On 10/03/2013 03:08 PM, Paul B. Gallagher wrote: > NoOp wrote: >> On 10/03/2013 12:52 PM, Paul B. Gallagher wrote: >>> NoOp wrote: >>>> User agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 >>>> Firefox/24.0 SeaMonkey/2.21 >>>> >>>> Today when I went to <http://news.yahoo.com/> I noticed that the site >>>> picked up my geo location (accurately BTW). >>>> >>>> Unfortunately this should _not_ have happened as at the time I had: >>>> 1. About:config: geo.enable=false (this should turn off geolocation) >>>> 2. Permissions: Share Location=always ask (with geolocation on, I should >>>> receive a prompt asking if I want to let the site use geolocation) >>>> >>>> So I set Permissions: Share Location=Block, cleared cache (memory & >>>> disk/all), cleared with 'Clear Private Data - all except passwords), >>>> opened new browser window & again tried news.yahoo.com. Again the site >>>> is showing my geolocation. >>>> >>>> I next went to <http://browserspy.dk/> scrolled down & clicked on >>>> Geolocation & sure enough, geolocation is _enabled_. >>>> >>>> I can't locate an open bug of this type on: >>>> <https://bugzilla.mozilla.org/buglist.cgi?quicksearch=geolocation> >>>> >>>> So before I open a bug report, can anyone else verify? >>> >>> It guessed my location pretty accurately too (the next town over), but >>> based on the guess I'm thinking it looked up my IP address and went from >>> there. I've seen the same thing on google.com and weather.com, which >>> routinely guess nearby towns instead of my own. For their purposes, >>> close enough. >>> >> >> Thanks for checking. Do you have about:config geo.enable=false ? > > Just turned it off, cleared cached and cookies, and revisited the yahoo > site. It guessed the same nearby town. Then I visited browserspy and > chose Geolocation, and it also used my IP address to guess my zip code. > Among other things, it said: > Geolocation supported in browser? Yes > ... > Geolocation Based Map [blank] > Geolocation Debug Console Document ready > Browser is compatible > Loading the map... done > >> If so, then I'll file a bug report as I consider this to be a bug & >> potential security issue. >> >> <http://www.seamonkey-project.org/doc/2.0/geolocation> >> <quote> >> How do I turn off Location-Aware Browsing permanently? >> >> Location-Aware Browsing is always opt-in in SeaMonkey 2.0. No location >> information is ever sent without your permission. If you wish to disable >> the feature completely, please follow this set of steps: >> >> In the URL bar, type about:config >> Type geo.enabled >> Double click on the geo.enabled preference >> Location-Aware Browsing is now disabled >> </quote> > > Even if the browser sends no specific location info, it must send the IP > address, and that's nearly as good. >
Thanks Paul (and Jim). My mistake & misunderstanding of geolocation. I was mistaking the weather info etc as geolocation, but of course those are simply from the IP. As Jim pointed out, when a site want's to use geolocation & geo.enabled=true, you do get a geo popup. I did the same on Google Maps by setting to 'true' and then asking for directions with 'My Location'. And of course I get the geo popup. Sorry for the noise. _______________________________________________ support-seamonkey mailing list [email protected] https://lists.mozilla.org/listinfo/support-seamonkey
