Pale Moon v27.7.2 Released (2018-02-01) Release Notes Download x64 Download x86 Spoiler: Changes/fixed v27.7.2 Changes/fixes: Changed the X-Content-Type-Options: nosniff behavior to only check "success" class server responses, for web compatibility reasons. Changed the performance timer resolution once more to a granularity of 1 ms, after evaluating more potential ways of abusing Spectre. This takes the most cautious approach possible lacking more information (because apparently NDAs have been signed over this between mainstream players), follows Safari's lead, and should make it not just infeasible but downright impossible to use these timers for nefarious purposes in this context. Improved the debug-only startup cache wrapper to prevent a rare crash. Fixed a crash in the XML parser. Added a check for integer overflow in AesTask::DoCrypto() (CVE-2018-5122) DiD Fixed a potential race condition in the browser cache. Fixed a crash in HTML media elements (CVE-2018-5102) Fixed a crash in XHR using workers. Fixed a crash with some uncommon FTP operations. Fixed a potential race condition in the JAR library. DiD This means that the fix is "Defense-in-Depth": It is a fix that does not apply to a (potentially) actively exploitable vulnerability in Pale Moon, but prevents future vulnerabilities caused by the same code, e.g. when surrounding code changes, exposing the problem, or when new attack vectors are discovered.
Pale Moon Official Branding Violation https://github.com/jasperla/openbsd-wip/issues/86 https://lists.freebsd.org/pipermail/freebsd-ports/2018-February/112455.html
PM forum discussion about the incident. https://forum.palemoon.org/viewtopic.php?f=5&t=18256&p=134360&hilit=ibara#p134360
Pale Moon v27.8.0 Released (2018-03-02) Release Notes Download: x64 / x86 / portable / (Linux) Spoiler: Changes/fixes v27.8.0 Changes/fixes: Added support for emojis on Windows systems that have relatively poor support for them with standard font sets by including our own font (EmojiOne based for now). Added a setting in preferences to select the use of tab previews with Ctrl+Tab. Added Eyedropper menu entry to the AppMenu. Added a preference to control whether the text cursor (caret) should be thicker when dealing with CJK characters or not (default = yes). Added URL fix-ups for schemes (mis-typed "ttp://" etc.). Added support for ES6 "Symbol species". Updated our TLS 1.3 support to the latest (probably final) draft. Fixed gap inconsistency in the tabstrip. Fixed a number of browser crashes. Fixed a crash with the exponentiation operator "**" Set the performance timer granularity to 1 ms. Updated the kiss-fft library to our forked 1.4.0 version. Disabled a potentially problematic optimization on Win 8+ with high contrast themes in use. Removed the notification bar when in full screen to prevent unwanted visible screen elements. Removed unmaintained and insecure WebRTC code - building with WebRTC enabled is no longer an option. Removed redundant checks for "Vista or later" since that is all we support. Added display of the http status to raw request displays. Added a workaround for cloned videos not retaining their muted state. Added a temporary workaround to avoid crashes on trackless media. Removed some superfluous ellipses from menu labels. Fixed undesired shrinking of line heights as a result of setting minimum font size in preferences. Fixed some issues with setting the new tab preference (regression).
Pale Moon is been the absolute best browser for me since i steered away from Opera. Opera for me is always been super cool and I always liked it a lot, but Pale Moon remains a favorite even when it comes to having to backstep a few versions which I won't hesitate to do if it fudges with updates/upgrades. However let it be known im also still hooked on IE for main duties. Stuffy as it is, crashes lockups and all it's a habit
Hi. After August,end of Firefox ESR support, I'm undecided whether to switch to Basilisk or New Moon (fork of Pale Moon) in my PC with Windows XP. Can the following extensions be installed with Pale Moon? - Noscript - uBlock Origin - No Resource URI Leak - Canvas Defender - Speed Dial FVD New Moon activates the protection "RET ROP Gadgets detection" (FP) related to browsers of MBAE. This problem is not present with Basilisk. Can someone verify? TH.
uBlock Origin - Despite of showing: "This add-on is not compatible with your version of Firefox. " it works. Noscript: a special version of Noscript can be found in the link below (Category: Fixed) No Resource URI Leak: It isn't compatible but it isn't really needed. The website https://browserleaks.com/firefox is only showing the "Default locale", everything else is shown as "not detected" Speed Dial FVD: older versions might work (v23.x) Canvas Defender: No (=Jetpack/SDK extension - incompatible with Pale Moon)
@mood Th. A little too limited for me. Do you think that with Basilisk there is more luck in installing the same extensions?
Maybe, but don't expect that you can use all of your extensions in all different kind of browsers. Sometimes it is needed to use alternative extensions. Especially in the case of browsers which don't support "WebExtensions". Basilisk has experimental support for WebExtensions but it doesn't support Windows XP.
hint: "speed dial fvd" (all FVD and nimbus extensions) are spying and tracking user behavior. blocking it would make those extension unstable or not functional. its because people pray "pale moon" vs tracking/spying but install such bs. (same is valid for all "barisderin" (author) extensions) https://addons.mozilla.org/en-US/firefox/user/baris-derin/ (eg NoSquint+ or theme&fontsize changer)
The special version developed by Roytam1 can be installed with XP: https://msfn.org/board/topic/177125-my-build-of-new-moon-temp-name-aka-pale-moon-for-xp/ but from the system requirements I think use more RAM than New Moon.
i had a closer look into code, forget the privacy statement, its fake. its tracking with google analytics (not solely). also every new tile is also tracked when creating.
For palemoon i would suggest the superstart new tab extension. http://addons.palemoon.org/addon/superstart-moon-edition/
The 32 bit versions of New Moon developed by Roytam1 for XP are 2. Also noSSE. With CPU-Z portable it is possible to check if the PC needs this special version (For very old computers).
noSSE - not seriously - cpu w/o sse are pre-2001. i have doubt they a capable to run anything smootly or current software.