PDA

View Full Version : Spybot 1.5 beta, Immunize v2 and Opera's cookies...



GT500
2007-07-12, 19:42
I'm using the July 11th beta of Spybot 1.5 and I'm using Opera 9.22. When I Immunize using Spybot's new Immunize function, Opera no longer remembers my usernames and passwords for the various sites I visit (my own forums, my own blog, the My Opera Community Forums/Blogs, etc).

While this is not a terrible issue, it's is a bit confusing, and I just wanted to make sure that it wasn't an unexpected behavior.

GT500
2007-07-13, 06:51
Oddly enough it seems to be OK now. I'm staying logged into the various sites I visit regularly...

Anyway, I'll post back with some more info on specific Opera builds and platforms and such when my anti-histamine starts working...

PepiMK
2007-07-13, 10:27
I've been testing this with Opera 9.21 (build 8776, Win32) mostly. But the files we work with shouldn't have to do with account settings imho; hmmm... I have the suspicion that cookies4.dat is used for more than just cookies ;) , but handling of that file is not new, but has been in use for years now (Opera cookie detection is in 1.4 already).

Let me look up if there were any similar reports by mail, and install 9.22 as well, to check it :)

GT500
2007-07-13, 18:13
Opera has issues when processing it's cookies. I've noticed that sometimes they don't all show up in the cookies list, and when you remove some of the cookies (especially when you remove a large number of them) some of the ones that were deleted will still be there.

Last night I could not replicate the issue in Vista in Opera 9.22 build 8800 (at least I think I have 8800 on Vista). Right now the machine is booted from BartPE running JkDefrag, so it's going to be occupied for some time (the Windows XP partition was incredibly fragmented).

GT500
2007-07-14, 05:18
I've figured out what happened.

When I use Spybot's Immunize function, it deletes all of Opera's existing cookies.

It appears that the effect goes no farther than being required to log back into all of the web sites where a cookie was allowing automatic login.

Oddly enough, when I started checking Opera's cookies, they were all gone. I'm not sure if this is because I had deleted them all, or because Opera had expunged it's cookies due to incompatible entries. I'll do some more tests here, and add the results to this post.

Edit: Apparently Opera is saving it's cookies in a format that Spybot doesn't understand. The reason they were deleted earlier must have been my fault (I don't remember much about what I did last night due to allergy issues), but even when the cookies are not getting deleting Spybot does not see the entries it made after Opera has parsed and re-saved it's cookies file.

BTW: All of this is being done on Windows Vista x64 with Opera 9.22 weekly build 8800. This build should be released in a couple of weeks, and the weeklies are very mature. If you want to test with them, then check out the Opera Desktop Team blog (http://my.opera.com/desktopteam/blog/) for downloads and other info. ;)

PepiMK
2007-07-15, 13:26
Hmmm... the cookie file is not an easy one, that's true. Cookies are not stored one by one, but in a tree built based on the domain. e.g.

* com
** spybot
*** forums
**** Cookie: username
*** www
**** Cookie: language
** badsite
*** Filter: block

Do you remember if it has worked with 1.4? Because I never heard any complaint about Opera cookies in 1.4 (Spybot-S&D was able to remove single Opera cookies there).

I'm going to create some before/after files and compare them :)

GT500
2007-07-16, 08:05
No, I don't remember any issues with Opera 9.22 and Spybot 1.4.

If I have some free time tomorrow, I'll do some more testing. I'll test Spybot 1.4 against Opera 9.22 build 8800, and I'll test Spybot 1.5 against the current final build of Opera 9.21, and I'll do it in both Windows XP x64 and Vista x64.

PepiMK
2007-07-16, 16:19
The blog you linked to is currently "experiencing technical difficulties", so I couldn't download there. I tried the following steps with 9.21:


Deleted cookies4.dat (for a clean test environment)
Started Opera, stored password for two sites, closed Opera
Immunized
Started Opera, checked sites (wand worked), closed Opera
Unimmunized
Started Opera, checked sites (wand worked), closed Opera
Immunized
Started Opera, checked sites (wand worked)Ah, wait, I found build 8800 at Betanews (http://fileforum.betanews.com/detail/Opera_for_Windows/945720329/1) and will try the same steps there :)

GT500
2007-07-16, 19:37
Direct download via this link (http://snapshot.opera.com/windows/o922w_8800m.exe) (that's the MSI installer, classic installer is here (http://snapshot.opera.com/windows/o922w_8800.exe)).

Anyway, the issue I was having did not affect the wand. It was just automatic logins stored in cookies.

Whenever I go to a forum (especially the My Opera Community Forums (http://my.opera.com/cummunity/forums/)) I have it set to log me in automatically. When Spybot 1.5 immunizes Opera's cookies, the cookies that were storing those auto-login passwords/session data/whatever are gone.

The other issue (which I'm sure you'll notice right away with 9.22) was that, after immunizing and then running Opera, Spybot no longer recognized the data it had written in Opera's cookies file, even though Opera's cookies manager showed it was still there.

I may have to go troubleshoot a mouse issue, so I'm going to try to get some more thorough tests done before I have to go. We'll see if I have enough time. ;)

GT500
2007-07-16, 20:09
OK, I just finished testing Spybot 1.5 with Opera 9.21 build 8776 on Vista x64. I had deleted everything related to Opera before installing (program directory, profile directory, etc) to ensure a clean install. Here's what I found out:

Spybot's immunize writes the cookies in a format that Opera understands and it is not damaging the cookies that were already there.

Opera saves it's cookies file in a way that confuses Spybot's immunize function, and Spybot no longer sees all of the entries it added, even though Opera shows they are still there.

Now I do a clean install of 9.22 build 8800 to see if I get the same results, or if Spybot still damages Opera's cookies when it writes it's immunize data...

GT500
2007-07-16, 20:23
OK, my tests with a clean install of Opera 9.22 build 8800 and Spybot 1.5 are finished. I had the same results as I did with 9.21.

I'm not sure why I was getting my cookies deleted earlier. Maybe it was just the amount of cookies that was the issue. I'll do more testing. Edit: It is caused by the amount of cookies you have. I logged into about 5 or 6 different sites/forums/etc and only then did Spybot damage my existing cookies. ;)

Anyway, Spybot is having an issue in Opera 9.21 and Opera 9.22 with reading the cookie data after Opera has saved it. It's possible that Spybot saves the cookies file in a format that Opera doesn't like, and when Opera restructures it, Spybot can no longer understand the data it had added.

I guess I could take a look at the structure of the cookies file, and see if I can figure out what's going on.

PepiMK
2007-07-16, 21:27
Might be I found a lead :)

First immunization on a clean file works well.
Following unimmunization on that file works well (though bad cookies are still listed? Hmmm).
Second immunization attempt looses standard cookies...

project manager entry (http://forums.spybot.info/project.php?issueid=16)

GT500
2007-07-16, 23:03
First immunization on a clean file works well.

Yes.


Following unimmunization on that file works well (though bad cookies are still listed? Hmmm).

I didn't try 'unimmunize'. I don't imagine it would work though, as Spybot cannot read it's own entries in Opera's cookies file after Opera has parsed the file.


Second immunization attempt looses standard cookies...

That only appears to happen when you have more than 4 or 5 cookies (and is not limited to the second time you immunize). Granted it's easy to get far more than that in a short amount of time... ;)

PepiMK
2007-07-17, 15:12
You were right about the file format :-)

The content filter fields (filter, match, etc.) have been updated, they now are able to store more data. The official documentation (http://www.opera.com/docs/fileformats/#cookies) still lists them as 1 byte in size (int8), they're in32 (4 byte) now though. That way, reading the cookie file stops as soon as an entry that includes filter tags is encountered (so the order of the cookies was important as wlel).

GT500
2007-07-17, 18:17
Unfortunately, the documentation does not get updated as often as it should.

It's good to hear that you're figuring out what's going on. I can't get Opera File Explorer to run in any of my 64-bit versions of Windows, so I can't really help...

ei4ia
2007-07-21, 11:18
Hi, and thanks for your work :)
After 36 hours expierence with Spybot just two questions, both about immunization & Opera:
1. In 'Permanent Opera immunity' shown profiles, but I don't use Opera profiles (means I don't have Opera folder in 'Documents and Settings', only 'profile' folder in ProgFiles/Opera), so am I immunized?

2. String '42 plugins blocked. 0 unblocked' (Permanent Opera immunity->Status) what about? I don't saw any changes browsing or in cookies.

Thanks again and sorry about my english :alien:

P.S. WinXP SP2 32bit; Opera 9.22 final (8801)

ei4ia
2007-07-21, 11:20
double post, sorry ;)

PepiMK
2007-07-22, 15:06
That sounds VERY much like Spybot-S&D 1.4, and NOT like the tool this thread is about, nor the current 1.5 beta.
I suggest you try one of those (the stand-alone demo, or the 1.5 beta) ;)

ei4ia
2007-07-22, 18:37
Yes it was 1.4 with updated exe 1.5 beta :) OK, now installed full 1.5 beta package. No more questions so far, thanks.

GT500
2007-08-24, 05:15
I've finally updated to the new RC1, and this issue does seem to be mostly fixed. Immunizing Opera against cookies with Spybot still causes an issue in Opera's cookies file, and all of the cookies that were there appear to be invalid after the immunization. Oddly, this only happens if you have enough cookies, and it is not reproducible if you only have a few cookies (I tested after logging into about 6 different forums).

BTW: Good work on the new RC1. I like the direction that Spybot 1.5 is going in. ;)