date:20110923

On 09/23/2011 11:00 AM, NoOp wrote:
> On 09/23/2011 04:19 AM, Justin Wood (Callek) wrote:
>> On 9/23/2011 5:36 AM, Paul B. Gallagher wrote:
>> ...
>>> Full article (Mozilla stuff on p. 2):
>>> 
>>>
>> 
>> ALSO
>> http://threatpost.com/en_us/blogs/new-attack-breaks-confidentiality-model-ssl-allows-theft-encrypted-cookies-091611
>> 
>> Lastly,
>> It is unclear at this point if the attack can be replicated in Firefox 
>> [Gecko] 7, which has the newer WebSocket protocol. We're working to get 
>> an answer from the bug reporters.
>> 
>> For further discussion on this threat, I suggest m.d.platform rather 
>> than the SeaMonkey list, since its not just a SeaMonkey Issue...
> 
> http://www.mozilla.org/about/forums/
> 
> I'm curious why you recommend:
> mozilla.dev.platform
> For people working on Mozilla-the-platform.
> 
>  rather than:
> 
> mozilla.dev.tech.crypto
> For discussions about cryptography, and cryptographic issues surrounding
> the Mozilla source code. See the PKI project for more info. (Moderated.)
> 
>   or
> 
> mozilla.dev.security
> Security issues such as specific security problems or ideas for making
> the code as a whole more secure can be discussed here. Cryptography,
> however, is not within this group's charter. (Moderated.)
> 
> Note: not disputing your recommendation; just trying to understand why
> when the others (security & crypto) seem closer to the issue.

And I reckon that the post from Nelson Bolyard on bug
pretty much settles that question:

https://bugzilla.mozilla.org/show_bug.cgi?id=480514
[Implement TLS 1.2 (RFC 5246)]

Nelson Bolyard (seldom reads bugmail) 2011-09-23 13:28:47 PDT

Read comment 32 before posting any new comment.

Bugzilla bugs are not a discussion forum.  This is NOT the place for
everyone to pile on with "I think this is important, too" comments.  The
place for those comments is the mozilla.dev.tech.crypto newsgroup.

Also referenced:
https://bugzilla.mozilla.org/show_bug.cgi?id=565047
[(RFC4346) Implement TLS 1.1 (RFC 4346)]

Followup set to: mozilla.support.seamonkey as this is where this thread
originated. However I suppose any additional technical posts regarding
SeaMonkey (meaning other than general media notice/info), per Nelson's
comments should actually be in mozilla.dev.tech.crypto.
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: request 4 a friend ...

2011-09-23 Thread km


MCBastos wrote:

Interviewed by CNN on 23/09/2011 18:10, Ray_Net told the world:


Very difficult to understand what you want ...
I know a similar person ... She is happy with windows live mail and it's ok.


Windows Live Mail (at least the old version -- I didn't test the 2011
version) had an horrid bug/design feature:

EVEN IN A POP ACCOUNT, if you delete the mail account it deletes all
your archived messages with it. No "deleted items" folder, no nothing.
All those messages are lost, in no time, like tears in the rain (to
misquote Roy Batty).



You wrote:
"a file that will automatically install SM"
A file is unable to do something and certainly not automatically :-)


I imagine what the OP wants is a "silent" installer, one that runs
automatically after you click on it without asking any questions (well,
except for the Windows UAC prompts).



... EXACTLY!!! POSSIBLE???


--
… don't try and feel the pain.
That's impossible. Just try
and free ur mind. then you will
realize the truth. … there is no pain.


___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: request 4 a friend ...

2011-09-23 Thread km


MCBastos wrote:

Interviewed by CNN on 23/09/2011 18:10, Ray_Net told the world:


Very difficult to understand what you want ...
I know a similar person ... She is happy with windows live mail and it's ok.


Windows Live Mail (at least the old version -- I didn't test the 2011
version) had an horrid bug/design feature:

EVEN IN A POP ACCOUNT, if you delete the mail account it deletes all
your archived messages with it. No "deleted items" folder, no nothing.
All those messages are lost, in no time, like tears in the rain (to
misquote Roy Batty).



You wrote:
"a file that will automatically install SM"
A file is unable to do something and certainly not automatically :-)


I imagine what the OP wants is a "silent" installer, one that runs
automatically after you click on it without asking any questions (well,
except for the Windows UAC prompts).



... EXACTLY!!! POSSIBLE???


--
… don't try and feel the pain.
That's impossible. Just try
and free ur mind. then you will
realize the truth. … there is no pain.


___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: A funny thing happened with today's Google Doodle...

On 09/23/2011 04:55 PM, MCBastos wrote:
> ...the interactive Muppets animations didn't run on Seamonkey 2.3.3.
> They ran fine on Firefox 6.0.2, and on IE9, and on a recent version of
> Iron, and on Opera. But not on Seamonkey.
> 
> I thought that it might be NoScript; I disabled it and restarted
> Seamonkey. No dice.
> 
> Has anybody else ran into this issue, or is it something in my setup?
> 

Works fine for me:
o w/2.4 (linux)
o w/2.3.3 (linux)
o w/2.3 (Win7)
o w/2.3.3 (Win7)

I suspect you have a setup/profile issue.

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

A funny thing happened with today's Google Doodle...

2011-09-23 Thread MCBastos

...the interactive Muppets animations didn't run on Seamonkey 2.3.3.
They ran fine on Firefox 6.0.2, and on IE9, and on a recent version of
Iron, and on Opera. But not on Seamonkey.

I thought that it might be NoScript; I disabled it and restarted
Seamonkey. No dice.

Has anybody else ran into this issue, or is it something in my setup?

-- 
MCBastos

This message has been protected with the 2ROT13 algorithm. Unauthorized
use will be prosecuted under the DMCA.

-=-=-
... Sent from my HP LaserJet.
*Added by TagZilla 0.066.2 running on Seamonkey 2.3.3 *
Get it at http://xsidebar.mozdev.org/modifiedmailnews.html#tagzilla
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: request 4 a friend ...

2011-09-23 Thread MCBastos

Interviewed by CNN on 23/09/2011 18:10, Ray_Net told the world:

> Very difficult to understand what you want ...
> I know a similar person ... She is happy with windows live mail and it's ok.

Windows Live Mail (at least the old version -- I didn't test the 2011
version) had an horrid bug/design feature:

EVEN IN A POP ACCOUNT, if you delete the mail account it deletes all
your archived messages with it. No "deleted items" folder, no nothing.
All those messages are lost, in no time, like tears in the rain (to
misquote Roy Batty).

> You wrote:
> "a file that will automatically install SM"
> A file is unable to do something and certainly not automatically :-)

I imagine what the OP wants is a "silent" installer, one that runs
automatically after you click on it without asking any questions (well,
except for the Windows UAC prompts).

-- 
MCBastos

This message has been protected with the 2ROT13 algorithm. Unauthorized
use will be prosecuted under the DMCA.

-=-=-
... Sent from my HOLMES IV.
*Added by TagZilla 0.066.2 running on Seamonkey 2.3.3 *
Get it at http://xsidebar.mozdev.org/modifiedmailnews.html#tagzilla
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: request 4 a friend ...

2011-09-23 Thread Ray_Net


km wrote:

Sirs;

I have a request. I am trying to help a friend. She has a new win 7 ,
but she is using windows live mail. She knows NOTHING. {not even copy
and paste)

I request that a file that will automatically install SM from inside her
mail client so she can just click on it or a link and it will it to her
desktop WITHOUT setting it as default.

Is this possible???



Very difficult to understand what you want ...
I know a similar person ... She is happy with windows live mail and it's ok.

You wrote:
"a file that will automatically install SM"
A file is unable to do something and certainly not automatically :-)

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: JavaScript

2011-09-23 Thread Beauregard T. Shagnasty

Jamey Fletcher wrote:

> Beauregard T. Shagnasty wrote:
>> chokito wrote:
> 
>>> In SeaMonkey 2.4 will
>>> "javascript:self.resizeTo(1600,1000);self.moveTo(40,10);" doesn't
>>> function.
> 
>> That size appears to me to be a full-screen resolution. If you really
>> like such big windows, why don't you just press F11 while in the
>> browser?
> 
>> Instant full-screen!
> 
> Because not all of us have such small screens.  Such size gives me room
> to have other windows peeking out the ride for easy raising by clicking.
>   1920x1200 - it's getting cheaper every day.  Check your local
> Wal-Mart's HDTV section.

Thanks, but I don't have a small screen.

-- 
   -bts
   -This space for rent, but the price is high
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: JavaScript

On 23 Sep., 20:43, "Beauregard T. Shagnasty"
 wrote:
> chokito wrote:
> > In SeaMonkey 2.4 will
> > "javascript:self.resizeTo(1600,1000);self.moveTo(40,10);" doesn't
> > function.
>
> That size appears to me to be a full-screen resolution. If you really
> like such big windows, why don't you just press F11 while in the browser?
>
> Instant full-screen!
>
> --
>    -bts
>    -This space for rent, but the price is high

It's not the same as F11...
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: JavaScript

2011-09-23 Thread Jamey Fletcher


Beauregard T. Shagnasty wrote:

chokito wrote:



In SeaMonkey 2.4 will
"javascript:self.resizeTo(1600,1000);self.moveTo(40,10);" doesn't
function.



That size appears to me to be a full-screen resolution. If you really
like such big windows, why don't you just press F11 while in the browser?



Instant full-screen!


Because not all of us have such small screens.  Such size gives me room 
to have other windows peeking out the ride for easy raising by clicking. 
 1920x1200 - it's getting cheaper every day.  Check your local 
Wal-Mart's HDTV section.

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

request 4 a friend ...

2011-09-23 Thread km


Sirs;

I have a request. I am trying to help a friend. She has a new win 7 
, but she is using windows live mail. She knows NOTHING. {not even copy 
and paste)


I request that a file that will automatically install SM from 
inside her mail client so she can just click on it or a link and it will 
it to her desktop WITHOUT setting  it as default.


Is this possible???

kevin mc auley

--
… don't try and feel the pain.
That's impossible. Just try
and free ur mind. then you will
realize the truth. … there is no pain.


___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: JavaScript

2011-09-23 Thread Beauregard T. Shagnasty

chokito wrote:

> In SeaMonkey 2.4 will
> "javascript:self.resizeTo(1600,1000);self.moveTo(40,10);" doesn't
> function.

That size appears to me to be a full-screen resolution. If you really 
like such big windows, why don't you just press F11 while in the browser?

Instant full-screen!

-- 
   -bts
   -This space for rent, but the price is high
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: JavaScript

[Cross-posting to mozilla.dev.apps.seamonkey, Followup-To:
mozilla.dev.apps.seamonkey]

Fri, 23 Sep 2011 11:23:50 -0700 (PDT), /chokito/:

On 23 Sep., 20:01, Stanimir Stamenkov wrote:

Fri, 23 Sep 2011 10:37:05 -0700 (PDT), /chokito/:

On 23 Sep., 19:31, Stanimir Stamenkov wrote:

Fri, 23 Sep 2011 10:13:05 -0700 (PDT), /chokito/:

In SeaMonkey 2.4 will
"javascript:self.resizeTo(1600,1000);self.moveTo(40,10);" doesn't
function.

In SeaMonkey scripts are not allowed to move or resize existing
windows by default. You can enable it for yourself, if you really
like scripts taking over your windows:

Preferences: Advanced / Scripts & Plugins

Allow scripts to:
[x] Move or resize existing windows
...

In SeaMonkey 2.3.3 an earlier versions this will function!

FWIW, it wouldn't function even in SeaMonkey 1.* with my profile.
The only thing (from the available options) I've ever allowed
scripts to do is to change images. I've just tried creating a new
profile with SeaMonkey 2.3.3 and I see the same default preferences:
no move or resize of existing windows is allowed. I've already
pointed out you could change these preferences for yourself.

Here's my preferences: http://homepage.hispeed.ch/chokito/PrefSM2.4.png
I has this settings years ahead, function until I installed SeaMonkey
2.4!
This is definitively a bug in SeaMonkey 2.4!

I've now tried enabling the option of moving and resizing existing
windows in my SeaMonkey 2.4 and I see that your javascript:
pseudo-URL doesn't work when entered into the location bar. Then
I've also remembered that I've already read
:

| * For security reasons, data: and javascript: URIs no longer
| inherit the security context of the current page when the user
| enters them in the location bar; instead, a new, empty, security
| context is created. This means that script loaded by entering
| javascript: URIs in the location bar no longer has access to DOM
| methods and the like, for example. These URIs continue to work as
| before when used by script, however.

Trying it in Firefox 6 (which generally matches SeaMonkey 2.3) - it
doesn't work, indeed (don't know why it has worked in SeaMonkey 2.3);

Trying it from a link in a page in Firefox 6 - it works (as prescribed);

Trying it from from a link in a page in SeaMonkey 2.4 - doesn't
appear to work. So it really appears as problem in SeaMonkey, but
you should have given more useful directions. It doesn't appear to
work when executed from a regular script, even (see the attached
example).

And an another bug is not fixed in SeaMonkey 2.4, see
https://groups.google.com/group/mozilla.dev.apps.seamonkey/browse_thread/thread/cd185954e9a978e5/f44d644a0bb90fcc?hl=de&lnk=gst&q=chokito#

Please keep irrelevant subjects in separate threads. Thanks.

--
Stanimir
Title: _javascript_: test

Move

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: JavaScript

On 23 Sep., 20:01, Stanimir Stamenkov  wrote:
> Fri, 23 Sep 2011 10:37:05 -0700 (PDT), /chokito/:
>
>
>
>
>
>
>
>
>
> > On 23 Sep., 19:31, Stanimir Stamenkov wrote:
> >> Fri, 23 Sep 2011 10:13:05 -0700 (PDT), /chokito/:
>
> >>> In SeaMonkey 2.4 will
> >>> "javascript:self.resizeTo(1600,1000);self.moveTo(40,10);" doesn't
> >>> function.
>
> >> In SeaMonkey scripts are not allowed to move or resize existing
> >> windows by default.  You can enable it for yourself, if you really
> >> like scripts taking over your windows:
>
> >> Preferences: Advanced / Scripts&  Plugins
>
> >> Allow scripts to:
> >> [x] Move or resize existing windows
> >> ...
>
> > In SeaMonkey 2.3.3 an earlier versions this will function!
>
> FWIW, it wouldn't function even in SeaMonkey 1.* with my profile.
> The only thing (from the available options) I've ever allowed
> scripts to do is to change images.  I've just tried creating a new
> profile with SeaMonkey 2.3.3 and I see the same default preferences:
> no move or resize of existing windows is allowed.  I've already
> pointed out you could change these preferences for yourself.
>
> --
> Stanimir

Here's my preferences: http://homepage.hispeed.ch/chokito/PrefSM2.4.png
I has this settings years ahead, function until I installed SeaMonkey
2.4!
This is definitively a bug in SeaMonkey 2.4!

And an another bug is not fixed in SeaMonkey 2.4, see
https://groups.google.com/group/mozilla.dev.apps.seamonkey/browse_thread/thread/cd185954e9a978e5/f44d644a0bb90fcc?hl=de&lnk=gst&q=chokito#
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: JavaScript

2011-09-23 Thread Philip Chee

On Fri, 23 Sep 2011 10:37:05 -0700 (PDT), chokito wrote:
> On 23 Sep., 19:31, Stanimir Stamenkov  wrote:
>> [Cross-posted to mozilla.support.seamonkey, Followup-To:
>> mozilla.support.seamonkey]
>>
>> Please, don't multi-post.  Preferably post to a single group only.
>>
>> Fri, 23 Sep 2011 10:13:05 -0700 (PDT), /chokito/:
>>
>> > In SeaMonkey 2.4 will
>> > "javascript:self.resizeTo(1600,1000);self.moveTo(40,10);" doesn't
>> > function.
>>
>> In SeaMonkey scripts are not allowed to move or resize existing
>> windows by default.  You can enable it for yourself, if you really
>> like scripts taking over your windows:
>>
>> Preferences: Advanced / Scripts & Plugins
>>
>> Allow scripts to:
>> [x] Move or resize existing windows
>> ...
>>
>> --
>> Stanimir
> 
> In SeaMonkey 2.3.3 an earlier versions this will function!

We changed the defaults deliberately.

Phil

-- 
Philip Chee , 
http://flashblock.mozdev.org/ http://xsidebar.mozdev.org
Guard us from the she-wolf and the wolf, and guard us from the thief,
oh Night, and so be good for us to pass.
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: JavaScript


Fri, 23 Sep 2011 10:37:05 -0700 (PDT), /chokito/:

On 23 Sep., 19:31, Stanimir Stamenkov wrote:

Fri, 23 Sep 2011 10:13:05 -0700 (PDT), /chokito/:


In SeaMonkey 2.4 will
"javascript:self.resizeTo(1600,1000);self.moveTo(40,10);" doesn't
function.


In SeaMonkey scripts are not allowed to move or resize existing
windows by default.  You can enable it for yourself, if you really
like scripts taking over your windows:

Preferences: Advanced / Scripts&  Plugins

Allow scripts to:
[x] Move or resize existing windows
...


In SeaMonkey 2.3.3 an earlier versions this will function!


FWIW, it wouldn't function even in SeaMonkey 1.* with my profile. 
The only thing (from the available options) I've ever allowed 
scripts to do is to change images.  I've just tried creating a new 
profile with SeaMonkey 2.3.3 and I see the same default preferences: 
no move or resize of existing windows is allowed.  I've already 
pointed out you could change these preferences for yourself.


--
Stanimir
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: SSL Exploit: Mozilla family no better than the rest of the pack

On 09/23/2011 04:19 AM, Justin Wood (Callek) wrote:
> On 9/23/2011 5:36 AM, Paul B. Gallagher wrote:
> ...
>> Full article (Mozilla stuff on p. 2):
>> 
>>
> 
> ALSO
> http://threatpost.com/en_us/blogs/new-attack-breaks-confidentiality-model-ssl-allows-theft-encrypted-cookies-091611
> 
> Lastly,
> It is unclear at this point if the attack can be replicated in Firefox 
> [Gecko] 7, which has the newer WebSocket protocol. We're working to get 
> an answer from the bug reporters.
> 
> For further discussion on this threat, I suggest m.d.platform rather 
> than the SeaMonkey list, since its not just a SeaMonkey Issue...

http://www.mozilla.org/about/forums/

I'm curious why you recommend:
mozilla.dev.platform
For people working on Mozilla-the-platform.

 rather than:

mozilla.dev.tech.crypto
For discussions about cryptography, and cryptographic issues surrounding
the Mozilla source code. See the PKI project for more info. (Moderated.)

  or

mozilla.dev.security
Security issues such as specific security problems or ideas for making
the code as a whole more secure can be discussed here. Cryptography,
however, is not within this group's charter. (Moderated.)

Note: not disputing your recommendation; just trying to understand why
when the others (security & crypto) seem closer to the issue.
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: for a friend ...

On 09/23/2011 06:18 AM, Daniel wrote:
> MCBastos wrote:
>> Interviewed by CNN on 22/09/2011 08:41, Daniel told the world:
>>
>>> David, the OP is posting to the SeaMonkey newsgroup using SeaMonkey 2.3.3
>>>
>>> In my SM 2.3.3, the suggestion you make (even allowing for the typo's),
>>> there is nowhere on the Advanced pane to uncheck "Check default).
>>>
>>> My check of Preferences fails to find anything to stop the question
>>> being asked.
>>
>> In *my* SM 2.3.3, it is there. Maybe it's a Windows-only option; I see
>> you are using Linux. Both David and the OP use Windows, too.
> 
> and, tonight, I'm using Win7 and, sure enough, there it is!! I wonder 
> why the difference??
> 

We're special :-)
Build identifier: Mozilla/5.0 (X11; Linux i686; rv:7.0) Gecko/20110916
Firefox/7.0 SeaMonkey/2.4


___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: JavaScript

On 23 Sep., 19:31, Stanimir Stamenkov  wrote:
> [Cross-posted to mozilla.support.seamonkey, Followup-To:
> mozilla.support.seamonkey]
>
> Please, don't multi-post.  Preferably post to a single group only.
>
> Fri, 23 Sep 2011 10:13:05 -0700 (PDT), /chokito/:
>
> > In SeaMonkey 2.4 will
> > "javascript:self.resizeTo(1600,1000);self.moveTo(40,10);" doesn't
> > function.
>
> In SeaMonkey scripts are not allowed to move or resize existing
> windows by default.  You can enable it for yourself, if you really
> like scripts taking over your windows:
>
> Preferences: Advanced / Scripts & Plugins
>
> Allow scripts to:
> [x] Move or resize existing windows
> ...
>
> --
> Stanimir

In SeaMonkey 2.3.3 an earlier versions this will function!
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: JavaScript

[Cross-posted to mozilla.support.seamonkey, Followup-To: 
mozilla.support.seamonkey]


Please, don't multi-post.  Preferably post to a single group only.

Fri, 23 Sep 2011 10:13:05 -0700 (PDT), /chokito/:


In SeaMonkey 2.4 will
"javascript:self.resizeTo(1600,1000);self.moveTo(40,10);" doesn't
function.


In SeaMonkey scripts are not allowed to move or resize existing 
windows by default.  You can enable it for yourself, if you really 
like scripts taking over your windows:


Preferences: Advanced / Scripts & Plugins

Allow scripts to:
[x] Move or resize existing windows
...

--
Stanimir
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

JavaScript

In SeaMonkey 2.4 will
"javascript:self.resizeTo(1600,1000);self.moveTo(40,10);" doesn't
function.
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Freezing of SM 2.3.3 on Vista Business Laptop

2011-09-23 Thread No


Hello all,

I Am experiencing freezing more frequently with SM 2.3.3 on business 
Vista OS.


It happens most often when moving messages from one folder to another 
and as well, to a lesser extent, when compacting folders.


Any suggestions or recommendations on how to curb or stop this behaviour?

TIA - Bo1953
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Seamonkey 2.3.3/XP : Ctrl+Shift+O suddenly gone crazy.

2011-09-23 Thread Philip TAYLOR (Webmaster, Ret'd)

When, at some point post Seamonkey 2.0.14, Seamonkey
started failing to offer "Paste as quotation" on
an intermittent basis, I switched to using Ctrl+Shift+O
instead.  This has worked more or less perfectly until
today, when I selected and copied a fair slew of Microsoft
Word text from a "Skydrive" file.  I then tried to paste
this into the text of a reply.  What I got instead was :

>> Generate more accessible view (new window)
>> HelpPop-OutClose
>> File
>> DownloadDownloadEdit in BrowserEdit in BrowserFindFindZoom levelPage of 
>> 2Previous PageNext Page
>> Loading...
>> Loading...
How on earth has Seamonkey come to find this in its paste buffer ?

Incidentally, navigating a Skydrive page in Seamonkey
is seriously weird : for one thing, the scroll bars
cannot be dragged by more than a few pixels :-(

Philip Taylor

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: for a friend ...

2011-09-23 Thread Daniel


MCBastos wrote:

Interviewed by CNN on 22/09/2011 08:41, Daniel told the world:


David, the OP is posting to the SeaMonkey newsgroup using SeaMonkey 2.3.3

In my SM 2.3.3, the suggestion you make (even allowing for the typo's),
there is nowhere on the Advanced pane to uncheck "Check default).

My check of Preferences fails to find anything to stop the question
being asked.


In *my* SM 2.3.3, it is there. Maybe it's a Windows-only option; I see
you are using Linux. Both David and the OP use Windows, too.


and, tonight, I'm using Win7 and, sure enough, there it is!! I wonder 
why the difference??


--
Daniel
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: SSL Exploit: Mozilla family no better than the rest of the pack

2011-09-23 Thread Jay Garcia

On 23.09.2011 04:36, Paul B. Gallagher wrote:

 --- Original Message ---

> HACKERS BREAK SSL ENCRYPTION USED BY MILLIONS OF SITES
> ==
> Beware of BEAST decrypting secret PayPal cookies
> 
> By Dan Goodin in San Francisco
> Posted in ID, 19th September 2011 21:10 GMT
> 
> Researchers have discovered a serious weakness in virtually all websites
> protected by the secure sockets layer protocol that allows attackers to
> silently decrypt data that's passing between a webserver and an end-user
> browser.
> 
> The vulnerability resides in versions 1.0 and earlier of TLS, or
> transport layer security, the successor to the secure sockets layer
> technology that serves as the internet's foundation of trust. Although
> versions 1.1 and 1.2 of TLS aren't susceptible, they remain almost
> entirely unsupported in browsers and websites alike, making encrypted
> transactions on PayPal, GMail, and just about every other website
> vulnerable to eavesdropping by hackers who are able to control the
> connection between the end user and the website he's visiting.
> 
> At the Ekoparty security conference in Buenos Aires later this week,
> researchers Thai Duong and Juliano Rizzo plan to demonstrate
> proof-of-concept code called BEAST, which is short for Browser Exploit
> Against SSL/TLS. The stealthy piece of JavaScript works with a network
> sniffer to decrypt encrypted cookies a targeted website uses to grant
> access to restricted user accounts. The exploit works even against sites
> that use HSTS, or HTTP Strict Transport Security, which prevents certain
> pages from loading unless they're protected by SSL.
> 
> The demo will decrypt an authentication cookie used to access a PayPal
> account, Duong said. Two days after this article was first published,
> Google released a developer version of its Chrome browser designed to
> thwart the attack.
> 
> ...
> 
> Full article (Mozilla stuff on p. 2):
> 
> 

See bug https://bugzilla.mozilla.org/show_bug.cgi?id=480514

And an article from the ISC: http://www.dshield.org/diary.html?storyid=11629



-- 
*Jay Garcia - Netscape Champion*
www.ufaq.org
Netscape - Firefox - SeaMonkey - Thunderbird
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: SSL Exploit: Mozilla family no better than the rest of the pack

2011-09-23 Thread Justin Wood (Callek)


On 9/23/2011 5:36 AM, Paul B. Gallagher wrote:
...

Full article (Mozilla stuff on p. 2):




ALSO
http://threatpost.com/en_us/blogs/new-attack-breaks-confidentiality-model-ssl-allows-theft-encrypted-cookies-091611

Lastly,
It is unclear at this point if the attack can be replicated in Firefox 
[Gecko] 7, which has the newer WebSocket protocol. We're working to get 
an answer from the bug reporters.


For further discussion on this threat, I suggest m.d.platform rather 
than the SeaMonkey list, since its not just a SeaMonkey Issue...

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

SSL Exploit: Mozilla family no better than the rest of the pack

2011-09-23 Thread Paul B. Gallagher


HACKERS BREAK SSL ENCRYPTION USED BY MILLIONS OF SITES
==
Beware of BEAST decrypting secret PayPal cookies

By Dan Goodin in San Francisco
Posted in ID, 19th September 2011 21:10 GMT

Researchers have discovered a serious weakness in virtually all websites 
protected by the secure sockets layer protocol that allows attackers to 
silently decrypt data that's passing between a webserver and an end-user 
browser.


The vulnerability resides in versions 1.0 and earlier of TLS, or 
transport layer security, the successor to the secure sockets layer 
technology that serves as the internet's foundation of trust. Although 
versions 1.1 and 1.2 of TLS aren't susceptible, they remain almost 
entirely unsupported in browsers and websites alike, making encrypted 
transactions on PayPal, GMail, and just about every other website 
vulnerable to eavesdropping by hackers who are able to control the 
connection between the end user and the website he's visiting.


At the Ekoparty security conference in Buenos Aires later this week, 
researchers Thai Duong and Juliano Rizzo plan to demonstrate 
proof-of-concept code called BEAST, which is short for Browser Exploit 
Against SSL/TLS. The stealthy piece of JavaScript works with a network 
sniffer to decrypt encrypted cookies a targeted website uses to grant 
access to restricted user accounts. The exploit works even against sites 
that use HSTS, or HTTP Strict Transport Security, which prevents certain 
pages from loading unless they're protected by SSL.


The demo will decrypt an authentication cookie used to access a PayPal 
account, Duong said. Two days after this article was first published, 
Google released a developer version of its Chrome browser designed to 
thwart the attack.


...

Full article (Mozilla stuff on p. 2):


--
War doesn't determine who's right, just who's left.
--
Paul B. Gallagher

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: Controlling font size when composing email ?


Thu, 22 Sep 2011 15:02:56 -0700, /NoOp/:

On 09/22/2011 12:25 PM, Philip TAYLOR (Webmaster, Ret'd) wrote:

Stanimir Stamenkov wrote:


I've set to zoom in/out using Ctrl+mouse wheel
(Preferences / Advanced / Mouse Wheel).  Using it I can
zoom in/out while composing just as with looking at pages.


Oohhh, that is /so/ useful : thank you, thank you, thank you !
For the first time since Seamonkey 2.0.14, I can zoom in to
my heart's content, instead of being restricted to the miserly
three levels of zoom that Ctrl + / Ctrl - now offer.

Now why is it that Ctrl mouse wheel can do it, yet
Ctrl + / Ctrl - cannot ?


And what if you've a mouse without a mousewheel?


It works with the touchpad on my netbook, for example - the gesture 
used to scroll.  For the rest, the default font size (possibly 
adjusted by the user) when composing should be o.k. without need to 
zoom in/out (see my second reply to this thread).  I guess that's 
why there's no Ctrl +/- key bindings in the composition window.


--
Stanimir
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: Controlling font size when composing email ?