[RESOLVED] NoScript 1.9.9.05 and Yahoo mail problem

[therube]

(Whatever the cause of the problem <& now seemingly fixed since 1.9.9.06>, it looks like that Gecko 1.8.1 was not affected by this issue.)

[something_new]

update to version 1.9.9.07.. issue has already been fixed

[Tom T.]

NOT. Have had this happen to me twice in the past 4 or 5 hours upon logging in to Yahoo, after updating to 1.9.9.07.

This is why I still think it might be a Yahoo procedure, but I have not received the answer from Customer Care yet. Will advise when received.

[Tom T.]

Received today from Yahoo Mail Customer Care:

Hello Tom,

Thank you for contacting Yahoo! Customer Care. This message is to inform
you that your Yahoo! Mail inquiry will require additional work before we
can provide an answer. So please note that we are routing your issue to
a Technical Support Agent with specialized expertise, and you can expect
a response from us within the next 24 hours after receiving this email.

Sincerely,

The Yahoo! Customer Care Team

[Tom T.]

Received today a more personalized message from a Yahoo support representative. He asked for a screenshot of the second login screen (the "verify password" screen), which I sent him.

Also to note that this user has continued to experience the problem frequently, but not always, on NS latest stable release 1.9.9.07.

Further updates when Yahoo replies.

[Giorgio Maone]

@Tom:
Have you got any special cookie processing in place?
Do you have a dynamic IP?

[Alan Baxter]

@Tom:
It wouldn't hurt to update to the most current version, even though it hasn't been officially released though AMO updates. That's what Giorgio and the rest of us troubleshooters are using. It's labeled unofficial development build, but it's actually the best and most current version. It just hasn't been released yet because some users have complained about getting more frequent updates. http://noscript.net/getit#devel

[Tom T.]

@Tom:
Have you got any special cookie processing in place?
Do you have a dynamic IP?

All cookies are allowed from yahoo and yimg.com. Told the rep I had three folders of cookies, mail.yahoo.com, us.mcXXX.mail.yahoo.com, where x = integer 0-9 (not sure if that's privacy-sensitive); each containing one cookie of the same domain, and folder yahoo.com, with 8 cookies, including the SSL cookie for the login.

Third-party cookies are blocked by default, and only session cookies (not permanent) are allowed, as they have been for years, long before this issue started.

No other special cookie processing. Installed Cooke Editor a while back, in the hopes of extending certain sites' cookie-expiration time, but with a session cookie, it seems to do no good, so I never use it. I can disable it, but my understanding is that it doesn't *do* anything unless the user does something.

Do you have a dynamic IP?

At first, yes. Then this cable provider reneged on their promise and started assigning permanent static IPs. I complained of the privacy implications. That was a year or so ago. Recently, it does seem to be changing occasionally -- I power the modem and router on each day and off each night -- but it wouldn't change during the day, nor certainly during a session. Yahoo mail always worked when I had dial-up with random DHCP assignment at each dial-up.

@ Alan: Will give it a try, but as mentioned several times earlier in this thread, I've seen this for months, across many versions of NS, both official and dev, long before .9.05 and continued to see it after another poster said that it was solved in .06 or .07, which is why I'm still suspicious that it's a Yahoo issue. At the time, .07 *was* the latest build; wasn't aware that further attempts to address this issue were in later dev builds.

Don't see anything in .10 that would appear to affect this, but will try anyway and let you know.

[Tom T.]

NS 1.9.9.10
Add N Edit Cookies disabled (my mistake on the name of the add-on before).
Other add-ons, @ Giorgio's recommendation:
Ref Control
SafeHistory
SafeCache

Noticed that yahoo.com was not whitelisted, only mail.yahoo.com, https://login.yahoo.com, https://edit.yahoo.com (for preferences/password changes? I think) and akamai.net. This had always been enough before, and prevents annoyances when redirected to yahoo home page after logging out of mail.

Tried w/l yahoo.com.

Issue didn't occur on first few tries, but it's always been random anyway. Successfully reproduced on the 4th or 5th try under the above settings.

FWIW, I keep three Yahoo accounts: One for business/work only, one for friends, incl this forum notification, and a "spam magnet" account for dealing with unknown (or known) online merchants, so that if the address is sold, rented, etc., all spam would go there. Worked very well at keeping the other two spam-free, although Yahoo has improved their filters to the point that spam is very rare at any of them any more.

Issue occurs randomly at all three addresses.

[Alan Baxter]

@Tom:
It wouldn't hurt to update to the most current version, even though it hasn't been officially released though AMO updates. That's what Giorgio and the rest of us troubleshooters are using. It's labeled unofficial development build, but it's actually the best and most current version. It just hasn't been released yet because some users have complained about getting more frequent updates. http://noscript.net/getit#devel

For some reason I didn't tumble to the fact that "Tom" was "Tom T." It must have seemed to kind of weird for me to be holding your hand like a newbie. My apologies if you didn't get a good laugh out of that.

[Tom T.]

@Tom:
It wouldn't hurt to update to the most current version, even though it hasn't been officially released though AMO updates. That's what Giorgio and the rest of us troubleshooters are using. It's labeled unofficial development build, but it's actually the best and most current version. It just hasn't been released yet because some users have complained about getting more frequent updates. http://noscript.net/getit#devel

For some reason I didn't tumble to the fact that "Tom" was "Tom T." It must have seemed to kind of weird for me to be holding your hand like a newbie. My apologies if you didn't get a good laugh out of that.

Naah, no good laugh, just figured it was Alan being Alan and shrugged it off. (kidding!)

Let me hold your hand: See the user name in green? According to the forum legend, that indicates a "global moderator". (kidding^2!)

(Note to forum members and guests: Please forgive our little humor among ourselves. It lightens up what is sometimes a tedious, though gratifying, task.)

That's what Giorgio and the rest of us troubleshooters are using

.
This troubleshooter started beta-testing dev builds soon after joining the team. However, being not hot-wired to the Net 24/7 like most 12-yr.-olds today , and since there's not a notification system, I have to remember to check for them. I suppose I could use that service that checks page changes and notifies you when it changes, and subscribe the Changelog page to it. Or perhaps Giorgio could write a simple little script that whenever the changelog page is updated, email notifications are sent to the team members, just as with topic replies. Or I could not be so lazy.

Food for thought: Might also be some advantage in at least one troubleshooter having the public release, since that's what most users will have. If I can't reproduce the issue on the same build as OP, then there may be something else going on that going to dev build won't fix. Recent example: OP accidentally unticked "block meta redirect" from Advanced > Untrusted a few months ago, then got a redirection at a shaky site. If I had dev build, I'd probably have given him the same advice you gave to noob Tom . Seeing that it was unreproducible on his same build was a clue to look elsewhere. Or I could be wrong about all of this.

More food for thought:

unofficial development build, but it's actually the best and most current version.

Um, sometimes we've been asked to test those and report back ASAP. It's still beta at times, no? The actual page has a caution about "if you're brave enough, or trying to fix a problem" vs. blanket advice that all should use dev build. Off-topic, I realize, and you can edit this part and move to mod forum if you want to continue the discussion, but that's about all I have to say about it. Or just edit/delete this paragraph-- no problem.

As always, your solicitous advice and concern are welcome.

[GµårÐïåñ]

I would strongly support a system where the update of the changelog with new dev build notifies the board mods. I often check and update on my own but I could get involved sooner if I had a direct notify for when I get busy and don't check the dev site.

[Tom T.]

I often check and update on my own but I could get involved sooner if I had a direct notify for when I get busy and don't check the dev site.

Couldn't have said it better myself. Thanks, G.

Edit: Opened a RFE in Development, quoting the above.

[therube]

For some reason I didn't tumble to the fact that "Tom" was "Tom T." It must have seemed to kind of weird for me to be holding your hand like a newbie.

Had me confused as to why you were talking to Tom like that, like it was something he didn't already know .

Anyhow, in my situation, what I was seeing, http://forums.informaction.com/viewtopi ... 297#p11297, started occurring regularly - out of the blue, & then stopped just as quickly - as soon as Giorgio fixed it.

Now I have gotten the same message before all this happened - every once in a blue moon. Further, there are parts of the Yahoo site, that when you visit, they do present you with that same message, even though you are currently & successfully logged in. (Mail | Options, then to Account Information, should generate it.)


(The only other thing to note is that typically in the past ... even though I don't save logins, my Yahoo sessions would remain logged in - for extended periods of time, say days - perhaps so long as my initial browsing session remained active. Though just over the last number of days, I have noticed that I do have to log in again <the usual login dialog>, though that may be a change on Yahoo's end causing this.

Perhaps it was ...

Code: Select all

Currently you are signed out every:   [b]2 weeks[/b]

)

this cable provider reneged on their promise and started assigning permanent static IPs

Unless you truly have a static IP (different from a dynamic IP that simply remains the same), you can (should be able to) change your IP.

Mac MakeUp 1.95d

Procedure something like this.
Spoof your MAC (Mac MakeUp)...
Clone the newly generated MAC in to your router (MAC Address Clone).
Reset modem/router.
(Should <may/hopefully> then have provided you with a new IP, http://www.whatismyip.com/.)

[GµårÐïåñ]

I often check and update on my own but I could get involved sooner if I had a direct notify for when I get busy and don't check the dev site.

Couldn't have said it better myself. Thanks, G.

Edit: Opened a RFE in Development, quoting the above.

Thank you Tom. I should have done that but since at that time it was a quick and relevant topic to what was being discussed, I put it here. I thank you for creating a second entry for easier tracking. Hopefully it will become part of the support system. I still support everything but don't always remember to go to the dev site each morning FIRST and then support. This would be waiting in my mailbox and wham I know whether to bother checking or nothing there or already checked at that level.

Additionally or alternatively, Giorgio could create a notification mailing list attached to that site where people can explicitly put their email and we can even do that ourselves so it will notify us. This way when the page is updated, automatically generates and shoots off a message to the people on this list. This way regular people can have access to the notification too, it might be helpful in those who only check AMO until we tell them to go to the dev. This way they can be notified in the future as well.