually asks, if the last session should be restored or not, so
> don't restore the killed session. If Firefox shouldn't ask but
> automatically restore the killed session, then it usually does work, to
> close the tabs, before the site is loaded. After this Firefox is ok
> again and can be closed and opened without issues.

Disable javascript, reload offending tab (optional), close offending
tab, enable javascript.
I mean, why bother with complex solutions if there are simple ones?

Reco


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/20131014000626.cc1af515276cfc71844cc...@gmail.com



Re: ukash hijacked iceweasel

2013-10-13 Thread Marko Randjelovic
On Sun, 13 Oct 2013 09:58:47 -0400
John Lindsay  wrote:

> Somehow my iceweasel has been infected with the UKASH scam. I have tried 
> my kapersky rescue disc and it told me my system has been cleaned (this 
> disc was made late 2011/early 2012 and it did an update prior to 
> scanning). If I run iceweasel after a reboot the ukash blocker shows up. 
> How can I get rid of this without 'blowing' away all the info on my HD 
> (primarily icedove mail).
> 
> John
> 
> 

As far I see, Kaspersky supports only Windows. If you use Debian or
similar OS, try ClamAV.

-- 
http://mr.flossdaily.org


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20131013181118.78e99...@eunet.rs



Re: ukash hijacked iceweasel

2013-10-13 Thread Ralf Mardorf
On Sun, 2013-10-13 at 16:33 +0200, Ralf Mardorf wrote:
> On Sun, 2013-10-13 at 09:58 -0400, John Lindsay wrote:
> > Somehow my iceweasel has been infected with the UKASH scam. I have tried 
> > my kapersky rescue disc and it told me my system has been cleaned (this 
> > disc was made late 2011/early 2012 and it did an update prior to 
> > scanning). If I run iceweasel after a reboot the ukash blocker shows up. 
> > How can I get rid of this without 'blowing' away all the info on my HD 
> > (primarily icedove mail).
> 
> IIUC this is the thingy that doesn't allow to close a tab. When this
> happens for Firefox here, I kill Firefox and then start it again.
> Firefox usually asks, if the last session should be restored or not, so
> don't restore the killed session. If Firefox shouldn't ask but
> automatically restore the killed session, then it usually does work, to
> close the tabs, before the site is loaded. After this Firefox is ok
> again and can be closed and opened without issues.
> 
> I usually do the same for sites that ask again and again, if you want to
> leave the page or if you want to stay. This crap is a PITA, even
> "reliable" web pages sometimes ask, if you are sure, that you want to
> leave their website. To ask isn't bad per se, but I never noticed this
> question, when it makes sense and it especially doesn't make sense to
> ask this questions 20 times, before you can leave.

PS: You also could delete iceweasel files only, or use a new profile and
ignore the old profile, or restore your last backup. You don't need to
wipe out all data on your HDD.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1381675306.743.14.camel@archlinux



Re: ukash hijacked iceweasel

2013-10-13 Thread Ralf Mardorf
On Sun, 2013-10-13 at 09:58 -0400, John Lindsay wrote:
> Somehow my iceweasel has been infected with the UKASH scam. I have tried 
> my kapersky rescue disc and it told me my system has been cleaned (this 
> disc was made late 2011/early 2012 and it did an update prior to 
> scanning). If I run iceweasel after a reboot the ukash blocker shows up. 
> How can I get rid of this without 'blowing' away all the info on my HD 
> (primarily icedove mail).

IIUC this is the thingy that doesn't allow to close a tab. When this
happens for Firefox here, I kill Firefox and then start it again.
Firefox usually asks, if the last session should be restored or not, so
don't restore the killed session. If Firefox shouldn't ask but
automatically restore the killed session, then it usually does work, to
close the tabs, before the site is loaded. After this Firefox is ok
again and can be closed and opened without issues.

I usually do the same for sites that ask again and again, if you want to
leave the page or if you want to stay. This crap is a PITA, even
"reliable" web pages sometimes ask, if you are sure, that you want to
leave their website. To ask isn't bad per se, but I never noticed this
question, when it makes sense and it especially doesn't make sense to
ask this questions 20 times, before you can leave.





-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1381674837.743.10.camel@archlinux