While sending report (on well-known site), JavaScript Application error occured

10 views
Skip to first unread message

physic...@q.com

unread,
Aug 3, 2015, 2:38:28 AM8/3/15
to perspectives-dev
Greetings to the list.

I thought I should report this.  While I was trying to submit a "Perspectives: Report Possible Attack", I received the following error about 30 seconds after I clicked the "Submit Report" button:

Perspectives: Error submitting report: [Exception... "Failure"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: chrome://perspectives/content/report.js :: Pers_report.submit_data :: line 129"  data: no]

The report I was going to submit was also interesting because I visit the site constantly and this is the first time Perspectives has ever says anything about it.   So, I still want to submit the report.  Please let me know if I should make another post with the report contents here, or do something else.

Dave Schaefer

unread,
Aug 3, 2015, 3:25:16 PM8/3/15
to perspect...@googlegroups.com
Hi, thanks for the note! What version of Perspectives are you running? This sounds like it could be an older version of Perspectives.

The 'Report Attack' functionality has actually been temporarily disabled. The receiving server that collected attack info is having issues receiving the data, and also the data was being sent over http in the clear, rather than being encrypted. I definitely did not want to expose anyone's information or compromise privacy, so I disabled the 'Report Attack' option until we can get things fixed.

One issue that might be complicating things is that the addons.mozilla.org site is currently listing an older version of Perspectives - version 4.5.2. The current version is actually 4.6.2, but you have to visit a special link to see it - https://addons.mozilla.org/en-US/firefox/addon/perspectives/versions/


We have submitted several patches to Mozilla to clear the issues they reported, so the addons.mozilla.org site can get back to displaying the most recent version of Perspectives. I just checked and we are position 32 in the review queue, so hopefully they will be able to approve our changes soon!

If you want to download the most recent version of Perspectives you can use this link - https://addons.mozilla.org/firefox/downloads/file/323232/perspectives-4.6.2-sm+fx.xpi


Does that help? Sorry about the confusion; we are hoping to get it cleared up soon.

Thanks again for writing!

physic...@q.com

unread,
Aug 3, 2015, 7:30:07 PM8/3/15
to perspectives-dev
Hi!


On Monday, August 3, 2015 at 12:25:16 PM UTC-7, Dave S wrote:
Hi, thanks for the note! What version of Perspectives are you running? This sounds like it could be an older version of Perspectives.

Sure, no problem; I want to help.  I had 4.5.2.1 installed.   I have now updated to the latest version, but I haven't had a chance to test with it.

Yes, thank you, that was helpful.  However, I wonder if you are still interested in the report?  As I stated, I am interested in having someone else see this report because I trust this site, use it frequently, and noticed nothing unusual when Perspectives' alarm went off.  What should I do?  (I can save the report data, but then what?  I cannot restart FF to use the new version until I do something with this unreported report.)

Dave Schaefer

unread,
Aug 5, 2015, 1:52:58 AM8/5/15
to perspect...@googlegroups.com
Hey Paul (should I call you Paul?) - if you like you can send the information to me via private email at this address. I have a PGP key you can use to encrypt the email if you wish. Please do so if you are worried about privacy or leaking dangerous information.

We currently have an issue with many Perspectives notaries being unable to keep up with demand, and so frequently the default notaries do not reply. Depending on what happened, it may be that Perspectives showed you the warning because it did not receive enough notary replies to reach quorum, rather than because it saw an issue with the certificate. Did at least one notary reply with consistent certificate information? How has the site connection looked since?

I am also happy to dissect the notary results over private email and report back, if that helps.
Reply all
Reply to author
Forward
0 new messages