Jump to content

Leaderboard

Popular Content

Showing content with the highest reputation on 01/17/2020 in all areas

  1. GitHub relies way too much on the UA, and none of our browsers provides GitHub with a suitable UA out of the box (or .7z). Well, Serpent 52 does, but only in "native" move (not in FF-compatible mode). So Iset an SSUAO with Serpent 52's native UA string, Mozilla/5.0 (Windows NT 6.1; rv:52.0) Goanna/4.4 Basilisk/52.9.0, for github.com (to be consistent and safe, I also set the same SSUAO for githubassets.com and githubusercontent.com, although I don't think those are strictly necessary). Note that FF 60.9 also works, but the MCP's latest browsers now default to FF 68.9, which doesn't work (unless you're running a Quantum browser). It's nonsense like this that makes me somewhat sympathetic to what Google is proposing to do with user agents. Web sites should base their functionality on the capabilities of the browser, not its version or what OS it's running on. I've been wondering the same thing. My first thought was that the vulnerability probably affects versions based on FF 49, when the JS engine was rewritten, or later; if so, then FF 45, NM 27, ArcticFox, etc. wouldn't be vulnerable. But as you say, the javascript.options.ion pref does exist in those older browser versions, so I'm not all that confident about that assessment.
    1 point
  2. @dencorso --> "SNAKE OIL 2020" <-- I refuse to (Write In) VOTE for YOU as USA PRESIDENT (residing in BRAZIL). You need to 'come up' with a better 'hype' if you want MY VOTE !!! ... ... @Mathwiz As observation , do NOT think that a lot of RT Browser users much know or care just what "SSE" is from a 'technical' CPU perspective. More likely , my guess , they try an RT Browser because it MIGHT work on WinXP OS , and they need that. Again , I like "RFox" (Roytam + FireFox) better for the RT Browser prefix. And again , IF that 'Mathwiz' and 'Matt A Tobin' can agree on some names , I would likely have no problem with it. "RFox MAILNOVA" = RT MailNews Emailer "RFox AURA" = RT BNAV Browser "RFox ELARA" = RT ST55 Browser "RFox CRESCENT" = RT ST52 Browser "RFox CORDELIA" = RT NM28 Browser "RFox IO" = RT AF27 Browser "RFox RIGEL" = RT KM76 Goanna Browser The words ELARA , CRESCENT , CORDELIA , IO have a 'Moon' meaning connection. But not seeing that this would create a problem for PALE MOON ('Matt A Tobin'). The words AURA , RIGEL , NOVA (eMailer) have a 'Celestial' type meaning. But I would let 'Matt A Tobin' have strong input on IF that he sees some kind of problem with PALE MOON and RT Browsers with 'Celestial' names.
    1 point
  3. I've added the latest working installer (1.8.15) to my EOL repository on my web-site: http://i430vx.net/files/XP/EOL/tsetup.1.8.15.exe
    1 point
  4. old good TCPMP for Windows may work as well, it even work on NT 3.51.
    1 point
  5. The latter pref is the one you need for general browsing, and it is supported in current browser versions. (AIUI the "chrome" pref is for the JS in add-ons and such.) Sadly, setting this false results in a significantly slower browsing experience here at MSFN. Even this results in a painful performance penalty on my home PC (not the best, but it is a 64-bit dual-core AMD, so it shouldn't be that horrible). So I think using @roytam1's latest versions (if you can use them), and leaving these prefs at their default, is the best choice.
    1 point
  6. POSReady updates have closed many vulnerabilities and added many new features, so it is advisable to install all of them.
    1 point
  7. So, taking off those "deny" permissions fixed it. I guess from now until Office 2010 EoS, I'll need to delete the Excel.Sheet.12\shell key and re-import my custom changes after each month's updates. The only thing I can't figure is why a "security update" even bothers resetting those registry entries. Maybe it just runs "Repair Office Installation" under the covers after it replaces the files included in the update.
    1 point
  8. Hi everyone. real talk here who doesn't like wolves? or Wolfs The best new moon name is Wolf Moon as This full moon occurs in January—a time when tribes often heard wolves howling outside their villages. The best serpent name is Cerberus as in 3 headed wolf , a serpent for a tail, and snakes protruding from multiple parts of his body. The best UXP name is Sea Wolf as in the boat. giving hints, to sea monkey and Navigator. Ty all. Make is so.
    1 point
  9. A peach? Hmm, not so bad at all... Much more my taste as snakes 8-) A peach... and.... cherries... Shall we do fruits? His changelogs are full with "cherry-picking", very fitting :D
    1 point
  10. This is just a mockup... there's no about-wordmark.svg in New Moon... so where is it the brand name ought to go? And... how do I remove the whitened box that crosses the image? peach moonshine.zip
    1 point
  11. 1 point
  12. 1 point
  13. 'Nuff said! [image: <http://clipart-library.com/clipart/65111.htm>]
    1 point
  14. Current zero-day hype: SCARY as hell, as always. Everywhere. If you're using even a just slightly older browser version, just a few days old, you're already as good as ***DEAD***! Boah... But also as always (99%), this only can hit if JAVASCRIPT is allowed? And additionally, this even requires a special JS feature "JIT" to be allowed too? And the only purpose of this is to speed up scripts, in exchange for much higher dangers? At least if I get it right and this article is about that current hype? https://nakedsecurity.sophos.com/2020/01/09/browser-zero-day-update-your-firefox-right-now/ If that's all, have no worry... My *really* old browser version allows blocking JIT since years (and JS by default off anyway, or freezing for lack of RAM): pref("javascript.options.jit.chrome", false); pref("javascript.options.jit.content", false); pref("javascript.options.jit.__INFO", "INFO: for better JS speed, but highly dangerous, zero-day vulnerable"); But no idea if those prefs are still valid for current modern browsers. And also added today to my tweaked Default prefs file, acc to above article, just in case I'll some day install Tor: pref("javascript.options.ion", false); pref("javascript.options.ion__INFO", "INFO: JS-JIT in Tor, for better JS-speed but highly dangerous, zero-day vulnerable");
    1 point
  15. I don't remember seeing that but I like it too, particularly for @roytam1's SSE version of FF 45 ESR. It concisely says exactly what it is. But for the present let's try to stay focused on MCP's forks, New Moon and Serpent, and MAT's forks, Borealis and Interlink. Those are the ones that keep causing us grief. Edit: Attaching @siria's logo. Looks like it might be a natural for Draconis, or whatever we end up calling Serpent (if we stick with the serpent theme, that is).
    1 point
  16. a pull request about enabling aes128-gcm-sha256 in pref has been created. https://github.com/rn10950/RetroZilla/pull/40 and also NSS code changes for support SHA384 have their own pull request: https://github.com/rn10950/RetroZilla/pull/38
    1 point
  17. UPDATE! As the RDD is operative again, I have done some minor updates to the 38 ESR and 52 ESR versions of the UOC Patch (including the 38 ESR version for Macintosh System and Linux), which improve the scrolling speed and smoothness. Please update!
    1 point
×
×
  • Create New...