Related
Network Exploitation
Hello Everyone! This is my first ever post, I just got the Kin TWOm a few days ago and i've been playing around with a few different exploits.
Port Scanning
There are only two open ports on this device:
Port 138: NetBios-DGM
Port 137: Microsoft Windows Mobile netbios-ssn
I will be attempting to run a few different netbios attacks and I'll let you guys know if I gain root access!
Browser Exploits
According to the Wikipedia page on the Kin Series of phones the Browser Agent is: Mozilla/4.0 (compatible; MSIE 6.0; Windows CE; IEMobile 6.12; en-US; KIN.Two 1.0)
I will also attempt to run many IE 6,7,8 etc. exploits on this device.
I'LL KEEP YOU GUYS POSTED! Also, If you know any more information about the networking aspect of this device PLEASE RESPOND TO THIS POST!
Thanks.
True, but port hacks use the 139 port.
Also, netbios commands (alas "nbstat") don't work with the kin ip (just retested with router-asigned local ip), but kin answers pings.
Also, dont just believe what wiki says. Test a browser detector page for the browser headers, and the capabilities.
As we have understood the storage upload/download i guess that we can also retest this kind of approach.
Dont want to upset ya, but i tried most of the exploits and the meta xploit things without nothing more than explorer crashes without rooting. Also, we do not know anything (or almost) from the OS, so shellcodes in ARM assembly may not work when using dll addresses.
As othes say that the M versions can open youtube, that's a good point to check too. I will think about it.
Edit, just checked it. Kin uses the "rtsp" protocol, which was unable on the version "kin two" (without M). Unfortunately, my kin doesnt play any vid from the net (maybe because not using 3g and just wifi).
Don't forget to test on 1.00 firmware. Since 1.00 had KIN Studio, which synced up everything. You might be able to get through the KIN Studio Sync.
Give me a working kin two then. Also, a CDMA connection tower to at least, get the kin to try to call home.
.... just kidding.
@john, your kin wont let you watch videos? Well it's not because your using a wifi network because I use a wifi network all the time. If you want youtube to work, then go to the page with the video, close out, go to settings then browser and delete temporary files and cache
i appoligize if this doesnt pertain, but on MS answers fourms i read that the loop on the orginial KIN OS uses a URL to function. Maybe this is exploitable..
somebody should look into this though.
So.. i doubt that is up to a common user level to test this but, as i said before, the kin two (twoM version only) uses RTSP.
It's possible to use a custom url for that protocol in the normal address bar. For example:
rtsp://lamewebsite.com/roflvideo/
Of course, if you'r on a lan, you can achive something like:
rtsp://192.168.1.2/roflvideotest/
having a a custom program listening on port 554 (default rtsp) at 192.168.1.2 .
There are some exploits (old, around the web) called "PoC rtsp exploit" which uses customized rtsp packets to execute code and/or crash the receiver program.
Mmmm or probably not crashing either, but showing the "Doh! can't play this".
Of course, as you can see, you can patiently wait for a rtsp random url (not a real rtsp one) to load ("Loading...") to see that's Zune (aka "Music & more") App what loads the video.
So zune is the program to crash and/or exploit, which is not a weak target (not much more info about it or its weaknesses).
@JohnKussack,
What about this HTTP zune exploit that allows overwriting zune files:
http://securityresponse.symantec.co...sponse/attacksignatures/detail.jsp?asid=22921
(I don't know anything about this exploit other than that it exists)
Marcellus1 said:
What about this HTTP zune exploit that allows overwriting zune files:
http://securityresponse.symantec.co...sponse/attacksignatures/detail.jsp?asid=22921
Click to expand...
Click to collapse
From what i see, it's a (microsoft caused) name mistake. This seems to be for the Zune software at windows, not for the zune software (at Zune devices/kin).
It's like zune of zune devices under zune os to run zune apps in a zune world where everything is named zune.
Yup, i was right. Just tested a local server at home:
Code:
Kin RTSP server test on port 554
Waiting for connection from the kin
Kin connected from Address: ('192.168.2.150', 49173)
##########################
DESCRIBE rtsp://192.168.2.134/ RTSP/1.0
CSeq: 1
Accept: application/sdp
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)
##########################
Edit: after several tries, it seems like it just su.... accepts .3gp files, and refuses to get another filetype. Ironically, the Microsoft papers about this, say that rtsp client should send the accepted files with the DESCRIBE request. (Home team failing, anyone?).
I doubt it would just accept the exploit idea (found the code for the exploit and did not work, just normal error) or be a possible hole into the system.
johnkussack said:
Edit: after several tries, it seems like it just su.... accepts .3gp files, and refuses to get another filetype.
Click to expand...
Click to collapse
Have you tried an mp4 or m4a file?
Marcellus1 said:
Have you tried an mp4 or m4a file?
Click to expand...
Click to collapse
Not in the mood. It just refused the others, so i skipped creating or downloading a mp4 to test.
Anyway, every joe can stream in Vlc (windows) and test both. I just tested local issues.
Would this exploit work or be useful? It is said to cause an exploitable heap corruption using a GIF file:
http://mobile.securiteam.com/exploits/5YP012A8AW.html
Here's another potential exploit that works by sending a malformed RTSP response header that allows shell code to be executed:
http://www.eweek.com/c/a/Security/Trio-of-Exploits-Out-for-Windows-QuickTime-RTSP-Flaw/
Marcellus1 said:
Would this exploit work or be useful? It is said to cause an exploitable heap corruption using a GIF file:
http://mobile.securiteam.com/exploits/5YP012A8AW.html
Here's another potential exploit that works by sending a malformed RTSP response header that allows shell code to be executed:
http://www.eweek.com/c/a/Security/Trio-of-Exploits-Out-for-Windows-QuickTime-RTSP-Flaw/
Click to expand...
Click to collapse
No. The second one is my named rtsp exploit.
why dosent some one try using the v cast store instead od android or windows 7
I'm not sure why this works on the KIN (because it doesn't work on the wp7), but it does. The browser on the KIN supports the HTML5 cache manifest command, info here (http://en.wikipedia.org/wiki/The_cache_manifest_in_HTML5). To prove this here is a working offline tetris game I have on my KIN (tetris.alexkessinger.net), the only problem is I can't actually play it because there are no arrow keys on the phone, but it is fully functioning (I get to watch the pieces fall).
So here is my idea... I see we do have developers in this forum so maybe they can try to either create some javascript webapps designed to run on the KIN that use the manifest to cache the needed files.
OR maybe we could use the cache manifest to cache an executable file and then have that filed executed through another website that gives the command to run it. I'm sure that is just wishful thinking and more than likely won't work, but I thought I would throw that out there.
Nice suggestion, but unfortunately it will not work. Just because the game is available offline doesn't mean the browser supports the HTML5 cache manifest. Pretty well every browser that I know of does and always has had a cache to store some webpage files. The KIN browser is no different. The KIN is just storing the javascript from that webpage in the cache. The tetris game is not the type of web application the HTML5 cache manifest wiki describes. Furthermore, to cache anything from the KIN browser, the 'anything' must be supported by the browser--such as the javascript used to run the tetris game. Executable files are not supported by the KIN browser.
Thanks
Thanks for clearing that up for me, like I've said before I'm not a programmer (at least not in the last 10 years). However, this game is successfully cached and able to run hours after visiting the page. So maybe there is a way to duplicate it so that other javascript games can be made available to use offline. I just don't know how this game is caching the coding along with the images needed to run it. I thought it was the cache manifest because when I view the page source it says "<html manifest="tetris.manifest">".
Let me know your thoughts, I plan to try and duplicate it next week with a blackjack game, but I am in the middle of finals so I don't have time until the middle of next week. Also, like I said I'm not a programmer so I will be trying to reteach myself, so it's gonna take a while and probably not work.
I may have posted the wrong wiki link, but the cache manifest comand does work. Below is a link to a game, with needed images, that will cahe on the phone. it is available around 12 hours after opening it. So if you put it as an "app" it is almost the same thing. Just visit it before you leave wifi and youll be good until you are in wifi again.
http://192.168.1.22/webapps/bubbles/bubbles.html
kintwofan said:
http://192.168.1.22/webapps/bubbles/bubbles.html
Click to expand...
Click to collapse
It was a worthy try, man, but that link is to an address on your local network. Do you have someone on the internet we can access? Or can you port forward port 80 through your router, to that system, to allow external access?
It is a router problem. I tried to open port 80 last night, but it still is not working. I am going to play with it some and see if it is a firewall problem OR if I just messed up when setting up the port forwarding. Sorry, like I've said I am not an expert.
It's a bad address, cause he's giving out the LAN address asigned by the router.
For you to be able to use it, you would need to be in his lan or in an VPN to his lan.
To real test what you got externaly, you need to give the external (to world) ip which is given by your own router admin panel, and/or websites like whatismyip.com.
then you need to do Nat from your external Ip to your local ip, specifying so in the router.
Or else, just share the website in a zip, and save time to do stuff like eat an ice cream, drink a soda/beer and have fun.
Thanks John
Thanks for the advice because this was my first time trying to make it available to everyone and clearly I couldn't do it. However, here is the file folder below. I have also done a couple of simple java apps that don't have any images (tic tac toe, blackjack, and the scientific calculator that was created by gsearle) I didn't include any of them because this bubbles one has images and shows the cache manifest works better. Also I don't have gsearle's permission so I wouldn't redistribute his work.
RE : Offline webapp.
Here is mine : a QR-Code Generator. No flash, java, php, ...just HTML5 & JavaScript. Works offline too!
Be aware that T-Mobile is now checking Browser User Agent strings and is apparently blocking those with various things in them -- "Cyanogen" being, apparently, one of them.
Guess how I found this out?
Opera and similar will still work (of course) but this is a particularly-evil thing for them to be doing, as it now means that if you develop up something you're going to have to take some care to EXACTLY match a stock browser ID or it's likely you'll get bounced.
They've used this trick for quite some time to detect tethering, but now it appears they're just denying PHONE strings that are perfectly legitimate and from actual PHONE firmware if it's not theirs.
I'm not sure what's happening but I was able to not only search for it but browse the cyanogenmod.com website. That's serious censorship stuff if TMO is actively blocking access selectively like that.
No no you're missing the point.
Your browser sends a "User Agent" string that the web server can use to customize for the sort of device you are. This is why some sites come up with a "mobile" interface optimized for a smaller screen.
Well, carriers can intercept that -- that's how they detect tethering if you go around their "tethering manager" garbage, incidentally. AT&T has done this for a long time and T-Mobile started doing it a few months ago.
As of this evening I got an error while testing a CM7 build on another device stating that my browser agent string was invalid. The only thing odd about it is that it identified as a T-Mobile device with a Cyanogen firmware build on it, and they refused to let it go through. Opera of course works as do other browsers, but the stock Android one was refused.
Very naughty, in my opinion, and this is going to make custom firmware a bit more fun as developers and such will have to "spoof" an official T-Mobile browser UA or they're likely to find it doesn't work at all.
download Miren browser, and move on.
Well yes, other browsers work fine. But this is just another kick in the nuts from the "T".
Genesis3 said:
Well yes, other browsers work fine. But this is just another kick in the nuts from the "T".
Click to expand...
Click to collapse
Kick 'em right back in the nuts with the APN workaround.
Ok I dont understand your logic.
You can download Dolphin browser on a stock phone, and change the user agent to desktop, iphag, or custom...
This is a silly post because it dosnt mean youre rooted, tethering, or have a custom rom.
As for T-mobile governing you, its their equipment (switches, access points...) they can do what they want basically. We are here to find ways arround that.
Point being that it's just going to be another thing that people will have to deal with, and its pointless from a carrier perspective.
I can see them looking for the common laptop and desktop stuff and screaming "Tether!" if they find it, but barring an obvious mobile browser because it's not one of "theirs" is rather foolish -- and annoying.
tzbigworm said:
download Miren browser, and move on.
Click to expand...
Click to collapse
Am I the only one who can't find Miren in the Android Market anymore? Weird.
fbueller said:
Am I the only one who can't find Miren in the Android Market anymore? Weird.
Click to expand...
Click to collapse
It seems to be gone now. Search for black Miren browser on Google. That's what I did and the black version is awesome.
This does not happen for me I'm the self alpha cm rom. I can get to any website just fine. Using the stock cm browser. I even installed cm on another device. It still works.
Sent from my SGH-T989 using xda premium
I just had an issue with this for the first time a day ago.
Using opera, I tried to visit my bank and kept getting blocked/redirected to a wifi tethering uosell page. Also, tethering stopped working.
Rebooted, opera is working again, but no wireless or usb tethering.
Sent from my SGH-T989 using Tapatalk
Genesis3 said:
No no you're missing the point.
Click to expand...
Click to collapse
Actually I do understand the need to prevent unauthorized tethering. My comment was pointed directly at the censoring of specific websites which appears to be happening to the OP. TMO has the right to block unauthorized tethering but to wall off specific sites is an entirely different animal. Sorry I wasn't clear in my original reply.
Cheers
When doing about:debug in the stock browser on 2.3.6, I couldn't even find the setting to change the UA string. I think they removed it?
v8dreaming said:
When doing about:debug in the stock browser on 2.3.6, I couldn't even find the setting to change the UA string. I think they removed it?
Click to expand...
Click to collapse
It is about:useragent in Samsung phones.
Sent from my SGH-T989 using xda premium
Eh this is lame. T-Mobile is doing some really lame things now.
Can someone tell me how to replicate this? I am on a custom ROM and can browse Cyanogenmod.com website just fine.
I use Opera Mobile and Firefox Mobile with desktop user agent strings and have no problems. Then again I haven't tethered in months.
To those that think webpages are being censored you're misunderstanding; when you browse on a mobile device there is a little bit of code that tells the webpage what kind of device you're on and what software its running. This is called a user agent. Tmobile has started blocking devices on custom software (read roms) from accessing the web at all. This will only happen on roms that have had the user agent modified for example cyanogenmod.
It is not a censorship issue its a net neutrality issue.
Sent from my Hercules with xda Premium.
that doesn't sound likely at ALL.. it sounds more like a glitch than anything else.
Hi all
I have purchased a windows Rt and love it. The only thing I can't figure out is I can't access my dvr cameras though internet explorer on my device through my ip address and port number. I can view it on my desktop pc.
Is there any app or way I can view my dvr host on windows rt??
steve.zdravko said:
Hi all
I have purchased a windows Rt and love it. The only thing I can't figure out is I can't access my dvr cameras though internet explorer on my device through my ip address and port number. I can view it on my desktop pc.
Is there any app or way I can view my dvr host on windows rt??
Click to expand...
Click to collapse
BUMP
How is the DVR content presented? If it's HTML(5), that should be no problem at all, so it's probably not. The next most likely is Flash, which RT supports but which may not work when specifying an IP address. You could try using the registry tweak that was previously required for Flash on unknown sites (see the EnableFlash script in my signature). If it's a Java applet, you're screwed (in more ways than one; if you've had the Java browser plugin enabled on your home PC for the last few months, there's an excellent chance that your machine has been infected through it; that thing has atrocious security bugs). If it's some other third-party plugin, for example an ActiveX control from the DVR manufacturer, it's probably not going to work on RT just because RT run on ARM chips and typical ActiveX controls are compiled for x86 (it's possible to make ARM ActiveX, but nobody does and you'd need to "jailbreak" the device before installing the plugin anyhow).
GoodDayToDie said:
How is the DVR content presented? If it's HTML(5), that should be no problem at all, so it's probably not. The next most likely is Flash, which RT supports but which may not work when specifying an IP address. You could try using the registry tweak that was previously required for Flash on unknown sites (see the EnableFlash script in my signature). If it's a Java applet, you're screwed (in more ways than one; if you've had the Java browser plugin enabled on your home PC for the last few months, there's an excellent chance that your machine has been infected through it; that thing has atrocious security bugs). If it's some other third-party plugin, for example an ActiveX control from the DVR manufacturer, it's probably not going to work on RT just because RT run on ARM chips and typical ActiveX controls are compiled for x86 (it's possible to make ARM ActiveX, but nobody does and you'd need to "jailbreak" the device before installing the plugin anyhow).
Click to expand...
Click to collapse
The DVR is set up with its own ip and port forwarding number, and that how I connect to it from other desktop PC's. Or it gives me an option to view it through a program called CMS lite which the Win RT doesn't allow me the download. I have jailbroken my RT as well.
What happens when you connect to that IP and port on your RT device? What do you see in the browser (if anything)? Does it connect, or does it say it couldn't find the site? You haven't actually explained the problem very well at all, even to the point of saying what device it is. We probably don't have your exact setup at home, so you'll need to be very precise describing it so that we know how to fix it.
You also didn't answer my question in the previous post. How is the content normally presented? Flash or HTML5 should be fine, but *might* take some tweaking. Java or a plugin are unlikely to work, although I suppose it's possible that the x86 emulator could be made to work with a plugin.
For that matter, have you tried the x86 emulator with your CMS Lite program? It's unlikely to work, but worth a shot.
GoodDayToDie said:
What happens when you connect to that IP and port on your RT device? What do you see in the browser (if anything)? Does it connect, or does it say it couldn't find the site? You haven't actually explained the problem very well at all, even to the point of saying what device it is. We probably don't have your exact setup at home, so you'll need to be very precise describing it so that we know how to fix it.
You also didn't answer my question in the previous post. How is the content normally presented? Flash or HTML5 should be fine, but *might* take some tweaking. Java or a plugin are unlikely to work, although I suppose it's possible that the x86 emulator could be made to work with a plugin.
For that matter, have you tried the x86 emulator with your CMS Lite program? It's unlikely to work, but worth a shot.
Click to expand...
Click to collapse
my device is a windows rt surface. when I open internet explorer and type in my ip and port number in the search engine it comes up with my login and password which I type in. after that the screen comes to a blank white screen which gives me the option. Webserver or CMS lite setup I always view them from webserver. Once I click webserver the screen just says on a blank white screen.
as for how the content present normally im not really sure.
A simple way to tell is to load the page in a desktop browser where it works, then right-click the video and see what menu comes up. If it's the Flashplayer menu, that's something that RT can handle. If it's something else (Silverlight or Java or a custom ActiveX), that may not be possible. Another way to tell would be to save that blank page to a file (I believe Ctrl+S works for this, at least on the desktop mode of IE, or you can do it from the Tools->File menu, or the File menu on the menu bar that is shown when you tap Alt). Send or post the HTML somewhere that we can read it, and we can tell you what it will take to view the page.
another question.. im still new to the windows rt group I have jail broken the RT surface. Is there any torrent client for downloads.
I wanna download movies from a website. thanks
Free Download Manager (it is in the ported apps thread) can be used as a torrent client. However discussion of piracy is prohibited so might want to zip it on the movies part.
Monotorrent was attempted on RT but I think ended up being buggy.
SixSixSevenSeven said:
Free Download Manager (it is in the ported apps thread) can be used as a torrent client. However discussion of piracy is prohibited so might want to zip it on the movies part.
Monotorrent was attempted on RT but I think ended up being buggy.
Click to expand...
Click to collapse
can u please send me the link
Read the forum rules, especially the first one. Then, read my signature. I don't mind helping people find obscure stuff, but this does not qualify. Please put forth at least a little effort on your own part...
I shouldn't have to share a link having told you where it is. Its easy to find, a) its in the list of ported applications in the RT development and hacking section. b) it has its own thread in that same section. c) it is listed on google. d) it is listed on forum search.
Hi all,
Since I was unable to find a thread or stickey (which are the same actually) to report some website issues I encouter I decided to create this thread.
(perhaps it will be closed and perhaps it will stay open).
In here you can post any website related issues. Is a page not opening, is a link not working? Sometimes even specific browsers will give problems.
Post it here and perhaps the staff will take a look
What kind of information do you need to tell before we (users and staff) can help:
- What page were you visiting or trying to visit (Give the url = website link)
- What Internet Browser were you using and wich version (Internet Explorer, FireFox, Opera, Google Chrome, Safari)
- What is the operating system your computer or laptop is running on?( Windows 8/7/XP/Vista Mac OS (Give version) )
- What are the stepps you tried yourself? (cleaned cache of webbrowser, rebooted computer etc)
- What kind of Anti Virus software or Firewall are you using (Avast!, AVG, Windows Security Essentials etc)
- If possible give us a screenshot of the problem or error you encounter
This kind of information will help us help you with the problem. Perhaps the cause can be find in there.
For tablet users:
Even visiting this website can give sometimes issues please provide the following details:
- What kind of tablet are you using (Samsung Note, iPad, Nexus 10)
- What kind of OS is running on your tablet (Android 3.x / 4.x or iOS (version number will come in handy)
- What browser were you using ( Google Chrome, Dolpin Brower, Opera (for android devices) or safari (iOS users)
- What kind of steps you tried to fix it yourself? (delete cache and data of the app, reboot device, fixed permissions)
- If possible give is a screenshot of the problem or error
If you encounter any issues please post them here. We'd love to help you
For SPAM USERS go here: http://forum.xda-developers.com/showthread.php?t=306366
For Tapatalk or XDA APP ISSUES go here:http://forum.xda-developers.com/showthread.php?t=841646
For Operator logo's and country flag issues go here: http://forum.xda-developers.com/showthread.php?t=650541
For reporting intusive ads go here: http://forum.xda-developers.com/showthread.php?t=1696660
(In a minute my first issue will be posted here)
Regards,
Mrjraider
So my first issue I encounter was like this:
Tablet: Ipad 3rd generation running iOS 6
Browser used: Safari
Website I tried to visit: www.forum.xda-developers.com/index.php
Problem: Website stays blank and empty. However on my computer (Win 7 Google Chrome no issues)
Any tips?
Performed selfsteps:
- Reboot device (multiple times)
- Deleted date of safari
All the other websits of forum.xda-developers.com seems to work without issues. I've made several posts today with my iPad
(yeah I know this is more of a android website)
Can anybody show me how to name url links??
My phone details :
Rom : carbonrom stable v1.8
Kernel : dorimanx v9.36
Governor : nightmare
No OC or UV
Battery : stock 1650mah
Sent from i9100
budsixz said:
Can anybody show me how to name url links??
My phone details :
Rom : carbonrom stable v1.8
Kernel : dorimanx v9.36
Governor : nightmare
No OC or UV
Battery : stock 1650mah
Sent from i9100
Click to expand...
Click to collapse
[URL=http://www.google.com]Write anything here to name your URL[/URL]
It will appear like this :
Write anything here to name your URL
recent changes causing continuous refresh of page
I use Firefox 22.0. I have NoScript installed.
About a week ago, whenever I come to XDA, my page refreshes continuously. I have to hit the "stop" button at just the right moment to get the loop to stop long enough for me to read anything.
I tried temporarily allowing all scripts on this page. This did not change the behavior.
P.S. This only happens if I am logged in. If I log out, behavior returns to normal...
mrjraider said:
Hi all,
Since I was unable to find a thread or stickey (which are the same actually) to report some website issues I encouter I decided to create this thread.
(perhaps it will be closed and perhaps it will stay open).
In here you can post any website related issues. Is a page not opening, is a link not working? Sometimes even specific browsers will give problems.
Post it here and perhaps the staff will take a look
What kind of information do you need to tell before we (users and staff) can help:
- What page were you visiting or trying to visit (Give the url = website link)
- What Internet Browser were you using and wich version (Internet Explorer, FireFox, Opera, Google Chrome, Safari)
- What is the operating system your computer or laptop is running on?( Windows 8/7/XP/Vista Mac OS (Give version) )
- What are the stepps you tried yourself? (cleaned cache of webbrowser, rebooted computer etc)
- What kind of Anti Virus software or Firewall are you using (Avast!, AVG, Windows Security Essentials etc)
- If possible give us a screenshot of the problem or error you encounter
This kind of information will help us help you with the problem. Perhaps the cause can be find in there.
For tablet users:
Even visiting this website can give sometimes issues please provide the following details:
- What kind of tablet are you using (Samsung Note, iPad, Nexus 10)
- What kind of OS is running on your tablet (Android 3.x / 4.x or iOS (version number will come in handy)
- What browser were you using ( Google Chrome, Dolpin Brower, Opera (for android devices) or safari (iOS users)
- What kind of steps you tried to fix it yourself? (delete cache and data of the app, reboot device, fixed permissions)
- If possible give is a screenshot of the problem or error
If you encounter any issues please post them here. We'd love to help you
For SPAM USERS go here: http://forum.xda-developers.com/showthread.php?t=306366
For Tapatalk or XDA APP ISSUES go here:http://forum.xda-developers.com/showthread.php?t=841646
For Operator logo's and country flag issues go here: http://forum.xda-developers.com/showthread.php?t=650541
For reporting intusive ads go here: http://forum.xda-developers.com/showthread.php?t=1696660
(In a minute my first issue will be posted here)
Regards,
Mrjraider
Click to expand...
Click to collapse
RandyB201 said:
I use Firefox 22.0. I have NoScript installed.
About a week ago, whenever I come to XDA, my page refreshes continuously. I have to hit the "stop" button at just the right moment to get the loop to stop long enough for me to read anything.
I tried temporarily allowing all scripts on this page. This did not change the behavior.
P.S. This only happens if I am logged in. If I log out, behavior returns to normal...
Click to expand...
Click to collapse
I have also been having this issue, both on Chrome 29 for Windows, and Chrome 29 for Android on my Note 2.
Other threads reporting same issue:
http://forum.xda-developers.com/showthread.php?t=2197302
http://forum.xda-developers.com/showthread.php?t=2404881
http://forum.xda-developers.com/showthread.php?t=2391978
http://forum.xda-developers.com/showthread.php?t=2391690
http://forum.xda-developers.com/showthread.php?t=1766646
http://forum.xda-developers.com/showthread.php?t=2367598
http://forum.xda-developers.com/showthread.php?t=2418022
http://forum.xda-developers.com/showthread.php?t=2239777
Le bump..
Now we need to collect more issues and perhaps fixes
Restarting Firefox 23.0.1 in safe mode stops the looping, but all of the Search for Your Device and QuickLinks drop downs from the menu open behind the ad at the top of the page.
no issues
RandyB201 said:
Other threads reporting same issue:
http://forum.xda-developers.com/showthread.php?t=2197302
http://forum.xda-developers.com/showthread.php?t=2404881
http://forum.xda-developers.com/showthread.php?t=2391978
http://forum.xda-developers.com/showthread.php?t=2391690
http://forum.xda-developers.com/showthread.php?t=1766646
http://forum.xda-developers.com/showthread.php?t=2367598
http://forum.xda-developers.com/showthread.php?t=2418022
http://forum.xda-developers.com/showthread.php?t=2239777
Click to expand...
Click to collapse
I would love to be able to fix this issue, but I can not recreate this problem so I can't push a fix. Any web developers seeing the reloading problem who can point out the issue?
The only thing I can figure out is that it seems to happen to people with NoScript or AdBlock installed, but I've run the site with both and it doesn't happen to me (in multiple browsers/os). But then again, some people say they don't have it installed and it still does the reloading.
Changing to the 2013 - 1024 theme seems to fix it for folks.
I use an Adblock and I have no issues with the website in that matter. The only thing I encounter at the moment is that I need to login on every page. It seems like I can't be remembered for some reason. Will clear cache tomorrow tho.
mrjraider said:
I use an Adblock and I have no issues with the website in that matter. The only thing I encounter at the moment is that I need to login on every page. It seems like I can't be remembered for some reason. Will clear cache tomorrow tho.
Click to expand...
Click to collapse
That's a Chrome issue. I don't have to login every time I go to a new thread but it asks me to login every few hours. Loads of people have reported the issue but afaik there's no known fix other than using a different browser.
I even get logged out on Opera Mini, though I get logged in after clicking on any link on forum, so I don't think it's only Chrome issue
Good Answer!
bitpushr said:
...Changing to the 2013 - 1024 theme seems to fix it for folks.
Click to expand...
Click to collapse
Thank you. That seems to have worked for me. I changed to the theme, have closed and reopened the browser, logged in and out and it seems to have stopped....
bitpushr said:
I would love to be able to fix this issue, but I can not recreate this problem so I can't push a fix. Any web developers seeing the reloading problem who can point out the issue?
The only thing I can figure out is that it seems to happen to people with NoScript or AdBlock installed, but I've run the site with both and it doesn't happen to me (in multiple browsers/os). But then again, some people say they don't have it installed and it still does the reloading.
Changing to the 2013 - 1024 theme seems to fix it for folks.
Click to expand...
Click to collapse
And XDA is crashing my Chrome desktop browser again...
It always happens when trying to load the ads. I'm running a new computer with windows 8.1. No browser extensions.
For such a tech-oriented site, this is kind of sad. You really need to reign in your advertisers. It's been 2+ years of these issues.
jamus28 said:
And XDA is crashing my Chrome desktop browser again...
It always happens when trying to load the ads. I'm running a new computer with windows 8.1. No browser extensions.
For such a tech-oriented site, this is kind of sad. You really need to reign in your advertisers. It's been 2+ years of these issues.
Click to expand...
Click to collapse
This has nothing to do with the original issue. Ads should not be able to crash the browser. I've had them get very slow, we try to weed out any advertisements that are unduly taxing to system resources. We don't pick which ads run on the site. If you are still having issues, you can open a new thread with a full description of the problem. It doesn't sound like it would just be XDA if your computer is crashing.
Closing thread for now as original issue is fixed.