Figured out why firefox was not loading http images on a https website.

7 months ago I created a custom user file which applies more security rules for firefox than any of you guys would even dream about and while doing so I enabled security.mixed_content.block_display_content. This does exactly what it says it does, blocks display content (images in this case) from loading if you are loading http content from a https website. This was to prevent attacks where a man-in-the-middle could tamper with the non encrypted http data and give you data that was not meant to be. For example if an https website was loading an iFrame from a non https website, I could hijack the request and change the content of the non https request and insert malicious code or content into it. Mean while the user thinks they are safe because they are browsing an https website.

Anyways if anyone is interested they can drop this into their profile and name it "user.js", https://raw.githubusercontent.com/pyllyukko/user.js/master/user.js

Make sure to go through it line by line because it heavily modifies firefox for security which may be an annoyance. Such as it deletes all cookies, sessions, history, and the like when you close firefox. It automatically starts in private browsing mode no matter what. And it disables referers/mixed content loading and the like. Some of which you may want to enable or disable. Meanwhile it also adds a bunch of security features like blocking page precaching, disabling firefox telemetry, disabling ways to probe/identify your system through your browser, and locks down weak encryption used for HTTPS so that only strong encryption is used.

This post was edited by AbDuCt on Jun 5 2016 10:21am

will try it out later

Are you trying to refer to something or just posting for the sake of posting?

Edit:: Meanwhile I've been working on my laptop configuring the paste buffers. Finally got it so that urxvt can paste to/from firefox rather than only urxvt only being able to paste into firefox.

Now I only need to figure out a sane way to have firefox download to my users directory and giving my user permissions to access the files. Currently since Firefox is sandboxed as another user, my user cannot touch the downloaded files and I have to manually login as root and move/chown the files. I could perhaps add my user to the firefox group, and provide a symlink to the /home/firefox/Downloads folder to my users home folder. It depends on the file permissions firefox sets on the downloaded files. If they are not xx7x, then even if I am part of the firefox group I wont be able to read/write/execute to them. Might try it out later.

This post was edited by AbDuCt on Jun 5 2016 12:28pm

seems as if he's just spamming for the sake of increasing post count

can't you manually alter the download location even if it's sandboxed? I'd have to look into it and see what the limitations are but I believe you can still set the download to your users directory.

Not in linux. If I don't give the sandbox user firefox permissions to write to my users directory then the firefox user will get a permission denied error.

And then the whole point of sandboxing firefox is to prevent the firefox user from tainting the rest of the system if it gets exploited, so access should only be one way. I should be able to access the firefox users data, but the firefox user should not be able to touch anything else on the system.

Oh gotcha I misunderstood what you were trying to do,

Sorry, I read it real quick.

I've been working on an in-game overlay that works with Day-Z for remote server controls and I keep hitting a roadblock. I can get it to communicate with the server but it won't respond to the commands no matter what i've tried.

There is not much I can say without more details and technologies you are using. From what it sounds like is that the server is not parsing your commands, are you sure it is even receiving them?

Here's the Rcon I'm using

https://github.com/DomiStyle/DaRT

It's all windows based so it's a bitch.

I checked both servers and found it's not receiving from the overlay, but if I use Dart then it receives them. I'm guessing that the overlay isn't communicating with the Rcon completely. So, it's all on my end.

Yea that narrows it down a bit. I am not sure how you are sending your commands, but check the return status on them. Most Winsock socket functions either return an error code, or the number of bytes it has successfully sent. If an error has occurred you can fetch them via some function call which I can't recall off the top of my head.