Heartbleed

users
#21

http://www.theregister.co.uk/2014/04/18/netcraft_
heartbleed_browser_extension/

"If the Netcraft extension determines that a site was vulnerable before
news of Heartbleed broke, it checks the date on the site's SSL certificate
to make sure it has been recently replaced. If it hasn't, the extension
displays an alert.......

Netcraft's updated browser extension is available as a free download for
Firefox 1.0 and later; Chrome 26 and later on Windows, OS X, and Linux; and
for Opera 15 and later on OS X and Windows. Versions for other browsers
aren't available, unfortunately, which means users of Internet Explorer and
Safari are left in the dark."

​From what I can see, Paul, the Netcraft Toolbar gives libreoffice.org a
clean bill of health when checked with both FF and Chrome on my main
machine running 64-bit Linux Mint 16. The conclusion I draw is that that
website is safe to use, at least as regards Heartbleed....​

Henri

#22

Tom Davies wrote:

Anyone continuing to use Internet Explorer deserves whatever they
get now more than ever.

In what way does Heartbleed affect IE users any more than others? Heartbleed is a bug in server-side software, and affects anyone using affected sites regardless of their browser. In fact, from what I've seen, it appears that newer versions of Internet Explorer are amongst the best at handling certificate revocation (which is needed to prevent a compromised certificate from being used to impersonate the server - just installing a new certificate on the server prevent the old one being used up to its expiry date if it's already compromised). e.g.:
http://news.netcraft.com/archives/2013/05/13/how-certificate-revocation-doesnt-work-in-practice.html
   That article is a year old now, so other browsers may have improved since (and if not, it would seem there's now a good reason to do so!)

Mark.

#23

Hi :slight_smile:
http://www.theregister.co.uk/2014/04/18/netcraft_heartbleed_browser_extension/

"Netcraft's updated browser extension is available as a free download for
Firefox 1.0 and later; Chrome 26 and later on Windows, OS X, and Linux; and
for Opera 15 and later on OS X and Windows. Versions for other browsers
aren't available, unfortunately, which means users of Internet Explorer and
Safari are left in the dark."

Regards from
Tom :slight_smile:

#24

Hm, html stripped away.
Let me retry adding a link to an image explaining what I mean:
http://s30.postimg.org/616qwbcb5/calc_sum_colors.png

#25

Ah, sorry, I'd missed that connection. I see what you mean, not that IE is inherently more at risk, but that this tool to flag potential problems isn't available for it. It seems strange that Netcraft release this tool, but exclude a large number of users who could probably do with it!

Mark.

Tom Davies wrote:

#26

Franco,

What do you do to color the cells in the first place? I'm guessing that you use some conditional formatting formula. Just a thought but could you use that same information to derive your sums instead of trying to base it on the colors? Cell formatting is primarily (if not solely) designed for visual effect -- not programmatic control. You might need to add some hidden columns or rows as helpers.

BTW, for future reference, you originally "hijacked" a thread dealing with some malware by using the reply (all?) feature of email and totally changing the subject. This caused the two threads to get intertwined and diluted the impact of your Subject. In this case, "What's done is done."

#27

...

To answer you specific question now:

So I guess I have 3 choices:
Do nothing - I'm running version 4.2.2.1 (I have it set to auto update)
Go "back" to 4.1.5. Will I be giving up functionality?
Go to 4.2.3.3. But the release notes say it "remains targeted for early
adopters and private power users," which I'm not!

Each of the 4.2.x.x releases are for early adopters because the version
is still quite new and needs more tests to be said "Stable". If you use
version of this branch you should always update to the last available.

So in layman terms, what is the difference between 4.2.2.1 and 4.1.5?

See above, the 4.1.5 version is stable and has been tested for a long
time now. I you want to use it for your daily work, you should always
stay with this branch 4.1.x, until the 4.2.x branch is said stable and
for all users.

...

Unfortunately that is not how 4.2.x is presented to the casual/new user.
If you go to libreoffice.org and click on the download button (see:
http://s11.postimg.org/lpwmin3cj/Screenshot_from_2014_04_22_09_18_41.png),
the link defaults to libreoffice-fresh and you are presented first with
4.2.x. See:
<http://s18.postimg.org/sm3gptoqh/Screenshot_from_2014_04_22_08_48_40.png>
and scrolling down the page 4.2.x is again presented as a 'released'
version:
<http://s29.postimg.org/au30xbbt3/Screenshot_from_2014_04_22_08_49_44.png>
Nothing on that page indicates that 4.2.x is for 'early adopters', and
any new prospective user will do as presented and download the 'Main
Installer' & Help file for 4.2.x.

The user is only directed to libreoffice stable if they click on the
libreoffice.org 'Download' dropdown menu:
<http://s16.postimg.org/hx3grlx6t/Screenshot_from_2014_04_22_09_19_13.png>

Also, when checking for updates from 4.2.2.1:
Version: 4.2.2.1
Build ID: 3be8cda0bddd8e430d8cda1ebfd581265cca5a0f
I am assured that "LibreOffice 4.2 is up to date."
<http://s30.postimg.org/5szb78lo1/Screenshot_from_2014_04_22_08_57_37.png>