Skyfire and my credentials - HD2 General

Well,
I just heard that SkyFire use a server to render the internet pages I go to,
and, well, since I did go to several places that require me to put in
my username and password - Im now wondering:
Did the information go to the SkyFire server unencrypted ?
Did the SkyFire serber was the one to pass them on to the site ?
How can I know if the info was stored somewhere on their servers ?

opera works like that too, and I've never heard anyone mention security issues and that's a very popular browser.if this was an issue I'm sure it would have been discussed at length all over the web.

samsamuel said:
opera works like that too, and I've never heard anyone mention security issues and that's a very popular browser.if this was an issue I'm sure it would have been discussed at length all over the web.
Click to expand...
Click to collapse
Hmmm . . . Im not 100% sure Opera works like that too (at least some pocketnow.com comparison suggests Opera renders the pages on the device itself).
And - maybe most people are not as paranoid as me ,
so maybe they never thought about the subject, and about the potential security risk.
Assuming one uses the device to access his bank/investment account, and other personal info, "givig away" your username and password to some server, that you have no control over, and have no idea of the use the server operators do with this data is not so safe . . .

hmm not sure of the technicalities of it but certainly opera routes all its traffic through their own servers. I guess the answer then is lots of research from multiple sources.

Opera mini does reroute your data through its severs but not opera mobile unless you have opera turbo switched on. thats my understanding of it.

ahh ok that makes sense.

Related

Clean Access Agent on WMO?

Hi.
I would like to use my HTC Touch HD with the WiFi at school. The only problem is that the WiFi is protected with something called Clean Access Agent. I've got this on my laptop, and it allows me to connect. Is it possible to install this program on a WMO?
Thanks
Hi Bungieman, I have run into this problem as well, and have not yet found any solutions here. I know it is impossible to install CAA on your phone as they do not have a cab for a mobile version. The only thing you can do at this point is contact your IT department. I believe CAA is able to bypass certain MAC addresses, (your phone has a specific one) but the people who install it must change that.
Programs that use Opera, Skyfire, or Safari should work, as CAA has no way to monitor those and lets those through. (That is why everyones Iphone works )
Hope this helps!
So the standard browser, Opera Mobile, should bypass the stupid program? I can't believe so many schools and universities from so many different countries use this program on a regular base. It takes both me and my classmates 15 minutes to start and log on to it. And it keeps bugging up. Yuck.

Anyone having problems accessing Webmail via Oulook Web Access?

I have seen this same problem covered on forums for the Diamond and also on Opera related sites, but not really seen a solution as yet...
I'm having real problems accessing my company Webmail via Outlook Web Access (OWA) within Opera. Each time I do it, instead of getting the login screen I get a cookie authorisation problem where it tries to download 'CookieAuth.dll' (opening or saving does no good).
Through messing about I managed to get it to work ONCE! When i tried to replicate the scenario (clearing cache/cookies etc) it didn't work again .
I can get it to work through Skyfire, but I'm not entirely happy about using it here as pages are rendered on their servers...
I know some of you will say why don't you set it up to sync via ActiveSync, but I believe work have put some kind of block serverside which prevents me from doing this, so for the moment I'm stuck.
Any suggestions folks?
Had a similar problem myself and it was down to my office server using two versions of web access and one being outdated.
My resolve came from a simple change of web address.
Ask your Network admin if they have an alternative address for access.
Instead of the original owa.xxxx.xxxx I was told to use webmail.xxxx.xxxx for ours.
Farsquidge said:
Had a similar problem myself and it was down to my office server using two versions of web access and one being outdated.
My resolve came from a simple change of web address.
Ask your Network admin if they have an alternative address for access.
Instead of the original owa.xxxx.xxxx I was told to use webmail.xxxx.xxxx for ours.
Click to expand...
Click to collapse
Thanks for your reply Farsquidge. Hmm, yes I'm using a webmail.xxx.com address - I think this is actually due to a problem with Opera, but you say that you can access it okay now?
I use OWA to my work without any issue
Why not just set up active sync instead?
Edit: uhm.. sorry
No problems accessing webmail.xxx.com on my end.

Opera and NTLM support

Hi all,
since a couple of days I have a new HD2 and it's fantastic!
On my old Diamond I was able to enable the NTLM support in Network section of Opera config file but, with a big surprise, in the current configuration (on HD2) the NTLM is missing (in the Network section and other of configuration file).
Since I need authentication for ISA proxy (via NTLM) on company intranet (my connection is through dedicated APN that link directly on company intranet) I can't use Opera on my HD.
Any suggestion or workaround?
IE works corretly but don't suppport multi touch zoom so I would like to use Opera.
The previous version of Opera installed on Diamod (last italian official ROM) work perfectly.
Thanks all!!
I'm interested in this too (just bookmarking the page really).
I use IE as Opera doesn't work, but would rather use Opera. I browse private folders via IIS and don't have the opportunity to log in with Opera.
johncmolyneux said:
I'm interested in this too (just bookmarking the page really).
I use IE as Opera doesn't work, but would rather use Opera. I browse private folders via IIS and don't have the opportunity to log in with Opera.
Click to expand...
Click to collapse
Doing the same (bookmarking), just for fun I tried to check some webapps on my corporate Intranet set up with IIS integrated authentication and it worked perfectly with IE. I didn't try with Opera. Will do on monday and see if I can come up with a solution
pat12 said:
Doing the same (bookmarking), just for fun I tried to check some webapps on my corporate Intranet set up with IIS integrated authentication and it worked perfectly with IE. I didn't try with Opera. Will do on monday and see if I can come up with a solution
Click to expand...
Click to collapse
Opera doesn't offer a dialog to enter domain authentication. It just says "the server requested a login authentication method that is not supported."
It seems pretty sure of itself
I'm not entirely happy about this, but there appears to be a workround...
http://forums.asp.net/t/305782.aspx
Doesn't help if you don't have admin rights on the server, of course.
You are right on both accounts! It IS very sure of itself. As MS would say, this is not a bug, this is a feature or this is by design.
As for the workaround, I hadn't seen your post until now and being sysadmin for a lot of IIS servers, I thought about the same solution, tested and it works. I came back here to report about it but you beat me to the post by almost 48 hours -
Anyway, it's not a good solution and not everybody with a HD2 has admin rights on the IIS servers of his company.
So we are stuck with IE until maybe a new version of Opera mobile. After all, Opera on desktops supports it (sort of...)
Ok, thanks for support.
What sounds strange to me, is that Opera installed on my old Diamond implement the NTLM authentication and the version on HD2 (newer) not at all. Moreover I installed the Opera 10 beta and, in this version also, the NTLM support is missing (I don't find it in the configuration file).
Why they removed it?

Proxy servers and iP**er outside of UK etc

Every now and again I run out of things to watch on my laptop when abroad, so I turn on the hotel TV and find myself watching the same BBC World news or CNN news reports over and over.
When that happens, I normally try and set up FoxyProxy so I can watch iP***er etc. I usually spend about an hour trying to get the damn thing working before giving up and heading to the minibar!
I have never, ever found a working UK internet enabled proxy in probably 4 years. I don't know if I am just not using Foxyproxy correctly, or if proxies are that hard to find.
Anyway, long story short... has anyone used a proxy server on the Vega. Is so, which software did you use and more importantly which proxy and how did you set it up?!
It is possible, but unfortunately that is illegal. You are not allowed to watch bbc iplayer outside of the uk. I think this might break the site rules, and a mod might close the thread. Giving you info on how to circumvent might get me into trouble too. Sorry i cant help, but rules are rules
Circumventing a corporations draconian T&C's have never seemed to be too much of an issue for XDA. If it was, I'm not entirely sure it would be in existence
Nonetheless, edited...!
PS - The irony of being warned about legality by a member with your username is not lost on me
Ah, ganjaman just uses hemp to make phone/tablet covers.
what else could one do with that plant?
back on topic, there must be ways of obtaining foreign proxies, which in itself isnt naughty. As you could use this for many reasons.
Or is it that ipla yer recognises that fact and blocks ones attempt?
If the request is about the player then, fine, not allowed, but surely the proxy question is valid?
Playing devils advocate.
Rgds
Lok
The problem I encounter is actually connecting to a valid proxy, before even typing in a URL. As I said, I don't know if its an issue with FoxyProxy or the list of proxies that I work my way through on Google.
I was hoping to hear that somebody had successfully connected to a proxy server using Android. I can then test it myself, then go off and find a valid UK proxy with the knowledge that at least the program works as it should!
Not sure if you have seen this http://forum.xda-developers.com/showthread.php?t=766569. Just have to find a good proxy list. Works on are vegas
Asking the question in a different way is all you had to do. Sorry if you took it the wrong way, i just dont want xda dev to have illegal content, and worst being kicked out for suppling it.
As orlok said, i am in the uk, its cases for my tablet only
Unfortunately some countries have draconian laws, like here.

bypass school router blocks

hey, i used to have a way around the school router blocks but i cant seem to remember what it was for the life of me. What it consisted was of an .exe that installed some software that allowed me to browse freely. I vaguely remember that the software consisted of a icon on the taskbar that was kinda an earth with fire around it....maybe?
if you have any other good router/server bypasses then please let me know. .exe file executions are blocked everywhere except in the technology building at school. Preferably i would like to have something only requiring a flash drive or it can be done within IE or Chrome.
Do u mean that you are able to surf the internet but some website, like Facebook for example , are blocked?
yukinok25 said:
Do u mean that you are able to surf the internet but some website, like Facebook for example , are blocked?
Click to expand...
Click to collapse
yes exactly, often they have keywords that they block as well, (such as game, kill, black ops, etc). maybe a proxy would work? we used to have a couple good ones but they would eventually block it.
johnston9234 said:
yes exactly, often they have keywords that they block as well, (such as game, kill, black ops, etc). maybe a proxy would work? we used to have a couple good ones but they would eventually block it.
Click to expand...
Click to collapse
yes, a free proxy can be a solution in most cases, here try some in this list first:
http://www.publicproxyservers.com/proxy/list1.html
johnston9234 said:
hey, i used to have a way around the school router blocks but i cant seem to remember what it was for the life of me. What it consisted was of an .exe that installed some software that allowed me to browse freely. I vaguely remember that the software consisted of a icon on the taskbar that was kinda an earth with fire around it....maybe?
if you have any other good router/server bypasses then please let me know. .exe file executions are blocked everywhere except in the technology building at school. Preferably i would like to have something only requiring a flash drive or it can be done within IE or Chrome.
Click to expand...
Click to collapse
To do this would require some form of exe to use a proxy via a specially setup browser, or admin rights to set the system proxy.
You will find that your IT admins will block the proxies you use (I have to block proxies at my work network when we detect them).
If implemented properly (any good professional IT admin should be able to do it right), you will struggle to tunnel out using most systems.
You can't ssh forward if they block non-standard ports, or filter protocols. You can't use SOCKS proxies if they do the same. You can't use web proxies if they use smart URL filtering.
You can try web proxies, but it's an uphill battle. If you find a proxy that works, don't tell your friends, as that usage across multiple accounts flags the URL in some security systems (my users alert me to the latest proxy sites unwittingly )
Finally, you do realise you are probably breaking the acceptable use agreement? Isn't it better to do facebook etc out of school hours? Or use your phone? If you get good at evading, it is easy to remove internet access altogether from an account in most systems. Good luck in tunnelling out when you have zero internet access as your account is null routed
Summary? Try proxies, don't hold your breath, and do you really need to use facebook etc in school? Oh, and for goodness sake, don't run exes on school PCs... If they've not set them up right, you could infect the machines. They prevent EXE execution on most machines for good reason...
pulser_g2 said:
To do this would require some form of exe to use a proxy via a specially setup browser, or admin rights to set the system proxy.
You will find that your IT admins will block the proxies you use (I have to block proxies at my work network when we detect them).
If implemented properly (any good professional IT admin should be able to do it right), you will struggle to tunnel out using most systems.
You can't ssh forward if they block non-standard ports, or filter protocols. You can't use SOCKS proxies if they do the same. You can't use web proxies if they use smart URL filtering.
You can try web proxies, but it's an uphill battle. If you find a proxy that works, don't tell your friends, as that usage across multiple accounts flags the URL in some security systems (my users alert me to the latest proxy sites unwittingly )
Finally, you do realise you are probably breaking the acceptable use agreement? Isn't it better to do facebook etc out of school hours? Or use your phone? If you get good at evading, it is easy to remove internet access altogether from an account in most systems. Good luck in tunnelling out when you have zero internet access as your account is null routed
Summary? Try proxies, don't hold your breath, and do you really need to use facebook etc in school? Oh, and for goodness sake, don't run exes on school PCs... If they've not set them up right, you could infect the machines. They prevent EXE execution on most machines for good reason...
Click to expand...
Click to collapse
This is a REALLY good explanation Pulser, I always liked the way you answer to the people on XDA! (specially on the Hero thread )
By the way, why an .exe file would infect a machine? Do you mean any kind of .exe? Even from a well known company, who create safe and populars software?
I used to run, without tell anyone, firefox portable in my office to bypass firewall restrictions, is that dangerous as well?
Considering you are at school, you will lack a lot of needed rights to edit certain things. I would know, I had to get around blocks on both Windows and Mac computers my freshman year.
I would advise you use the software, Your Freedom, it's free, but requires an account, you will also need to use a browser such as Firefox, and edit the settings to use the correct IP and Port as a proxy.
It also works on both Mac's and PC's. There is another software that I had used, strictly for windows PC's, but I can't recall the name of it.
Edit: I also ran the software from my flash drive..
i have special access to .exe and Command prompt just because of the position i am in as a student (several Technical courses). I can execute files on my computer and i have Chrome Installed. Does that help?
johnston9234 said:
i have special access to .exe and Command prompt just because of the position i am in as a student (several Technical courses). I can execute files on my computer and i have Chrome Installed. Does that help?
Click to expand...
Click to collapse
What I did was to download firefox portable, you can google it (and if you want you can copy it to an USB drive).
If you go to firefox networking setting, you can try to change the options in advanced with "no proxy" or as wisefire said just write an IP proxy address with the correct port, you should be able to visit any website.
At least this was working flawlessy for me..
yukinok25 said:
This is a REALLY good explanation Pulser, I always liked the way you answer to the people on XDA! (specially on the Hero thread )
By the way, why an .exe file would infect a machine? Do you mean any kind of .exe? Even from a well known company, who create safe and populars software?
I used to run, without tell anyone, firefox portable in my office to bypass firewall restrictions, is that dangerous as well?
Click to expand...
Click to collapse
Only a malicious exe would cause trouble...
But on a shared school network, who knows what the user before you used...
That's why I use disk freezing software on systems I run, and a forced reboot between logins, to give you a clean environment.
But while employees run portable firefox, what if they were to use it on another pc, and it had a virus, which infected the exe?
TBH, flash drives shouldn't be used in work environments, that were used outwith that environment... But that's not realistic in a school.
johnston9234 said:
i have special access to .exe and Command prompt just because of the position i am in as a student (several Technical courses). I can execute files on my computer and i have Chrome Installed. Does that help?
Click to expand...
Click to collapse
Come on... Surely you ain't gonna abuse that privilege? You got it because you were trusted, not to work round the restrictions that are in your acceptable use policy...
yukinok25 said:
What I did was to download firefox portable, you can google it (and if you want you can copy it to an USB drive).
If you go to firefox networking setting, you can try to change the options in advanced with "no proxy" or as wisefire said just write an IP proxy address with the correct port, you should be able to visit any website.
At least this was working flawlessy for me..
Click to expand...
Click to collapse
That would work unless they filter out proxy traffic (you can often detect SOCKS proxies and other ones that are working using this method, or even block common ports like 8080)
Back in high school we used Ultrasurf and GPass. I liked GPass because it was really easy to hide from the taskbar and notification area.
pulser_g2 said:
Only a malicious exe would cause trouble...
But on a shared school network, who knows what the user before you used...
That's why I use disk freezing software on systems I run, and a forced reboot between logins, to give you a clean environment.
But while employees run portable firefox, what if they were to use it on another pc, and it had a virus, which infected the exe?
TBH, flash drives shouldn't be used in work environments, that were used outwith that environment... But that's not realistic in a school.
Click to expand...
Click to collapse
haha, All of my schools have used disk freezing software. I thought about putting it on my parent's computer so I don't have to work on it anymore.
Eventhough I generally don't work on it anymore and just have them call someone to work on it for them. hahah.
buttes said:
Back in high school we used Ultrasurf and GPass. I liked GPass because it was really easy to hide from the taskbar and notification area.
Click to expand...
Click to collapse
Back in my days in high school we just got the many different IT and Librarian passwords/usernames and some teacher's passwords aswell. Then we'd log in to them and download Kazaa (yeah, it was that long ago lol), and downloaded like a gig or two of old NES, SNES, SEGA, Etc roms and started passing them around to everyone. haha.
It got so bad that the school threatened expulsion for everyone that had the games on their user accounts because it was overloading their network and storage space.
For a while they were just searching for the rom's extensions and you could just go and change them to a .txt and then change them back when you wanted to play them, but then they finally realized that the gig of space the roms took up were about 4 times the size of the data we were allowed to have and they could just sort the usernames by the usage of storage space.
The teacher's ones were fun to have though... it allowed you change some grades here and there...especially with my method of madness which I will not describe here. lol
pulser_g2 said:
That would work unless they filter out proxy traffic (you can often detect SOCKS proxies and other ones that are working using this method, or even block common ports like 8080)
Click to expand...
Click to collapse
So, I am really interested about this topic, is there anyway to bypass a restriction if they filter out the proxy traffic?
yukinok25 said:
So, I am really interested about this topic, is there anyway to bypass a restriction if they filter out the proxy traffic?
Click to expand...
Click to collapse
Hmmm... It's possible. If they use deep packet filtering it may be hard. But anything is possible...
I won't go into details, of getting round things, as it is my job to stop people getting round them, and I know a load of tricks, but look at the protocols in use in surfing - you need LDAP/AD to log into windows domain. Then you use DNS to resolve an IP (perhaps via a corporate web proxy). Then HTTP/HTTPS to access the page.
Now think what tools the domain admins might use to administer their network - RDP? SSH? Web services on high ports?
I think I've gone into enough detail for now... I can tunnel out almost any network these days, but I don't think it is sensible, wise, nor ethical to divulge this sort of thing.
pulser_g2 said:
Hmmm... It's possible. If they use deep packet filtering it may be hard. But anything is possible...
I won't go into details, of getting round things, as it is my job to stop people getting round them, and I know a load of tricks, but look at the protocols in use in surfing - you need LDAP/AD to log into windows domain. Then you use DNS to resolve an IP (perhaps via a corporate web proxy). Then HTTP/HTTPS to access the page.
Now think what tools the domain admins might use to administer their network - RDP? SSH? Web services on high ports?
I think I've gone into enough detail for now... I can tunnel out almost any network these days, but I don't think it is sensible, wise, nor ethical to divulge this sort of thing.
Click to expand...
Click to collapse
True I am agree with you Pulser, thus I am really into this sort of things recently.
I am eager to learn..
Could you please recommend me a book or something (not too advanced) that would help me to understand better LDAP/AD, DNS and everything about security and networking?
I obviously wanna learn just for myself and I definitely don't want to spread or divulge in anyway bad behaviors..
johnston9234 said:
hey, i used to have a way around the school router blocks but i cant seem to remember what it was for the life of me. What it consisted was of an .exe that installed some software that allowed me to browse freely. I vaguely remember that the software consisted of a icon on the taskbar that was kinda an earth with fire around it....maybe?
if you have any other good router/server bypasses then please let me know. .exe file executions are blocked everywhere except in the technology building at school. Preferably i would like to have something only requiring a flash drive or it can be done within IE or Chrome.
Click to expand...
Click to collapse
if not previously mentioned, you're looking for "Tor" which comes in both installable packages or portable exe files that can be run off flash drives and includes a custom made 'Mozilla Firefox' which comes preloaded with Tor and does not save any browsing information on your client machine, thus this program is completely anon when ran from a flash drive.
www.torproject.org and you're looking for the Stable Portable Browser Bundle
Please thanks me (click thanks) if this helped
really there is a simple way
use kon-boot and bypass admin password and change the settings
kylon said:
really there is a simple way
use kon-boot and bypass admin password and change the settings
Click to expand...
Click to collapse
not if he is on a school network, he would have to physically run kon-boot on the server itself which defeats the purpose because the server would already be logged in as an admin of some kind.
-correct me if I'm misunderstanding or have missed a key post somewhere-

Categories

Resources