11.0.5rc2 Endless SPAMMING requests to sync-messages.invalid

Bug reports and enhancement requests
Post Reply
barbaz
Senior Member
Posts: 9279
Joined: Sat Aug 03, 2013 5:45 pm

11.0.5rc2 Endless SPAMMING requests to sync-messages.invalid

Post by barbaz » Thu Oct 31, 2019 3:49 am

Under conditions which I'm not completely certain of (although I've managed to reproduce this repeatedly), NoScript 11.0.5rc2 endlessly spams a TON of requests to "sync-messages.invalid", which results in spamming my local dnsmasq instance with repeated attempts to lookup this nonexistant domain. This doesn't stop until I close the browser.

I wonder if one of the reproducing conditions involves some interaction with the popup of WebScrapBook?

I was previously using NoScript 11.0.4rc15, which did not do this (as far as I noticed).
*Always* check the changelogs BEFORE updating that important software!
-

barbaz
Senior Member
Posts: 9279
Joined: Sat Aug 03, 2013 5:45 pm

Re: 11.0.5rc2 Endless SPAMMING requests to sync-messages.invalid

Post by barbaz » Thu Oct 31, 2019 4:46 pm

Still occurs with 11.0.5rc3
*Always* check the changelogs BEFORE updating that important software!
-

DJ-Leith
Senior Member
Posts: 130
Joined: Thu Aug 04, 2011 4:23 pm

Re: 11.0.5rc2 Endless SPAMMING requests to sync-messages.invalid

Post by DJ-Leith » Thu Oct 31, 2019 9:33 pm

I have seen the same. I have uMatrix and NoScript (details below).
In my case, using the uMatrix logger, it fills up with MANY requests per second.

Like this:

Code: Select all

20:12:32	behind-the-scene		xhr	https://sync-messages.invalid/moz-extension://375aab03-55fb-4ac1-a2e2-a2647114f356/?id=34899cc575.837e%2Cabout%3Ablank&url=about%3Ablank&top=true&suspend=true	3p
I noticed it because it 'started the fan' in my PC.
CPU usage, reported by Windows Task Manager, went up to over 60%.
All of this was "firefox.exe".

Normal "CPU Usage", with 8 "firefox.exe" running, on a Profile with
NoScript 11.0.4rc13 (and uMatrix) is less that 2%, often 0%.
There are only 4 sync-messages.invalid since I started this Profile, more than 10 min ago.

On trying to document, I am having difficulty in reproducing.
I wonder if it is only seen 'soon after the Profile is launched' for the
first time that day? However, I have now seen it again.
Perhaps it is a 'race condition' with uMatrix?

All my Profiles have NoScript and uMatrix.

STR
With a Firefox ESR Profile that has NoScript 11.0.5rc3 (and uMatrix 1.4.0)
Both NoScript and uMatrix have a 'very short whitelist'.

Code: Select all

1. Start Windows "Task Manager", "Processes" Tab, "Show processes from all users".
2. Launch Firefox (with Home Page set to about:blank).
3. Open the uMatrix logger.
4. In a new window, go to https://arstechnica.com/2019/10/
5. In uMatrix, Temp allow scripts, images and CSS from arstechnica.com
6. In uMatrix, Temp allow images and CSS from cdn.arstechnica.net
7. In NoScript Temp allow scripts from both ... arstechnica.com and ...arstechnica.net
8. In uMatrix, Temp allow sripts from cdn.arstechnica.net
Keep an eye on the uMatrix logger.

At 4. there are many

Code: Select all

... arstechnica.com	--	other	https://noscript-csp.invalid/__NoScript_Probe__/ ...
This is normal (and expected by me).

At 6. the images, from the CDN will appear (again expected)
and the uMatrix logger includes:

Code: Select all

... arstechnica.com		image	https://cdn.arstechnica.net/wp-content/uploads/2019/10/sms-150x150.jpg ...
This is expected (the uMatrix logger is showing "image" from the CDN is now alowed; no "--" in the log [for showing a block]).

I am still using NoScript to block scripts at this point.


At 8. the sync-messages.invalid starts to spam the uMatrix logger

Code: Select all

 ... https://sync-messages.invalid/moz-extension ...
I put more detail in the FIRST example at the top of the post.


Using about:support to document:

Code: Select all

Name       Firefox
Version    68.2.0esr
Build ID   20191016163237
User Agent Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0
NoScript   11.0.5rc3
uMatrix    1.4.0

DJ-Leith

Edited to add more comments about uMatrix logger (at 6.).
Last edited by DJ-Leith on Thu Oct 31, 2019 10:09 pm, edited 1 time in total.
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0

barbaz
Senior Member
Posts: 9279
Joined: Sat Aug 03, 2013 5:45 pm

Re: 11.0.5rc2 Endless SPAMMING requests to sync-messages.invalid

Post by barbaz » Thu Oct 31, 2019 9:49 pm

In case it's relevant, I am also using µMatrix 1.4.0, and my browser is Waterfox Current 2019.10 which is based on Firefox 68 ESR. However, I don't think my µMatrix is blocking any of the things DJ-Leith mentioned.
*Always* check the changelogs BEFORE updating that important software!
-

DJ-Leith
Senior Member
Posts: 130
Joined: Thu Aug 04, 2011 4:23 pm

Re: 11.0.5rc2 Endless SPAMMING requests to sync-messages.invalid

Post by DJ-Leith » Fri Nov 01, 2019 12:00 am

I saw that https://noscript.net/getit
now has a NoScript 11.0.6rc1

So, I updated the Profile that had NoScript 11.0.5rc3 to 11.0.6rc1
and attempted to reproduce, using my STR - above.

I am havig trouble with the forum spam filter - so I'm going to split up
this post into smaller chunks.

After I did 4. Just one

Code: Select all

 ... https://sync-messages.invalid/moz-extension ...
This is looking good. I often see 4-6 when I go to a website.

After I did 6. There is another one (so two in total so far)

Code: Select all

 ... https://sync-messages.invalid/moz-extension ...
along with the expected

Code: Select all

... arstechnica.com	--	other	https://noscript-csp.invalid/__NoScript_Probe__/ ...
and

Code: Select all

... arstechnica.com		image	https://cdn.arstechnica.net/wp-content/uploads/2019/10/sms-150x150.jpg ...
and

Code: Select all

... arstechnica.com		css	https://cdn.arstechnica.net/wp-content/themes/ars/assets/fonts/bitter-bold-webfont.ttf ...
These three items in the log (one block example and two allowed) are expected (and normal in my experience).

Remember, NoScript is still blocking scripts - at this point.

continued ...
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0

DJ-Leith
Senior Member
Posts: 130
Joined: Thu Aug 04, 2011 4:23 pm

Re: 11.0.5rc2 Endless SPAMMING requests to sync-messages.invalid

Post by DJ-Leith » Fri Nov 01, 2019 12:02 am

After I did 8. There is a third

Code: Select all

 ... https://sync-messages.invalid/moz-extension ...
Then, as I open EACH article, that is in the October 2019 list at Arstechnica, e.g.
https://arstechnica.com/science/2019/10 ... fferently/
I see another

Code: Select all

 ... https://sync-messages.invalid/moz-extension ...
I think this is how 'things used to be' in e.g. NoScript 11.0.4rc13

As I said before, it is normal to see a few.

So, thank you, again Giorgio - looks like another very rapid fix!

If I see any more 'unexpected spamming', in the uMatrix logger, I will report.

DJ-Leith
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0

barbaz
Senior Member
Posts: 9279
Joined: Sat Aug 03, 2013 5:45 pm

Re: 11.0.5rc2 Endless SPAMMING requests to sync-messages.invalid

Post by barbaz » Fri Nov 01, 2019 1:31 pm

Thanks for the update DJ-Leith. I now have NoScript 11.0.6rc2 and so far this hasn't happened again.
*Always* check the changelogs BEFORE updating that important software!
-

Post Reply