Posts made by MichaelRoss5

@wjgvm said in uMatrix:

@wjgvm

Sorry, my google isn't translating to English

Sorry, my google isn't translating to English

Stops protonmail sign on, had to disable to work

@leocg Will wait and see what HTTPS everywhere come back with, they prevent you using HTTP unencrypted websites and try to make HTTP into HTTPS, I assume they are using cookies to do this. It will depend on what level of security is needed for the information in the cookie

@nvmjustagirl HTTPS everywhere extension is the cause of the problem, have emailed them to look into.

@MichaelRoss5 Yes I have https everywhere extension with "Encrypt All Sites Eligible is ON" Will have to let https everywhere know

@leocg Must be an extension I am using?

@nvmjustagirl I tested microsoft Edge which is also chromium based and it has a different critical issue but not the same as Opera and Chrome.

@nvmjustagirl I thought my chrome and opera were auto updating on exit, so , manually updated to latest versions, (not Dev), still get the same errors, what do you mean by setting flags to default?

Thank you, you may also want to review the non critical issues.

I have found with browseraudit.com both Opera and Chrome have the same security issues. The below issue is critical the other 23 are minor issues.

Problem - cookie set by JavaScript should not be sent over HTTP

This critical test executed in ≈834ms and failed for the following reason: The cookie was sent to the server.
Test function:

function() {
var thisTest = this;
$.cookie("sessionSecureCookie", "910", {
secure: true,
path: "/",
domain: ".browseraudit.com"
});
$("<img>", {
src: "http://browseraudit.com/set_session_secure_cookie"
}).load(function() {
$.get("/get_session_secure_cookie", function(data) {
if (data === "nil") {
thisTest.PASS("The cookie was not sent to the server.");
} else {
thisTest.CRITICAL("The cookie was sent to the server.");
}
});

Hi Dodobird, The other problem is addons or extensions on the PC version do not work on the mobile version of Opera.

@leocg correct

@leocg Yes, further investigation shows passwords are there but on some sites they are no auto populating, have to manually enter

@tarakbumba I can see the saved passwords in andriod opera settings, it just doesn't auto populate on some sites

@zalex108 I have my password encrypted, tried re-encrypting but didn't fix and enabled Two Factor Authentication, didn't help

@zalex108 Security wise, is it all encrypted so KeePass cannot see your information, I have reverted to doing sensitive stuff on my laptop with all the extensions, for browsing securely on android smartphone have installed duckduckgo browser. Apparently Brave and Vavaldi browsers are worth looking at for security on Andriod

Allow addons

@dodobird1991 same problem, also wish it would use addon used on my pc