Closed Bug 709465 Opened 13 years ago Closed 5 years ago

Bank login fails with "Skype buttons for kopete" plugin disabled

Categories

(Firefox :: Security, defect)

Product:
Firefox
Component:
Security
Version:
8 Branch
Platform:
x86_64
Linux
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED WONTFIX

People

(Reporter: telcor, Unassigned)

References

(
URL
)

Details

I'm experiencing a weird problem when I'm not able to log in to my bank account if I disable the "Skype buttons for kopete" plugin in iceweasel. Login attempts just fail with a cryptic "Unable to Process Request - Try Again Later or Contact Customer Support" message. I had struggled with this problem for a while and was able to identify it to the "pluginreg.dat" file in my profile and then to the enabled/disabled state of the "Skype buttons" plugin. If the plugin is enabled then I can log in, if it's disabled then I can't. I'm kind of puzzled and concerned why my bank transactions should have anything to do with the Skype buttons or Kopete. Any ideas? Thanks $ aptitude show iceweasel Package: iceweasel State: installed Automatically installed: no Version: 8.0-3+b1 For more information see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=651577
Do you have only a skype plugin or also a skype extension installed ? Does it also fail if you use http://support.mozilla.com/en-US/kb/Safe+Mode Does it work with a new profile http://support.mozilla.com/de/kb/Managing%20profiles ? >I'm not able to log in to my bank account URL ? >Login attempts just fail Do you get the problem only with valid login data or also with wrong ones ?
> Do you have only a skype plugin or also a skype extension installed ? Only the "Skype buttons" plugin is installed, no skype extensions. > Does it also fail if you use http://support.mozilla.com/en-US/kb/Safe+Mode Yes. > Does it work with a new profile http://support.mozilla.com/de/kb/Managing%20profiles ? No, fails with a brand new profile as well. URL ? https://www.stearnsbank.com/ > Do you get the problem only with valid login data or also with wrong ones With a valid login ID I get the "Unable to Process Request - Try Again Later or Contact Customer Support" error. With a wrong ID, it asks me for a password, skipping the verification question step. Normally, it'd be: ID, security question, password.
> Does it work with a new profile http://support.mozilla.com/de/kb/Managing%20profiles ? No, it fails with a brand new profile as well if I disable the "Skype buttons" plugin. If I don't disable the Skype plugin in a new profile then I'll be able to log in just fine. The "Skype buttons" plugin is installed in its ENABLED state as a part of Kopete, Kopete is automatically as a part of KDE. I had installed KDE and got both Kopete and the Skype plugin for Kopete as a result. Since I don't use Skype I disabled the Skype plugin and after that was no longer able to log in to my bank account.
I really have no clue what's happening here and why the website respons with an error. Can you remove the plugin ? You can see the plugin filename in about;plugins Have you already tried a Mozilla.org binary build ?
1) Shut down iceweasel, renamed /usr/lib/mozilla/plugins/skypebuttons.so , started iceweasel, Ctrl+Shift+A, the plugin is no longer there, tried to log in, login failed with the same error. 2) Downloaded firefox-8.0.1.tar.bz2 from Mozilla, shut down iceweasel, renamed my current ".mozilla" directory so a new profile is created, started downloaded Mozilla's firefox. Ctrl+****+A shows no plugins and no extensions. Tried to log in, login failed wtih the same error.
Do you have a win32 box somewhere and can you confirm that it works with FF on windows ? I'm sorry but i give up. I don't understand how a plugin can affect a page that doesn't require the plugin. Maybe someone else has an idea.
> I don't understand how a plugin can affect a page that doesn't require the plugin. What I see makes me think that when the Skype plugin is installed and ENABLED it affects the functionality of the security module. I'd look at the code associated with plugin enablement: Are some variables initialized that otherwise wouldn't be? Is the plugin registered with the security service? A different piece of security code runs when there are enabled plugins?
A Plugin that is only enabled but doesn't run doesn't affect anything. And what do you mean with "security module" ? You can create a Mozilla http and a cookie log and compare both cases to find a difference. - https://developer.mozilla.org/en/HTTP_Logging (nsHttp:5 is enough) - https://developer.mozilla.org/en/Creating_a_Cookie_Log You could also try a Mozilla.org 32bit build instead of a 64bit one.
> You can create a Mozilla http and a cookie log and compare both cases to find a difference. I combined them into one file by running "export NSPR_LOG_MODULES=nsHttp:5,nsSocketTransport:5,nsHostResolver:5,cookie:5". Definitely, there's a difference. Will some personal information be leaked (bank ID, etc) if I send you relevant log portions?
You must not post the log here as it may contain some private data (cookies). I'm currently a little bit busy with my job and i need some time to look through the logs if you want to send it via private email. Another question: Did this work in previous versions of Firefox ? You could check FF6 and FF7. - ftp://ftp.mozilla.org/pub/firefox/releases/
> Did this work in previous versions of Firefox ? Had this (or the one that looked like this) problem starting from version 3, perhaps even sooner. Though I didn't realize at the time the problem was related to the Kopete plugin, so can't be 100% sure. I'm sending you 3 files files that show some differences between enabled/disabled versions, maybe that'll be enough to identify the problem. If not, I'll have to send you the whole logs, it'll be around 8MB, not sure my email account can handle that. Please advise if you don't receive the email within 12 hours.
Have you received the log files? If so, were they helpful in identifying the problem?
Sorry that it took so long and unfortunately i don't see anythig in the log that would explain this :-(

plugins are no longer supported.

Status: UNCONFIRMED → RESOLVED
Closed: 5 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.