June 28, 20251 yr I get a warning from the Malwarebytes Browser Guard extension on that site, but it works fine if I override it. Supermium 132.0.6834.224 on XP.
June 28, 20251 yr 16 hours ago, reboot12 said: What OS? Profile Information OS Vista Home Premium x64
June 28, 20251 yr 2 hours ago, Karla Sleutel said: Profile Information OS Vista Home Premium x64 Many people use a different system than they have in their profile, or have several computers with different systems.... So reboot12 was right to ask the question. Edited June 28, 20251 yr by mjd79
July 1, 20251 yr On 6/28/2025 at 4:37 PM, Karla Sleutel said: https://win32subsystem.live is down completely, inaccessible at all. If I click "ignore and go to non-secure http", nothing happens at all. Empty. Could be due to yet another malware strike? https://github.com/win32ss/supermium/issues/1481 It's ok for me, 126R7,XP x86
July 3, 20251 yr The site is still blocked on the DNS level in some countries like Canada. Obtained the latest 132 copy from Github. Now I get this.
July 3, 20251 yr Guys, girls thanks all, I'll try to switch off the extensions one by one, cloudflare may not like them.
July 5, 20251 yr On 7/3/2025 at 9:54 PM, Karla Sleutel said: Guys, girls thanks all, I'll try to switch off the extensions one by one, cloudflare may not like them. HA HA，I used Clash that build on Cloudflare pages,so... Edited July 5, 20251 yr by hidao
July 5, 20251 yr New release 132.0.6834.226 R5. This release was expedited to cover critical vulnerability CVE-2025-6554 (#1486). Some other changes were made: (#1480) - "Web Scrobbler" extension should now work on Windows XP, as well as other extensions that create notifications (#1473) - Favicons should no longer slide out of tab bounds when dozens of tabs are open in a given window (#1483) - Support for custom tab and new tab button shapes that are derived from an scs file are disabled by default after some users experienced performance declines after their introduction. This functionality is now gated behind the --enable-advanced-customization switch. Unless someone tells me that CVE-2025-6554 (#1486) is really important, I think I'll pass on this one.
July 5, 20251 yr 10 minutes ago, Dave-H said: Unless someone tells me that CVE-2025-6554 (#1486) is really important, https://github.com/advisories/GHSA-mj9c-f5v6-7665 Severity: High (8.1/10) Quote ... allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop_30.html Quote Google is aware that an exploit for CVE-2025-6554 exists in the wild. Manual mitigation, at the expense of performance, if you don't want to update: https://github.com/Alex313031/thorium/issues/1024#issuecomment-3038992237
July 6, 20251 yr It's well hidden: Settings / Privacy and Security / Manage V8 Security (near bottom of page - scroll down) / Don't allow sites to use the V8 optimizer (This will slow down Javascript) Really old Chromium versions (360EE) don't have V8 and so are (presumably) not vulnerable
July 6, 20251 yr 22 hours ago, Mathwiz said: Really old Chromium versions (360EE) don't have V8 and so are (presumably) not vulnerable Are you sure???????? https://en.wikipedia.org/wiki/V8_(JavaScript_engine) Excerpt from Wikipedia. "V8 is a JavaScript and WebAssembly engine developed by Google for its Chrome browser. V8 is free and open-source software that is part of the Chromium project and also used separately in non-browser contexts, notably the Node.js runtime system. Other server-side JavaScript runtimes use alternative engines, such as Bun and Hermes. Wikipedia Developer(s) Google Initial release September 2, 2008 Written in C++"
July 6, 20251 yr On 7/5/2025 at 10:38 AM, Dave-H said: Unless someone tells me that CVE-2025-6554 (#1486) is really important, I think I'll pass on this one. Isn't the minimum requirement chromium 138? https://www.securityweek.com/chrome-138-update-patches-zero-day-vulnerability/
Create an account or sign in to comment