Do more on the web, with a fast and secure browser!
Download Opera browser with:
@leocg said in Adblocker not existing on google and FB?:
Try removing the sites from the adblocker exception list.
who in hell added these? I wasnt it.
also why do all the other entries just show the adblocker icon but just without color for showing that the adblocker is disabled here with the option to re-enable them. these removed the adblocker from those sites ENTIRELY.
why does the adblocker not appear on google and Facebook anymore, how can I get it back?
@mgeffro Github and Google don't really surprise me. if I remember correctly, these weren't being asked on chrome meaning the registration just passed. although it might be worth a look for the recent chrome source since it changed the result of that dialog. Deny is now no longer an error but instead chrome changing the attestation cert and masking the U2F device.
it in general might be good to let all dialogs from chrome pass through somehow (if possible) even if they look awkward, unless opera properly replaced or otherwise dealth with them, better awkward than not working
@nvmjustagirl said in U2F registration issues:
Are you on a desktop computer.. laptop..
Note - Since this computer lacks a platform authenticator, the website may require the user to present their USB security key from time to time or each time the user interacts with the website. This is at the website’s discretion
desktop but irrelevant, it isnt the website kicking me out but the U2F not triggering (recent) or the registration triggering but failing hilariously (earlier issue), with the recent one being confirmed by opera meaning it isnt the website doing weird stuff.
@mgeffro said in U2F registration issues:
@my1xt I can confirm that recently we fixed issue with U2F not working on on our beta (55) and developer (56) streams. It was already fixed in latest developer release and should be available with next beta update. Will have to look into the registration issue.
Okay nice to know that at least login will work again.
Regarding U2F Register while I did state it a bit weirdly I still believe this is an issue which has been brought from chrome but opera not having been prepared for it!
@vashiru said in U2F registration issues:
@nvmjustagirl This doesn't solve the issue. The Web Authentication API is already enabled. I can use it to authenticate. It's just the registration of new U2F keys that's broken.
well funnily enough I now cant even auth anymore in Opera (Beta 55.0.2994.29) the U2F device wont even blink. Chrome and Vivaldi on the other hand just do both registering and Authing.
@l33t4opera why not make a setting for this? everytime I add stuff to the dial I need to move them cause the newly added ones kill the arrangement when they come on first.
@burnout426 It might also be a mouse hardware issue. my mouse for example has the issue that it sometimes fire a double click instead of a single one, which can happen when the contact of the button isnt perfect.
logging in isnt the problem.
Adding a key is the problem.
while some sites like the yubico demo page spawn on both chrome and opera a notification asking whether the site may get key data, some other sites like github, dropbox or localhost dont spawn such a notification and while they just pass in chrome, opera throws U2F error 1.
more info here:
https://forums.opera.com/topic/26772/u2f-registration-issues
you can also click the wheel if you have one or the middle mouse button if you are on a laptop that has that or such an old mouse.
some laptops also allow to treat click both mousekeys to middle mouse button.
The new opera version introduced issues with Registering U2F devices though.
In Opera 53 stable they apparently tried to make U2F even more secure by pulling out a prompt whenever a page wants to register a U2F token about whether the site may see the "serial number" of the Security key.
but there are 2 problems with that whole thing:
I have now so far seen this issue on both Github and dropbox, 2 sites which are fairly big, and therefore should really have a proper U2F implementation.
@concretable you totally dont understand what the button does.
it's for selecting a text that is an address but not a clickable link, by that you can avoid copypasting it into the address bar and it's just faster
you select the text, right click and say go to address.
so why is it more secure to have it open a save dialog in comparison to just ask download or not download
this is how it looks with the flag set to no but prompt on risky downloads on active
@leocg said in please bring back show-save-file-dialog-on-risky-download:
Executable files will trigger the save as dialog for you to choose where to save it. In this case, last used folder will be remembered by Windows.
and THIS is the problem, which wasnt there when this flag was still there (or even earlier, default)
but the way it works now is totally ugly, it saves the files somewhere were you last used that save dialog on instead of the folder you have preset for DLs, which is crazy. the other 2 big non-MS browsers (FF and chrome), and even IE, which had been doing this for half an eternity are doing it like that as well. they ask whether to save or not and dont pop up something that defaults to the last location where you for example saved a picture in.
also hadnt been this even standard behavior for a long time?
better than nothing, certainly, but my opinion is that if we are doing it we should do it right from the beginning.
also opera on phones should finally get the ability to work with encrypted sync data
well that might be true for those that do use 2FA on their mail acc but probably not many actually do that, also lets not forget that the email provider itself will also pose a weakness. if a big attacker gets the mail provider to cooperate (or there's a hole in their systems and someone can exploit that) you have a problem.
opening an app and typing a code or just pluggin in a nice USB stick a pressing a button on it isnt too hard for a high level security.
sorry for pushing this but I have a question. is there any reason why this was removed in the first place?
