General :  K-Meleon Web Browser Forum
General discussion about K-Meleon 
Dirty trick from Spotify & Google
Posted by: Mello
Date: December 06, 2019 09:59PM

Login to Spotify web player account is dependent on google-analytics dot com not being blocked

I recently blocked this in my hosts file.

If blocked nothing happens when clicking on the Login button.
I double checked in Chromium with same negative result
Then I inspected the Login button using chrome and the google-analytics url showed up along with error message.

#comment out the hosts entry and login works fine

Hope other sites don't start doing stuff like this

Options: ReplyQuote
Re: Dirty trick from Spotify & Google / Login blocked
Posted by: siria
Date: December 06, 2019 10:57PM

Thanks for reporting.
Am sure lots of other sites prevent logins without forced spying too, with users of course getting no hint WHY they are blocked! Here and on msfn users occasionally post "bug reports" that a login wouldn't work sad smiley

Options: ReplyQuote
Re: Dirty trick from Spotify & Google
Posted by: JohnHell
Date: December 06, 2019 11:22PM

Mmmmm, not here, at least, still blocked but hidden captcha should be allowed (in my case, due K-meleon version (75.0), facking Opera user agent, enabling Message Channel and third party subdocuments (to date, still works the captchas this way in this version (to me, I don't know why it doesn't work for others confused smiley))).


Remarked at bottom right the hidden captcha.

(Should have posted the account area, but trust me is what goes then after that page)



Edited 6 time(s). Last edit at 12/06/2019 11:29PM by JohnHell.

Options: ReplyQuote
Re: Dirty trick from Spotify & Google
Posted by: Mello
Date: December 07, 2019 09:57PM

"enabling Message Channel and third party subdocuments"

What and where are these?

I can see captcha in bottom right of screen in chrome but not K-m goanna. I've not had to fill it in for chrome.

Options: ReplyQuote
Re: Dirty trick from Spotify & Google
Posted by: JohnHell
Date: December 08, 2019 02:01AM

Unless you have some privacy restrictions and using macros like those by siria for toggling them, those should be enabled by default.

Anyway, through about:config (sorry, not using Goanna, so don't know if there is specific control for both confused smiley)

dom.messageChannel.enabled = true

permissions.default.subdocument = 1


But as I said, these should be with these values (or hidden (not visible in about:config), but with these values) by default.

I only was replying that I have that blocked (analytics), and still can login. The only need was the requirements for Google recaptcha to work.

You can have a look to about:networking > DNS button to see if you are blocking something else smiling smiley

I can't talk if Goanna version has some privacy restriction interfering. Maybe siria or rodocop can tell.



Edited 2 time(s). Last edit at 12/08/2019 02:04AM by JohnHell.

Options: ReplyQuote
Re: Dirty trick from Spotify & Google
Posted by: Mello
Date: December 09, 2019 05:01PM

Thanks.

I tried with "out of the box" default Goanna and could login
without capcha (I could see the captcha box lurking bottom right of screen).

I don't see anything for spotify under the dns tab and in both
Goanna's the first about:config setting shows and is true &
the second must be hidden.

Now I've got to figure out what I've changed in my tweaked Goanna :-)

Options: ReplyQuote
Re: Dirty trick from Spotify & Google
Posted by: JohnHell
Date: December 09, 2019 07:05PM

Quote
Mello
without capcha (I could see the captcha box lurking bottom right of screen)

Then not without it winking smiley

If you already tested with the analytics blocked, yep, something else have you tweaked winking smiley

The downside of privacy tweaks, we could get paranoid and block everything I think has happened to a lot of us.



Edited 2 time(s). Last edit at 12/09/2019 07:07PM by JohnHell.

Options: ReplyQuote


K-Meleon forum is powered by Phorum.