Start a Conversation

Unsolved

This post is more than 5 years old

3 Apprentice

 • 

15.2K Posts

4866

July 1st, 2010 06:00

Opera 10.6

 Opera v10.60 (Build 3445)

Opera 10.60 is a recommended upgrade offering new and improved features, plus security and stability enhancements.
For complete details, see http://www.opera.com/docs/changelogs/windows/1060/

Security
Improved
Implemented validation of certificates used in widget signature using OCSP

Fixed
Fixed an issue where double-clicking a link can unexpectedly run a program from the Internet; see our advisory (http://www.opera.com...rch/view/957/).
Fixed an issue which could be used to trick users into uploading unexpected files, as reported by Andrew Valums; see our advisory (http://www.opera.com...rch/view/958/).

***** WARNING/CAVEAT *****:   Opera now comes with AVG's real-time Web threat data feed built in. What this means is that when you [try to] encounter a page that's been detected by the AVG network to be malicious, you'll see the warning [screen, similar to what WOT does] instead. The network is fed by data supplied anonymously by 51 million AVG users from around the world.

According to AVG's press release, the feature uses multiple techniques to protect users. It uses exploit signatures to detect sites serving drive-by downloads, the AVG Online Shield and contextual analysis to detect social engineering scam-driven viruses, and reputation lists for safeguarding against malicious domains and URLs.

for more details/information, see http://download.cnet.com/8301-2007_4-20009358-12.html

Note:  I will be testing this out later today.   Hopefully, there won't be any conflicts between this and one's resident anti-virus program.   I also am curious to learn if this is an option (which can be disabled), or an inherent feature (which is forced on us).

3 Apprentice

 • 

15.2K Posts

July 1st, 2010 10:00

first impression of 10.6/avg

Opera already (v.10.5x) had a "fraud protection" option  [ tools / preferences / advanced / security / (check box to) enable fraud protection ]

Apparently, what they did in 10.6 is replace (or perhaps augment ???) their previous security "vendor" with AVG.   But (at least so far)  there seems to be no explicit/obvious mention/advertisement of avg --- in particular, no toolbar.

so it would seem the question now is just how helpful/useful is this... and whether or not 10.6 has introduced any new "quirks".   at the opera forum, some users have complained that they got a[n erroneous] fraud alert when they tried to access facebook or youtube... but i did not encounter this particular f/p.   other issues are likewise being reported, but i haven't had a chance to read through them.

 

===================================

the following was copied/pasted from http://secunia.com/advisories/40375/  :

Description
Two [moderately critical] security issues have been reported in Opera, which can be exploited by malicious people to disclose potentially sensitive information or compromise a user's system.

1) A design error in the "Download" dialog can be exploited cause a file to be downloaded and executed if a user is tricked into double-clicking a link on a specially crafted page.

2) An error in the handling of file upload forms can be exploited to cause a user to unintentionally upload an arbitrary file from the local file system if the user is tricked into pasting clipboard content into a form on a specially crafted web site.

Successful exploitation requires that the clipboard contains a string that specifies a path to a local file, e.g. set by a plug-in.

The security issues are reported in versions prior to 10.60.

Solution
Update to version 10.60.

Provided and/or discovered by
1) Reported by the vendor.
2) The vendor credits Andrew Valums.

Original Advisory
Opera:
http://www.opera.com/docs/changelogs/windows/1060/

http://www.opera.com/support/kb/view/957/

http://www.opera.com/support/kb/view/958/

 


3 Apprentice

 • 

15.2K Posts

July 2nd, 2010 17:00

"Opera spokesman Thomas Ford said in an e-mail... that he's "almost certain" that Opera's new AVG anti-malware detection system replaces the previous one that Opera used, which had been provided by Haute Secure".

3 Apprentice

 • 

15.2K Posts

July 4th, 2010 07:00

I have spent several hours this morning surfing almost exclusively in Opera 10.6, and have not encountered any problems/faults with it... at least, in terms of the web pages I have bookmarked and visit "regularly".

I realize that --- as is always the case when an updated version of a product is released --- there are numerous complaints in their user forum.   Feel free to check them out if you wish:   http://my.opera.com/community/forums/forum.dml?id=26

to stress, the new avg anti-malware feature just seems to be a "data feed" --- perhaps analogous to WOT --- and so is not conflicting with one's resident anti-virus [i've tested opera 10.6 / avg with both Avast5 and Symantec/Norton ].

1 Rookie

 • 

5.8K Posts

July 4th, 2010 12:00

Opera 10.6 seems a bit faster than IE8 also, but I lack the means to test this.

http://www.dailytech.com/Opera+106+The+Worlds+Fastest+Stable+Browser+Tested+vs+IE+9/article18909.htm

5 Practitioner

 • 

274.2K Posts

July 4th, 2010 16:00

Joe,

 

Not sure if it's quite what you're after:

http://www.numion.com/Stopwatch/index.html

No Events found!

Top