NoOp wrote:
On 10/03/2013 12:52 PM, Paul B. Gallagher wrote:
NoOp wrote:
User agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101
Firefox/24.0 SeaMonkey/2.21
Today when I went to <http://news.yahoo.com/> I noticed that the site
picked up my geo location (accurately BTW).
Unfortunately this should _not_ have happened as at the time I had:
1. About:config: geo.enable=false (this should turn off geolocation)
2. Permissions: Share Location=always ask (with geolocation on, I should
receive a prompt asking if I want to let the site use geolocation)
So I set Permissions: Share Location=Block, cleared cache (memory &
disk/all), cleared with 'Clear Private Data - all except passwords),
opened new browser window & again tried news.yahoo.com. Again the site
is showing my geolocation.
I next went to <http://browserspy.dk/> scrolled down & clicked on
Geolocation & sure enough, geolocation is _enabled_.
I can't locate an open bug of this type on:
<https://bugzilla.mozilla.org/buglist.cgi?quicksearch=geolocation>
So before I open a bug report, can anyone else verify?
It guessed my location pretty accurately too (the next town over), but
based on the guess I'm thinking it looked up my IP address and went from
there. I've seen the same thing on google.com and weather.com, which
routinely guess nearby towns instead of my own. For their purposes,
close enough.
Thanks for checking. Do you have about:config geo.enable=false ?
Just turned it off, cleared cached and cookies, and revisited the yahoo
site. It guessed the same nearby town. Then I visited browserspy and
chose Geolocation, and it also used my IP address to guess my zip code.
Among other things, it said:
Geolocation supported in browser? Yes
...
Geolocation Based Map [blank]
Geolocation Debug Console Document ready
Browser is compatible
Loading the map... done
If so, then I'll file a bug report as I consider this to be a bug &
potential security issue.
<http://www.seamonkey-project.org/doc/2.0/geolocation>
<quote>
How do I turn off Location-Aware Browsing permanently?
Location-Aware Browsing is always opt-in in SeaMonkey 2.0. No location
information is ever sent without your permission. If you wish to disable
the feature completely, please follow this set of steps:
In the URL bar, type about:config
Type geo.enabled
Double click on the geo.enabled preference
Location-Aware Browsing is now disabled
</quote>
Even if the browser sends no specific location info, it must send the IP
address, and that's nearly as good.
--
War doesn't determine who's right, just who's left.
--
Paul B. Gallagher
_______________________________________________
support-seamonkey mailing list
[email protected]
https://lists.mozilla.org/listinfo/support-seamonkey
