Saturday, July 9, 2011

Public Warning; earthlink,java ssl are not secure

This is documentation of unsafe earthlink supposedly secure sites to warn the public that earthlink ssl is NOT secure:

Webpage error details

User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
Timestamp: Sat, 9 Jul 2011 14:40:51 UTC


Message: 's' is undefined
Line: 276
Char: 1
Code: 0
URI: https://myaccount.earthlink.net/cam/whlogin.jsp/;
also error : 'automation server can't create object' at 9:33am;9 July 2011;
and 3rd error: "s is undefined ; _gat is undefined whlogin.jsp code=0
URI= https://myaccount.earthlink.net/cam/whlogin.jsp"
3 errors today while trying to get to secure earthlink site.
Save for documentation
Add this error on 4th attempt to get to https: site for earthlink:
Webpage error details

User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
Timestamp: Sat, 9 Jul 2011 14:48:30 UTC


Message: Automation server can't create object
Line: 1
Char: 42271
Code: 0
URI: https://cc.earthlink.net/earth-panel/current/js/min/jquery-1Webpage error details

User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
Timestamp: Sat, 9 Jul 2011 14:50:11 UTC


Message: Automation server can't create object
Line: 1
Char: 42271
Code: 0
URI: https://cc.earthlink.net/earth-panel/current/js/min/jquery-1.3.2.min.js

These are the error messages from 3 attempts to access ssl site for earthlink today, while the browser is 8.0 IE and with 256 encryption; but with
javascript enabled [required for earthlink since earthlink does not want secure sites] and cookies enabled [also required by earthlink site to track their customers]
Errors on my person and private computer owned by me: Gloria Poole; 10:01am;9-July-2011;at my apt in Missouri
update 10-July-2011 when still trying to get ssl sites on IE8.0, I decided to update java and here are results of that 30 minute effort that failed. Read all the way through to my computer signature again for full picture of events:

Webpage error details

User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
Timestamp: Sun, 10 Jul 2011 13:57:52 UTC


Message: Invalid character
Line: 1
Char: 1
Code: 0
URI: http://java.com/js/deployJava.js


While trying to verify what java version is deploying in order to upgrade if necessary;
8:58am;10/July/2011
2nd try:
Webpage error details

User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
Timestamp: Sun, 10 Jul 2011 14:00:21 UTC


Message: Invalid character
Line: 1
Char: 1
Code: 0
URI: http://java.com/js/deployJava.js


Message: 'deployJava' is undefined
Line: 1337
Char: 1
Code: 0
URI: http://java.com/en/download/installed.jsp


Message: Invalid character
Line: 1
Char: 1
Code: 0
URI: http://java.com/js/cookie_set.js

3rd try:
Webpage error details

User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
Timestamp: Sun, 10 Jul 2011 14:01:55 UTC


Message: Invalid character
Line: 1
Char: 1
Code: 0
URI: http://java.com/js/deployJava.js


Message: 'deployJava' is undefined
Line: 1337
Char: 1
Code: 0
URI: http://java.com/en/download/installed.jsp


Message: Invalid character
Line: 1
Char: 1
Code: 0
URI: http://java.com/js/cookie_set.js


Message: Invalid character
Line: 1
Char: 1
Code: 0
URI: http://java.com/js/deployJava.js
then allowed cookie 'sun" entitled "s_vi"
but it was marked not secure so some doubt about it but seems have too
to proceed, then received error message 4th time of:
Webpage error details

User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
Timestamp: Sun, 10 Jul 2011 14:04:42 UTC


Message: Invalid character
Line: 1
Char: 1
Code: 0
URI: http://java.com/js/cookie_set.js;
5th time trying to detect what version java is deploying on IE8.0 w 256 bit encryption:
and another error msg:


Webpage error details

User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
Timestamp: Sun, 10 Jul 2011 14:08:47 UTC


Message: Invalid character
Line: 1
Char: 1
Code: 0
URI: http://java.com/js/cookie_set.js


Message: 'deployJava' is undefined
Line: 1337
Char: 1
Code: 0
URI: http://java.com/en/download/installed.jsp?detect=jre&try=2;
instaed of verifying version, I tried the download java now and answered no to the
first 2 times it asked if I wanted to allow scripts to run, and java.com
page appeared, but then when clicked download latest version, got another
error msg of:
Webpage error details

User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
Timestamp: Sun, 10 Jul 2011 14:12:53 UTC


Message: Invalid character
Line: 1
Char: 1
Code: 0
URI: http://java.com/js/cookie_set.js;
then message to enable cookies [unrestricted] and javascript [unrestricted] and then I did,
and then message : "add on for this website failed to run.
Check security settings for potential conflicts."
then had to click yes 16 times to allow scripts to run! Then clicked
agree to terms and conditions then this message:
recommended version 6 update 26 file size 11mb but could not download it.
[conflict with security on IE 8.0]
Which all means to me that for anyone who has an online banking financial acct with java on computer then the 256 bit encryption is probably made null and void.
Gloria Poole; at my apt in Missouri;9:44am;10-July-2011