Page 1 of 1

[RESOLVED BY DEV BUILD] Pop-ups Getting Through @ Megaupload

Posted: Thu Oct 27, 2011 6:50 pm
by Guest
Pop-ups are now getting through @ megaupload.com. Somehow they are circumventing both FFX's built-in pop-up blocker and NoScript's extended pop-up blocking abilities. Just wanted to let you know so you can possibly investigate and harden the pop-up blocking code for a future release?

Here's a sample link:
http://www.megaupload.com/?d=d1ioo0x4

*** Temporarily allow megaupload, wait for the countdown to finish, then click "Regular Download". Pop-ups have randomized content - no central source to block that I can see...

Thanks...

Re: Pop-ups Getting Through @ Megaupload

Posted: Thu Oct 27, 2011 6:52 pm
by Guest
Oh, just wanted to mention - I'm using NS V2.1.7

Re: Pop-ups Getting Through @ Megaupload

Posted: Thu Oct 27, 2011 8:13 pm
by Tom T.
Type about:config in Address bar. In Filter bar, type
noscript.surrogate.popunder.exceptions (it will show before you finish typing it all)
and see whether you've entered an exception for Megaclick. If so, remove it. (double-click the line, and delete megaclick from the list.) Close that window or tab.
Ensure you're not allowing megaclick in NS Menu, or in Firefox Tools > Options > Content > Block Pop-up windows > Exceptions.

Does it still produce the pop-under? Please let us know. (It did for me, but I have a personal preference for Fx 3.6.x, and so want to confirm on newer Fx.)
If so, I'll ask Giorgio to address it.

FYI: If you use the reputation-checking feature as described in FAQ 1.11, by middle-clicking or shift-clicking on megaclick in the NS menu, and click "WOT Scorecard, you'll see comments that megaclick loads malware as well as the annoying pop-ups. I don't want to make accusations without personal evidence, but the high scores of trustworthiness "may" have come from megaclick employees/friends etc. "stuffing the ballot box". It wouldn't be the first time that's happened.

In the meantime, if you want a common, but not-really documented, work-around, edit the HOSTS file to map megaclick.com to 0.0.0.0 or 255.255.255.0. The pop-under may still be there, but there will be a "failure to connect" message, meaning that the site can't be found; hence, no malware installed.

Re: Pop-ups Getting Through @ Megaupload

Posted: Thu Oct 27, 2011 10:14 pm
by Giorgio Maone
Please check latest development build 2.1.8rc3, thank you.

Re: Pop-ups Getting Through @ Megaupload

Posted: Fri Oct 28, 2011 12:03 am
by Tom T.
Giorgio Maone wrote:Please check latest development build 2.1.8rc3, thank you.
Confirmed: no popunder with 2.1.8rc3 on Fx 7.01 Portable, thanks.

Edit: Also confirmed: no popunder with same dev build on Fx 3.6.23.

Re: Pop-ups Getting Through @ Megaupload

Posted: Fri Oct 28, 2011 12:05 am
by Guest
Giorgio Maone wrote:Please check latest development build 2.1.8rc3, thank you.
2.18 Working perfectly. Pop-ups eliminated...

Thanks!