Security warning using Firebug lite "inspect"

[contactph]

I've just recently started using Opera. I'm using Windows XP.

When I "inspect" in Firebug lite I get a security warning for the
following:

(1) The server's name "www.skin.com" does not match the certificate's
name "208.236.9.44". Somebody may be trying to eavesdrop on you.
(2) The certificate for "208.236.9.44" is signed by the unknown
Certificate Authority "208.236.9.44". It is not possible to verify
that this is a valid certificate.
(3) The certificate for "208.236.9.44" expired 4/27/2010 7:22:00 PM
GMT. The webmaster should update the certificate(s).

It happens on whatever website I "inspect".

Skin.com seems to be a porn site.

What could be causing this?

[John J Barton]

We need more details about how you are using Firebug Lite inspect. Are
you using a bookmarklet? If so where does it point?

jjb

[Peter Heart]

I'm not sure what you are asking. Hope this answers your question.

I'm working on a website and want to use it to "inspect" the code and
elements of the site. However I haven't been able to use "inspect" at all,
so far, as every time I try to use it I get the same security warning.

I've tried it on other sites to see if it was just my site but it happened
on any site I had showing in the browser.

Again, this is happening in Opera. I'm using Firefox on another computer
with Firebug and I don't have any problems with it.

jjb

--
You received this message because you are subscribed to the Google Groups
"Firebug" group.
To post to this group, send email to fir...@googlegroups.com.
To unsubscribe from this group, send email to
firebug+u...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/firebug?hl=en.

[John J Barton]

On Apr 26, 7:19 pm, "Peter Heart" <peterhe...@gmail.com> wrote:
> I'm not sure what you are asking. Hope this answers your question.
>
> I'm working on a website and want to use it to "inspect" the code and
> elements of the site. However I haven't been able to use "inspect" at all,
> so far, as every time I try to use it I get the same security warning.

What does this mean "I try to use it"? I cannot see you screen from
here. Therefore you need to explain the operations you are performing
to cause the error as if I am not with you. Because I am not ;-)

>
> I've tried it on other sites to see if it was just my site but it happened
> on any site I had showing in the browser.
>
> Again, this is happening in Opera. I'm using Firefox on another computer
> with Firebug and I don't have any problems with it.

A possible explanation is that the Opera has a virus or adware. But
you need to ask Opera folks how to fix it.
jjb

[Pedro Simonetti Garcia]

We consider security a high priority and I can guarantee you that this is not Firebug Lite's default behavior. There's no place in Firebug Lite's code that could do something similar to what you're experiencing. Just to make sure I just tested the Inspect tool using Opera and I could not find the error you're seeing.

Which Firebug Lite version are you using? And where did you get this version?

Please let us know because if someone is distributing a version of Firebug Lite containing malware we'll try to take actions to remove this distribution or at least inform our users of the potential risk of using unofficial versions.

For your information the only official Firebug Lite distributions are the ones located at getfirebug.com which can be found here:

http://getfirebug.com/firebuglite

and here:

http://getfirebug.com/releases/lite/

and also the one in the Chrome Extensions Gallery located here:

https://chrome.google.com/extensions/detail/bmagokdooijbeehmkpknfglimnifench

regards,

Pedro Simonetti.

2011/4/26 contactph <peter...@gmail.com>

[Peter Heart]

I open Opera and click on Firebug lite. I get the console and everything is
fine so far. As long as I don't click on "inspect" everything works OK.

But the minute I click on "inspect" the security warning pops up and that's
as far as I get. This happens on any website I have in the browser window.

I haven't tried accepting the security certificate, but besides that, the
only way I can get rid of the pop up is to close the browser tab.

Hope that explains things in a way you can understand. :)

[Pedro Simonetti Garcia]

Please let us know where did you get the version of Firebug Lite you are using.

2011/4/27 Peter Heart <peter...@gmail.com>

I open Opera and click on Firebug lite.

I suppose you are using a Firebug Lite extension for Opera. Is this correct?

If so, where did you download this extension?

I get the console and everything is
fine so far. As long as I don't click on "inspect" everything works OK.

But the minute I click on "inspect" the security warning pops up and that's
as far as I get. This happens on any website I have in the browser window.

You should not see any security warning like that.
 

I haven't tried accepting the security certificate, but besides that, the
only way I can get rid of the pop up is to close the browser tab.

Please do not accept this certificate. Something strange is happening so it is better not to trust on this website.
 

Hope that explains things in a way you can understand. :)

You are almost there! :)

I just need to know if you are using an official Firebug Lite distribution or not.

regards,

Pedro Simonetti.

 

[Peter Heart]

I believe I got it off of the Opera extensions page. However, I don’t remember, but if I had any trouble with their link I may have searched online for it. Is there any way to know for sure?

[Pedro Simonetti Garcia]

I don't know how to detect where the extension was downloaded.

If you have a Firebug icon in your browser's toolbar, then you're using a browser extension (which is not an official distribution). I just checked the code of the following extension and I could not see any problem with it. It just loads the Firebug Lite from getfirebug.com.

https://addons.opera.com/addons/extensions/details/firebug-lite-button/1.0-2/?display=en

Please try this. Use the bookmarklet version and see if the same problem happens:

http://getfirebug.com/firebuglite#Stable

Also, you could try removing the extension and installing the one from addons.opera.com and see if the problem still happens.

If the problem persists, it could be another extension interfering with Firebug Lite, or a virus. Let us know the results.

regards,

Pedro Simonetti.

[Peter Heart]

It seems to be happening with the bookmarklet as well. I don’t have any other extensions loaded in Opera. I’m going to do a full system scan. Anything else I should try?

[Peter Heart]

I uninstalled Opera and then reinstalled. Then I used the bookmarklet to “inspect” a web page and the security warning is gone. Not sure what that means but seems to be OK now. What do you think?

[Pedro Simonetti Garcia]

I have no idea. No one ever reported a problem like that, so I cannot assure that the problem is really gone. It sounded like a virus, but the symptom is gone now.

If you use you machine to access sensitive information such as internet banking I suggest keeping up with a good antivirus, and possible schedule a system format soon. If it was me I would do so.

Pedro Simonetti.

2011/4/30 Peter Heart <peter...@gmail.com>

[Kelly Miyashiro]

Hi Pedro,

I just filed a bug on this. It's still happening and should be reproducible. The culprit is the file /xp/pixel_transparent.gif, which I presume is supposed to be prepended with somedomain/skin but is instead being interpreted as https://www.skin.com/xp/....

This is pretty bad and looks like Firebug Lite is trying to load stuff from an unsecured porn site.

http://code.google.com/p/fbug/issues/detail?id=4587&q=opera&colspec=ID%20Type%20Status%20Owner%20Test%20Summary

[Pedro Simonetti Garcia]

Hi Kelly,

Thanks for the explanation, now I see what is happening. The correct image URL should be:

https://getfirebug.com/releases/lite/latest/skin/xp/pixel_transparent.gif

Using Firebug/Firefox I discovered that for some reason the actual URL that is being loaded is:

https://skin/xp/pixel_transparent.gif

And Opera, unfortunately, changes the URL to that one you mentioned.

This is in fact very annoying and I'll give a high priority to it. This wasn't fixed before because the previous report were not as clear as yours. I guess people don't realize how important it is to spend a couple of extra minutes to write a detailed report, after all, we're not seeing what they're seeing and expressing abstract ideas is not that simple.

Also, I still cannot see that security warning you mentioned. Should I enable some kind of option in Opera in order to receive such warnings? I had to use Dragonfly in order to see that problematic URL.

Anyway, I'll post more information in the issue tracker as soon as I have one.

Sorry for any inconvenience caused by this problem and, again, thanks for the detailed report.

regards,

Pedro Simonetti.

2011/6/24 Kelly Miyashiro <mall...@gmail.com>

--

You received this message because you are subscribed to the Google Groups "Firebug" group.

To view this discussion on the web visit https://groups.google.com/d/msg/firebug/-/yNKdtQgJ3lcJ.