Pale Moon Version 27.7.0 Released with Security Updates

Digerati · January 19, 2018, 03:15:58 PM

I've been having lots of little irritating problems with PM lately. :( Some web pages don't load properly (like my MVP profile page - PM will not let me log in - no problems with other browsers). Spell check sometimes is either very slow of simply does not detect clearly misspelled words unless I disable then re-enable spell checking again.

I have disabled Adblock Latitude, no luck. Purged all PM history and cookies with no luck. Ran Windows cleanup and CCleaner with no luck. I even totally uninstalled PM and reinstalled from scratch and the problems persist. :(

Corrine · January 19, 2018, 03:41:13 PM

That's strange. Your MVP Profile loaded just fine here with PM. (Reminder: Update the entry for Sysnative to Forum Moderator. ;) )

Digerati · January 19, 2018, 04:57:38 PM

@satrow - thanks for that link. I wonder, however, about Malwarebytes 3.x and its web protection feature? Should that then also be disabled going by the same logic?

@ Corrine - yeah, it loads fine for me too. But it shows I am not signed in. When I click to sign in, I get the following weird page. If I click Sign in again on that weird page, I go back to that same weird page. I have no problems at all with any other browser. I can sign in and stay signed in.

https://imgur.com/a/WQpfd

Oh, and under recognitions on the left, it shows I am moderator for hardware. Thanks.

plodr · January 20, 2018, 03:14:49 PM

I don't have signing in issues. (except my main 3 email sites now no longer want to remember my password; since I have long complicated passwords, this is very annoying.) I have MBAM v 3 all protection on.

I don't use AdBlock Latitude. I use uBlockOrigin in Palemoon. It wasn't updating but someone wrote an addon that will allow it to update. Let me see if I can find that addon.

https://forum.palemoon.org/viewtopic.php?t=16543
I've had uBO installed for such a long time that I didn't need to do all the things mentioned in the 13 posts.
I just had to install this https://addons.palemoon.org/addon/ublock0-updater/

Corrine · January 20, 2018, 03:42:55 PM

You can over-ride the change for the password change made for privacy in the Pale Moon update. Go to Tools >Preferences > Security tab. Check the box by "Automatically fill in log-in details".

Digerati · January 20, 2018, 04:43:31 PM

I never have allowed my browsers to remember passwords. I feel it is not good "physical" security. It is kinda like leaving your keys in the door lock.

I thought about using uBlockOrigin when I uninstalled and reinstalled PM, but talked myself out of it after reading through this thread.

Digerati · January 20, 2018, 05:12:21 PM

QuoteI don't have signing in issues.

I forgot to say, that signing in issue seems to be only with that Microsoft site. I may see sites warn that I am using an outdated or unsupported browser, but I still get in with no problems.

So it seems to me it is something Microsoft is doing that affects Pale Moon, but no other browser. :-\

Corrine · January 20, 2018, 06:24:29 PM

As to remembering passwords not being good "physical" security, yes, that would be a problem if someone who wasn't supposed to had physical access to the device. However, I really don't see the benefit of having the option to turn on/off the ability to automatically fill in log-in details unless it is for "over the shoulder" privacy. Otherwise, anyone with physical access to the device could easily change that setting to obtain the passwords. I have four unique/complex passwords for Sysnative -- logon, mod, admin and dev server. Sure I could write them down since there is no way I remember them or am likely to type them correctly because of the complexity but that would be the same as having them filled in by the browser if someone got access to where they were written.

I started using ABL but found that I preferred uBlockOrigin. I like the additional features available via the Dashboard. Unfortunately, it needs the uBlockOrigin Update extension which "provides updates for uBlock Origin directly from GitHub. It intercepts Add-ons Manager requests and returns the latest XUL (legacy) version compatible with Pale Moon or SeaMonkey, Thunderbird and Firefox." because it wasn't being updated on Pale Moon.

Pete! · January 20, 2018, 07:51:58 PM

The fact that browsers can be "synchronized" across devices. leads me to believe that somewhere out in cyberspace there is a storage device containing my "memorized" passwords, just waiting for a hacker who's clever enough. There's also the less likely "stolen computer" problem.

I don't have a problem with forum passwords, (unless I'm a moderator, or an administrator), or social media, but the passwords to my bank, insurance carrier, and broker DO NOT get memorized.

Corrine · January 20, 2018, 07:58:08 PM

I agree completely regarding passwords to bank, insurance, credit card, etc., Pete. I also don't synchronize passwords across devices. If need a password for another device, I look it up.

Digerati · January 20, 2018, 08:12:44 PM

QuoteOtherwise, anyone with physical access to the device could easily change that setting to obtain the passwords.

No sure what you mean. They would only be stored if the option is enabled in the first place. Turning the option on would only save them from that point on so no one would be about to obtain passwords previous used.

It is not just about "over the shoulder" concerns - though that typically means they have to watch your fingers, not the screen since most screen passwords are hidden as ********. The problem I am concerned about is a thief breaking into the home as Pete just mentioned, and stealing the computer and then having access to the sites.

I have 100s of passwords. No way can I remember them all. So I use a password manager and only have to remember it's password. I use that to remember credit car PINs and other sensitive numbers too. I can create my own password or have the manager create super strong ones and then cut and paste them in. That is what I do for many sites. My manager, Splash ID has a smart phone companion program that can be synced up too - but I don't use on my phone. When I used to carry a Palm PDA, I synced it to that, but that was via USB cable, not over the air so I was not worried about anyone hacking or intercepting it.

QuoteThe fact that browsers can be "synchronized" across devices. leads me to believe that somewhere out in cyberspace there is a storage device containing my "memorized" passwords.

Good point. That data should be encrypted - just common sense - but then I sure would have thought it common sense the data at Equifax would have been encrypted too. >:(

plodr · January 21, 2018, 12:36:15 AM

QuoteCheck the box by "Automatically fill in log-in details".

Thank-you, thank-you, thank-you!

This was driving me crazy because gmail and yahoo weren't working and I could not figure out why.

I don't synchronize any of our computers, my tablets nor my phone.

There is only 1 computer that I want things filled in: my desktop computer. This is only for forums and email. I never save info on shopping sites, paypal nor bank sites. I also don't put passwords on PostIt notes and attach to the monitor!!!

I also save nothing and have to login and fill in items if I grab my laptop, a tablet or my phone.

Corrine · January 22, 2018, 03:36:40 PM

Here's the reason for the change in "autofill" by Pale Moon: You Should Turn Off Autofill in Your Password Manager

Digerati · January 22, 2018, 05:22:20 PM

Nice find, Corrine. So clearly, it is not just about "physical" security. I am glad I never let my browsers save my passwords. And my password manager does not integrate with my browsers either. :)