Test your PopUp killer

[crockett]

:) Hi

Riding on Agnitum forums I came accross this link:

http://www.kephyr.com/popupkillertest/test/index.html

It's a Pop Up killer test...

If you'd like to take it, please activate JavaScripts and go ahead (of course, it's completely harmless).

How good do you do against it ?

Rgds, Crockett 8)

[puff-m-d]

I am currently using Opera 7.21 RC5 build 3216 and passed all tests..... ;D

Regards,
Kent

[crockett]

I'm usually a Opera user, and my specific Pop Up killer is WebWasher.

When I select the deny all popups option, I pass all nine steps in the test.

But when I "refuse all popups except the requested ones", I fail number 9 (mouse-over).

Using Opera 7.21 RC5 alone (F12 "open requested popups only"), I failed steps 3 and 9.

Rgds, Crockett 8)

[LowWaterMark]

I'm afriad I had to lower my security a little to see the pop-ups. (Hmm, maybe that is a good thing.) ;)

[marti]

I disabled my pop-up blocker and nothing happened. I did not enable Javascript (I don't do that for sites I've never heard of and know nothing about).

[cl0ck]

popup manager blocks all the popups ;D

[crockett]

Hi Marti ;)

Your answer makes me wonder... Are there any Active-x or Vbs or other proprietary technologies-based popups ?!

Might be wrong about it but I thought all popups killers were pointless unless JavaScripts were enabled !?...

Sorry if I may sound silly on this matter, but having Opera as main browser and Phoenix 0.5 as second, I'm not exposed to VBS and co. as may be IExplorer users...

Having said that, your security philosophy is a rather good one...

Rgds, Crockett 8)

[peakaboo]

Opera 7.2

1) first time I tried it I had proxo on so I beat all 9 even with Open requested pop-up windows only selected.

2) Tried again after viewing Crockett's results on Opera beta to see if this was a flaw in the beta

result: same as Crockett 3 & 9 dinged me when I used (Open requested pop-up windows only) I think this is a flaw in Opera and should be reported...

on mouse over popup - should not engage as a requested popup IMO

Crockett since you found it, I'll let you do the honors on the bug report :D

3) if you refuse all popups then Opera kills all 9 with proxo in bypass

good find Crockett!!! 8)

[crockett]

Not sure about the flaw in Opera. Already got the same results with 7.20, and furthermore, I don't know how the 3 and 9 steps of the test proceed...

Gonna wait a while and see how other users are doing...

Rgds, Crockett 8)

[DolfTraanberg]

I use Crazy Browser and passed all 9
Dolf

[peakaboo]

{QUOTE-> quoting: puff-m-d link=board=19;threadid=14791;start=0#msg92857 date=1065836580]
I am currently using Opera 7.21 RC5 build 3216 and passed all tests..... ;D

Regards,
Kent
<-QUOTE}

Kent,

what did you have Opera pop-up set to?

try it with "Open requested pop-up windows only" and see if you don't get the same result as C & P.

bypass proxo if u use it.

[crockett]

{QUOTE-> quoting: peakaboo link=board=19;threadid=14791;start=0#msg92868 date=1065839468]
Opera 7.2

1) first time I tried it I had proxo on so I beat all 9 even with Open requested pop-up windows only selected.

2) Tried again after viewing Crockett's results on Opera beta to see if this was a flaw in the beta

result: same as Crockett 3 & 9 dinged me when I used (Open requested pop-up windows only) I think this is a flaw in Opera and should be reported...

on mouse over popup - should not engage as a requested popup IMO

Crockett since you found it, I'll let you do the honors on the bug report :D

3) if you refuse all popups then Opera kills all 9 with proxo in bypass

good find Crockett!!! 8)
<-QUOTE}

Hi Peakaboo :)

Followed your advice and just sent a mail to press-support@opera.com to ask them and check it out...

We'll see what pops ehh..., what comes up !

Rgds, Crockett 8)

[hayc59]

Crockett, reported to Opera Crew
will see what happen and will let you know... :)

[puff-m-d]

{QUOTE-> quoting: peakaboo link=board=19;threadid=14791;start=0#msg92880 date=1065842348]
{QUOTE-> quoting: puff-m-d link=board=19;threadid=14791;start=0#msg92857 date=1065836580]
I am currently using Opera 7.21 RC5 build 3216 and passed all tests..... ;D

Regards,
Kent
<-QUOTE}

Kent,

what did you have Opera pop-up set to?

try it with "Open requested pop-up windows only" and see if you don't get the same result as C & P.

bypass proxo if u use it.


<-QUOTE}

I had it set to "Refuse all"... Re-done the test to "Open requested pop-up windows only" and failed on 3 and 9.......

Regards,
Kent

[sig]

Proxomitron with JD5000's advanced configuration and filter set (modified for my preferences) passed all nine tests. That is, I saw no popups except on #5 when I deliberately allowed them to load (with two mouseclicks).

[Cochise]

I now have Panicware Popup Stopper and past all tests......it didn't even let me see the 'Good' Popups??.....is that good or bad?

Regards, Cochise. 8)

[Bdiamond]

Passed all 9 tests using Opera 7.21 Build 3215 using either: (a) Refuse pop-up or (b) Open requested pop-up windows only settings.

Bdiamond

[peakaboo]

{QUOTE-> quoting: Bdiamond link=board=19;threadid=14791;start=15#msg92929 date=1065867883]
Passed all 9 tests using Opera 7.21 Build 3215 using either: (a) Refuse pop-up or (b) Open requested pop-up windows only settings.

Bdiamond
<-QUOTE}

Is the Opera team that fast that they already fixed on-mouse over popups #3 & #9 loooooool :)

Bdiamond are you running any other software like proxo, privoxy, or guidescope?

Looks like you are running 7.21 RC4 and as you can see below Kent is running 7.21 RC5:

{QUOTE-> quoting: puff-m-d link=board=19;threadid=14791;start=0#msg92885 date=1065845303]
{QUOTE-> quoting: peakaboo link=board=19;threadid=14791;start=0#msg92880 date=1065842348]
{QUOTE-> quoting: puff-m-d link=board=19;threadid=14791;start=0#msg92857 date=1065836580]
I am currently using Opera 7.21 RC5 build 3216 and passed all tests..... ;D

Regards,
Kent
<-QUOTE}

Kent,

what did you have Opera pop-up set to?

try it with "Open requested pop-up windows only" and see if you don't get the same result as C & P.

bypass proxo if u use it.


<-QUOTE}

I had it set to "Refuse all"... Re-done the test to "Open requested pop-up windows only" and failed on 3 and 9.......

Regards,
Kent
<-QUOTE}

[crockett]

Hi :)

Already got a (kind) answer from the Opera team...

But mystery unsolved as far as I'm concerned.

Rgds, Crockett 8)

[JimIT]

Google toolbar got 'em all. Proxo got 'em, too.

:D

[JayK]

I don't think onmouse over popups should be blocked. Anything in response to user's action should not be blocked.

[JayK]

{QUOTE-> quoting: LowWaterMark link=board=19;threadid=14791;start=0#msg92859 date=1065836767]
I'm afriad I had to lower my security a little to see the pop-ups. (Hmm, maybe that is a good thing.) ;)
<-QUOTE}

What's so scary about popups?

[JayK]

{QUOTE-> quoting: Crockett link=board=19;threadid=14791;start=0#msg92866 date=1065839176]
Hi Marti ;)

Your answer makes me wonder... Are there any Active-x or Vbs or other proprietary technologies-based popups ?!

Rgds, Crockett 8)
<-QUOTE}

VB popups are rare, I've never come across one that is "in the wild" to borrow a virus term but here's one

http://www.tooto.com/dialogtest.htm

But as you pointed out only IE users need to worry.

As for activex "popups" I'm sure it's possible, but it seems overkill to use activex just to launch a popup.
Anyway If someone has tight security on js, i doubt they would leave activex open :)

CSS popups anyone?

[JayK]

{QUOTE-> quoting: puff-m-d link=board=19;threadid=14791;start=0#msg92885 date=1065845303]
{QUOTE-> quoting: peakaboo link=board=19;threadid=14791;start=0#msg92880 date=1065842348]
{QUOTE-> quoting: puff-m-d link=board=19;threadid=14791;start=0#msg92857 date=1065836580]
I am currently using Opera 7.21 RC5 build 3216 and passed all tests..... ;D

Regards,
Kent
<-QUOTE}

Kent,

what did you have Opera pop-up set to?

try it with "Open requested pop-up windows only" and see if you don't get the same result as C & P.

bypass proxo if u use it.


<-QUOTE}

I had it set to "Refuse all"... Re-done the test to "Open requested pop-up windows only" and failed on 3 and 9.......

Regards,
Kent
<-QUOTE}

Indeed, Opera implements a nice compromise between the 2 different anti popup philisophies. Arguable anything that is a result of DIRECT (onload etc are not direct) user interaction (normally a click but it can be anything)
should be seen as a sign that you want something to happen, so this is a very good test to see if popups are requested are not

Still most users don't expect onmouse overs to trigger popups, so some popup blockers block that too.

[JayK]

More popup tests if you like this kind of thing


http://www.popuptest.com/popuphome.html

http://www.webknacks.com/aptest.htm

http://www.popup-killer-review.com/index.htm

http://www.popup-purger.com/test2.html

[crockett]

Hi JayK :)

As far as VBS and Active X are concerned, that's what I tended to think, and definitely what I do believe too.

I pondered about your comments on Opera. Not sure the compromise is a voluntary one, but anyway we'll see what the Opera crew may have to say about it...

Had I to disagree with you about something, it might be that mouse-over gestures are to be considered a voluntary action on the user's part... Onmouse over popus just seem to me as a way to trick surfers into opening unwanted windows.

Nothing to fear about popus per se, except for their intrusive propensity and ability to deny a comfortable surf, or to (re)direct you to where you didn't want to go.

Anyway, interesting posts and points of vue - thanks.

Rgds, Crockett :)

[bigc73542]

I use free surfer mk2 it passed the test 100%. But the best part is that it is free.

[peakaboo]

{QUOTE-> quoting: Crockett link=board=19;threadid=14791;start=15#msg92964 date=1065892273]
Hi :)

Already got a (kind) answer from the Opera team...

But mystery unsolved as far as I'm concerned.

Rgds, Crockett 8)


<-QUOTE}

Hi Crockett,

Appreciate your following thru with the reporting on this possible bug.

Please let us know if you test the next beta on #3 & #9 mouse over and it fails. Kinda curious now.

Opera beta 7.21 RC6 should be coming out shortly.

I like the responsiveness of the Opera team.

curious the different results which are being reported. hope this isn't one where the OS is called as culpable, maybe some are forgetting to turn off proxo :)

[BWMerlin]

Used firebird .7 and failed the mouse overs. Went back and did it with IE and failed all nine. I have my settings tight but can anyone tell me what i should do to make them tighter.

[Acadia]

http://www.popup-killer-review.com/index.htm

Acadia

[JayK]

{QUOTE-> quoting: BWMerlin link=board=19;threadid=14791;start=15#msg93290 date=1066020853]
Used firebird .7 and failed the mouse overs. Went back and did it with IE and failed all nine. I have my settings tight but can anyone tell me what i should do to make them tighter.
<-QUOTE}

I wouldn't worry, Mozilla in all it's incarantions and (now Firebird) has never ever blocked mouseovers spawned popups.

For one thing these popups are a result of your action, so they are avoidable espically second time around, much less irrating them other forms of automatic popups.

[BWMerlin]

{QUOTE-> quoting: JayK link=board=19;threadid=14791;start=30#msg93365 date=1066049934]
{QUOTE-> quoting: BWMerlin link=board=19;threadid=14791;start=15#msg93290 date=1066020853]
Used firebird .7 and failed the mouse overs. Went back and did it with IE and failed all nine. I have my settings tight but can anyone tell me what i should do to make them tighter.
<-QUOTE}

I wouldn't worry, Mozilla in all it's incarantions and (now Firebird) has never ever blocked mouseovers spawned popups.

For one thing these popups are a result of your action, so they are avoidable espically second time around, much less irrating them other forms of automatic popups.






<-QUOTE}

Im sry i should have made my self clearer, i wish to make my IE settings better so as to stop the pop ups. I am very very happy with firebird and its pop up blocking.

[crockett]

Hi all :)

Some final words on this matter, at least regarding Opera... Seems JayK was right.

http://www.outpostfirewall.com/forum/showthread.php?s=3ea0e4f398418076be7c8888d269bd71&goto=lastpost&threadid=8423

Rgds, Crockett 8)

[JayK]

Turn off all active scripting should do it.

[peakaboo]

{QUOTE-> quoting: peakaboo link=board=19;threadid=14791;start=0#msg92868 date=1065839468]
Opera 7.2

1) first time I tried it I had proxo on so I beat all 9 even with Open requested pop-up windows only selected.

2) Tried again after viewing Crockett's results on Opera beta to see if this was a flaw in the beta

result: same as Crockett 3 & 9 dinged me when I used (Open requested pop-up windows only) I think this is a flaw in Opera and should be reported...

on mouse over popup - should not engage as a requested popup IMO

Crockett since you found it, I'll let you do the honors on the bug report :D

3) if you refuse all popups then Opera kills all 9 with proxo in bypass

good find Crockett!!! 8)
<-QUOTE}

Thanks Crockett,

Small issue for me but at least I know what to expect. I normally run killing Java & Scripting anyway so not a biggie... as my first result above would be my norm.

Conclusion reached seems a little inconsistent to me but again not a big deal to me.

In your communication with Opera, you explained the issue & test so there was no ambiquity as to what you did, the response from Opera support said:

{QUOTE-> ... No popups are opened. It might be that I am using a newer build. Re-Test this in the next public build, and if the problem persists, report it again and I will analyze the page. <-QUOTE}

Unless the Opera support tested it with Java & Java Scripting disabled, then his results were inconsistent with what we observed.

The assessment that by waving your mouse over one of these test is implication the user is requesting something is not valid in my mind, due only to the potential for exploit by malicious web site.

When I waived my mouse over the test I did not want the popup but got it anyway when I tried it the 2nd way above.

[crockett]

Hi guys ;)

Still tend to agree with Peakaboo...

But... right - I pass all nine with 'popups disabled', still keeping 'JavaScripts enabled'... So I agree - no big deal.

There are one or two sites I like and visit regularly which require to accept 'requested popus' so as to voluntarily open some pages, and it was nice to surf with the Opera function 'open only requested popups' activated.

Can always reactivate it by pressing F12 when accessing these sites... I sometimes forget how easy it is. :)

Seems I just may be so used to Opera's excellence that I tend to forget its top-grade quality and start expecting (useless) perfection.

Rgds, Crockett 8)

[JayK]

{QUOTE-> quoting: peakaboo link=board=19;threadid=14791;start=30#msg93833 date=1066230956]

The assessment that by waving your mouse over one of these test is implication the user is requesting something is not valid in my mind, due only to the potential for exploit by malicious web site.

When I waived my mouse over the test I did not want the popup but got it anyway when I tried it the 2nd way above.
<-QUOTE}

Think about it, Onmouseover and trigger a lot worse things than just popups. If you expect the browser to block popups what about blocking other actions?
All those malicious test exploits you see on test sites can also be in the form of onmouseovers rather then onclicks.

When it all comes down to it, using JS always carries some risk with it.

PS ever seen a popup that results from other eventhandlers like onblur? :)

[peakaboo]

{QUOTE-> quoting: JayK link=board=19;threadid=14791;start=30#msg93875 date=1066247524]
{QUOTE-> quoting: peakaboo link=board=19;threadid=14791;start=30#msg93833 date=1066230956]

The assessment that by waving your mouse over one of these test is implication the user is requesting something is not valid in my mind, due only to the potential for exploit by malicious web site.

When I waived my mouse over the test I did not want the popup but got it anyway when I tried it the 2nd way above.
<-QUOTE}

Think about it, Onmouseover and trigger a lot worse things than just popups. If you expect the browser to block popups what about blocking other actions?
All those malicious test exploits you see on test sites can also be in the form of onmouseovers rather then onclicks.

When it all comes down to it, using JS always carries some risk with it.

PS ever seen a popup that results from other eventhandlers like onblur? :)

<-QUOTE}

not a concern for me... however,

Think about this, it would not be an issue if it (onmouseoverpopup) were not exploitable, since it is a potential method of exploitation, and if average surfer is relying on statements puffing security from alternative browsers, the alternative browsers need to put up or shut up.

Alternative Browsers - If it is not exploitable say why. Just saying: that's the way it should work and user is asking for the onmouseoverpopup if they wave the pointer over is bogus - a malicious web site can load any payload they want in that onmouseover.

Alternative Browsers - If it is exploitable then plug the exploit if possible, if not then stop puffing how secure you are.

Leads to false sense of security if one falls into the category of those who venture out without alternative defenses.

this is one of the points gleaned from my "IE vulnerabilities alternative defense" test page (in this poll section).

p.s. answer: never seen onblur you gotta link?

[JayK]

I have no idea what you are arguing here.

Popups by themselves are harmless. You seem to think if something blocks a onmouse popup , it's more secure. I'm telling you it isn't.

The whole example of loading a malicious exploit by mouseover is to show you that, in such cases, Opera is no better since all it does is filter new windows.

Popup windows alone are harmless. Blocking popups makes surfing more more comfortable, but any security benefits if any is minimal.

[peakaboo]

If you are talking to me, there is no argument.

My points are quite clear if you can not see them it could be 1 of 3 things:

1) we either disagree,
2) there is myopia running rampant, or
3) this is a replay of Cool Hand Luke.

again not an issue for me... only an issue for those who logically would think they are protected from a malicious popup exploit... and aren't.

imagine if you will the following link or any malicious link were some how executed in a mouse over: JayK only press here (http://www.geocities.com/xfuctxupx)

In fact you reiterate one of my points.

{QUOTE-> The whole example of loading a malicious exploit by mouseover is to show you that, in such cases, Opera is no better... <-QUOTE}

We already know Opera is no better since it failed the mouse over, wouldn't be an issue if it didn't.

where is your link to onblur?

[Comp01]

I use Mozilla Firebird 0.7, I failed test 3, and test 9 :'(

[peakaboo]

{QUOTE-> quoting: Comp01 link=board=19;threadid=14791;start=30#msg94285 date=1066406795]
I use Mozilla Firebird 0.7, I failed test 3, and test 9 :'(
<-QUOTE}

Look at it on the bright side.

The developers would say that your browser (firebird 0.7 & Opera which is what I am using) is working like it is supposed to, :) but it is certainly not the result you expected (right or wrong).

I don't know if Firebird has the block all popups. Opera does, and it works to prevent #3 & #9.

Also if you run proxo and have the following 4 standard filters enabled:

1) Disable JavaScript
2) Kill Dynamic HTML JavaScripts
3) Onload unloader
4) OnUnload unloader

you should be able to pass all 9 popups. It is easy to switch proxy configs on the fly (right click proxo icon in sys tray) and leave your browser settings alone.

or as some have posted just turn off Java and Java scripting (easy to do with Opera with the F12 key).

[minacross]

Google toolbar passed all the 9 ;D