Dynamic UI Shell & Security Issue - FYI

Hi
In Jdeveloper 11.1.1.4.0 when granting security to a role for the Dynamic UI Shell you could encounter the following issue.
On the Resource Grants tab, select Resource Type = "Web Page" & ensure that "Show task flows imported from ADF libraries" is selected. The "dynamicTabShellDefinition" is available to grant access to a role.
Change the Resource Type = "Task Flow". The blank task flow from the imported library should be visible in the Resource column, but is not.
Running the page containing the UI Shell template will result in a Authorization error.
To solve add the following code to the jazn-data.xml file within the tags of the role that you are granting access to the task flow;
+<permission>+
+<class>oracle.adf.controller.security.TaskFlowPermission</class>+
+<name>/WEB-INF/oracle/ui/pattern/dynamicShell/infra/blank.xml#blank</name>+
+<actions>view</actions>+
+</permission>+
I have tested this in version 11.1.2.0* and the task flow is shown in the Resource column of the wizard.
Regards.
Leon.

Thanks a lot..
Useful information

Similar Messages

Dynamic List and Security Issue

Hi
I have a Dynamic List Wizard for orders, which the user can click on edit to edit or modify the order and if the user choose "Yes" to submit ( the order form has a submit filed which has Yes / No Values)then the EDIT button disappear and the user has no more control on the record(using show if conditional Region server behavior).
- Now i noticed that when i click on the edit the address bar includes the (www.mysite.com/form.php?order_id=1) now say the order Number 2 is already submitted (still on the list but no Edit button for it) if i write 3 or 4 or any other number instead of 1 at the address bar (www.mysite.com/form.php?order_id=3) the record which has the order number 3 displays on the screen and then you can edit it and when click update the Edit Button becomes Active which destroy the whole concept.
so, how to fix that?

Hi Lorie,
Taking it a step further
interesting that you´re mentioning this -- because I was just in the middle of finding a workaround for the very same issue ;-)
I actually did find a pretty easy solution, which basically goes like this:
1) wrap the whole table *plus* any possibly added hidden fields located below this table in a "Show IF conditional region" behaviour -- but make sure to *not* include the buttons within the "KT_bottombuttons" div in here.
2) as I assume that your "supplier_name" column holds a numeric value which equals the user´s "kt_login_id" Session Variable (which it should !), define the following conditions for the "Show IF conditional region" behaviour:
Expression 1: choose "supplier_name" from the tNG recordset
Condition: ==
Expression 2: choose Session -> kt_login_id
3) tick the Has ELSE option
4) confirm with OK
5) replace the default "has Else" message with something meaningful like "you can´t edit this record !"
Switching to Code view and navigating to the very start of your "Show IF conditional region" should display something like this:
if (@$row_rsqueryname['supplier_name'] == @$_SESSION['kt_login_id']) {
When viewing the modified Dynamic Form in a browser, you´ll note that this solution will indeed display the form instances for all "authorized" records, whereas those form instances which don´t match the required credentials will be replaced with that "has else" message.
BUT !! This solution has one major drawback which I haven´t been able to resolve yet :: when the Dynamic Form goes into Insert Record mode
(means when you click the "add new" link in the Dynamic List), all inner form instances will display that "has else" message.
The only workaround I currently can come up with is to have the List´s "add new" link point to a separate "add_new.php" page that´s going to insert a single record.
Cheers,
Günter Schenk
Adobe Community Expert, Dreamweaver

Dynamic Tabs Shell : issue with taskflows using pages

Hi,
We use the Dynamic tabs shell page template in our application.
It works fine when used with taskflows with page fragments.
However it errors when trying to render a taskflow with pages instead of fragments as:
<FormRenderer><encodeAll> Multiple forms detected on viewId: /starter. Rich client currently has some limitations in dealing with multiple forms.
<Jul 27, 2010 9:42:23 PM IST> <Error> <HTTP> <BEA-101020> <[ServletContext@32152418[app:calcmgr module:calcmgr path:/calcmgr spec-version:2.5]] Servlet failed with Exception
java.lang.NullPointerException
     at oracle.adfinternal.view.faces.renderkit.rich.FormRenderer.encodeAll(FormRenderer.java:233)
     at oracle.adf.view.rich.render.RichRenderer.encodeAll(RichRenderer.java:1369)
     at org.apache.myfaces.trinidad.render.CoreRenderer.encodeEnd(CoreRenderer.java:335)
     at org.apache.myfaces.trinidad.component.UIXComponentBase.encodeEnd(UIXComponentBase.java:765)
     at org.apache.myfaces.trinidad.render.CoreRenderer.encodeChild(CoreRenderer.java:415)
     at oracle.adf.view.rich.render.RichRenderer.encodeChild(RichRenderer.java:2567)
     at org.apache.myfaces.trinidad.render.CoreRenderer.encodeAllChildren(CoreRenderer.java:432)
     at oracle.adfinternal.view.faces.renderkit.rich.DocumentRenderer.encodeAll(DocumentRenderer.java:1071)
     at oracle.adf.view.rich.render.RichRenderer.encodeAll(RichRenderer.java:1369)
     at org.apache.myfaces.trinidad.render.CoreRenderer.encodeEnd(CoreRenderer.java:335)
     at org.apache.myfaces.trinidad.component.UIXComponentBase.encodeEnd(UIXComponentBase.java:765)
     at org.apache.myfaces.trinidad.component.UIXComponentBase.__encodeRecursive(UIXComponentBase.java:1515)
     at org.apache.myfaces.trinidad.component.UIXComponentBase.encodeAll(UIXComponentBase.java:785)
     at javax.faces.component.UIComponent.encodeAll(UIComponent.java:942)
     at com.sun.faces.application.ViewHandlerImpl.doRenderView(ViewHandlerImpl.java:271)
     at com.sun.faces.application.ViewHandlerImpl.renderView(ViewHandlerImpl.java:202)
     at javax.faces.application.ViewHandlerWrapper.renderView(ViewHandlerWrapper.java:189)
     at org.apache.myfaces.trinidadinternal.application.ViewHandlerImpl.renderView(ViewHandlerImpl.java:193)
     at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl._renderResponse(LifecycleImpl.java:710)
     at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl._executePhase(LifecycleImpl.java:273)
     at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.render(LifecycleImpl.java:205)
     at javax.faces.webapp.FacesServlet.service(FacesServlet.java:266)
     at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
     at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
     at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:300)
     at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
     at oracle.adf.model.servlet.ADFBindingFilter.doFilter(ADFBindingFilter.java:191)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
     at oracle.adfinternal.view.faces.webapp.rich.RegistrationFilter.doFilter(RegistrationFilter.java:97)
     at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:420)
     at oracle.adfinternal.view.faces.activedata.AdsFilter.doFilter(AdsFilter.java:60)
     at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:420)
     at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl._doFilterImpl(TrinidadFilterImpl.java:247)
     at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl.doFilter(TrinidadFilterImpl.java:157)
     at org.apache.myfaces.trinidad.webapp.TrinidadFilter.doFilter(TrinidadFilter.java:92)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
     at oracle.adf.library.webapp.LibraryFilter.doFilter(LibraryFilter.java:159)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
     at oracle.dms.wls.DMSServletFilter.doFilter(DMSServletFilter.java:330)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
     at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.doIt(WebAppServletContext.java:3684)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3650)
     at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
     at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
     at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2268)
     at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2174)
     at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1446)
     at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
     at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
Is this a known issue or constaint with Dynamic Tabs Shell page template?

Actually I don't think the answer is as clear cut as the dynamic tab shell template (aka. UI Shell) doesn't support task flow with pages, as, we have an application that uses it that calls out to a BTF using pages and it works fine. The catch is that BTF itself doesn't use the UI Shell. So it really depends what you mean.
Can you be more specific what you're attempting to achieve? Are you trying in one page that uses the UI Shell, to embed a BTF in a region where the BTF uses pages rather than page fragments? Or, do you simple want lots of pages in your overall applications unbounded task flow to include the UI Shell template? As Alex has asked, we don't really have information of what you're trying to put in what at this stage.
For the record, the better forum to ask such questions about the dynamic tab shell template is the ADF UI Patterns & Best Practices OTN forum:
ADF UI Patterns & Best Practices
...however given you've started this thread here, you might as well continue.
CM.

Security issue - or not? (remote trigger SMC startup)

Hi,
During installation of a few zones on a Sol10U2 system today, I noticed that simply running an nmap scan on a freshly installed and booted zone would cause the SMC to start:
Starting Solaris Management Console server version 2.1.0.
endpoint created: :898
Adding instance of solaris_providerpath
Adding class Solaris_LocalFileSystem
Adding class Solaris_Directory
Adding class Solaris_Mount
Adding class Solaris_UFS
Adding class Solaris_HSFS
Adding class Solaris_UFSMount
Adding class Solaris_HSFSMount
Adding class Solaris_LocalFSResidesOnExtent
Compilation succeeded.
Adding class Solaris_DiskDrive
Adding class Solaris_DiskPartition
Adding class Solaris_MediaPresent
Adding class Solaris_LogicalDisk
Adding class Solaris_PhysicalMedia
Adding class Solaris_Disk
Adding class Solaris_PhysicalPackage
Adding class Solaris_RealizesExtent
Adding class Solaris_RealizesDiskPartition
Adding class Solaris_RealizesDiskDrive
Adding class Solaris_DiskPartitionBasedOnDisk
Adding class Solaris_DiskPartitionBasedOnFDisk
Adding class Solaris_SCSIController
Adding class Solaris_IDEController
Adding class Solaris_MPXIOController
Adding class Solaris_USBSCSIController
Adding class Solaris_GenericController
Adding class Solaris_SCSIInterface
Adding class Solaris_MPXIOInterface
Adding class Solaris_IDEInterface
Adding class Solaris_ExtraCapacityGroup
Adding class Solaris_MPXIOGroup
Adding class Solaris_ControllerLogicalIdentity
Adding class Solaris_MPXIOCtrlrLogicalIdentity
Adding class Solaris_ControllerComponent
Adding class Solaris_MPXIOComponent
Adding class Solaris_StorageLibrary
Compilation succeeded.
Adding class CIM_ManagedElement
Adding class CIM_SettingData
Adding class CIM_Share
Adding class CIM_FileShare
Adding class CIM_NFSShare
Adding class CIM_SharedElement
Adding class CIM_HostedShare
Compilation succeeded.
Adding class Solaris_NFSShare
Adding class Solaris_NFSShareSecurity
Adding class Solaris_NFS
Adding class Solaris_PersistentShare
Adding class Solaris_MountSetting
Adding class Solaris_NFSMountSetting
Adding class Solaris_ShareSetting
Adding class Solaris_NFSShareSetting
Adding class Solaris_ShareService
Adding class Solaris_MountService
Adding class Solaris_NFSMount
Adding class Solaris_NFSShareSecurityModes
Adding class Solaris_NFSShareDefSecurityMode
Adding class Solaris_HostedShare
Adding class Solaris_PersistentShareConfiguration
Adding class Solaris_PersistentShareForSystem
Adding class Solaris_NFSShareEntry
Adding class Solaris_SharedElement
Adding class Solaris_NFSExport
Adding class Solaris_SharedFileSystem
Compilation succeeded.
Adding instance of solaris_providerpath
Adding instance of solaris_providerpath
Adding class Solaris_VMStateDatabase
Adding class Solaris_VMSoftPartition
Adding class Solaris_VMExtent
Adding class Solaris_VMStripe
Adding class Solaris_VMConcat
Adding class Solaris_VMMirror
Adding class Solaris_VMRaid5
Adding class Solaris_VMTrans
Adding class Solaris_VMHotSparePool
Adding class Solaris_VMDiskSet
Adding class Solaris_VMStorageVolume
Adding class Solaris_VMConcatComponent
Adding class Solaris_VMDriveInDiskSet
Adding class Solaris_VMExtentBasedOn
Adding class Solaris_VMSoftPartComponent
Adding class Solaris_VMExtentInDiskSet
Adding class Solaris_VMHostInDiskSet
Adding class Solaris_VMHotSpareInUse
Adding class Solaris_VMHotSpares
Adding class Solaris_VMMirrorSubmirrors
Adding class Solaris_VMRaid5Component
Adding class Solaris_VMStatistics
Adding class Solaris_VMStripeComponent
Adding class Solaris_VMTransLog
Adding class Solaris_VMTransMaster
Adding class Solaris_VMUsesHotSparePool
Adding class Solaris_VMVolumeBasedOn
Adding class Solaris_DiskIOPerformanceMonitor
Compilation succeeded.
Adding instance of solaris_providerpath
Adding class Solaris_ActiveUser
Adding class Solaris_ActiveProject
Adding class Solaris_ProcessStatisticalInformation
Adding class Solaris_UserProcessAggregateStatisticalInformation
Adding class Solaris_ProjectProcessAggregateStatisticalInformation
Adding class Solaris_ProcessStatistics
Adding class Solaris_ActiveUserProcessAggregateStatistics
Adding class Solaris_ActiveProjectProcessAggregateStatistics
Compilation succeeded.
Registration setup: 8/8 (Executing SUNWpmgr_reg.sh)
Registering components: 64/64 (Registering PatchMgrCli.jar)                 er)
Solaris Management Console server is ready.For interest, the nmap result is:
toby@deepthought ~ $ nmap -v 192.168.1.122
Starting Nmap 4.01 ( http://www.insecure.org/nmap/ ) at 2006-08-29 20:39 EDT
DNS resolution of 1 IPs took 0.23s. Mode: Async [#: 2, OK: 0, NX: 1, DR: 0, SF: 0, TR: 1, CN: 0]
Initiating Connect() Scan against 192.168.1.122 [1672 ports] at 20:39
The Connect() Scan took 44.49s to scan 1672 total ports.
Host 192.168.1.122 appears to be up ... good.
Interesting ports on 192.168.1.122:
(The 1662 ports scanned but not shown below are in state: closed)
PORT     STATE SERVICE
21/tcp   open ftp
22/tcp   open ssh
23/tcp   open telnet
79/tcp   open finger
111/tcp open rpcbind
513/tcp open login
514/tcp open shell
898/tcp open sun-manageconsole
4045/tcp open lockd
7100/tcp open font-service
Nmap finished: 1 IP address (1 host up) scanned in 44.874 seconds(port 7100 is actually a non-standard VNC server which was carried over from the global zone)
Of course, this is immediately before running Solaris Security Toolkit (jass) to apply a secure profile.
Does it matter that this SMC startup can be triggered so easily remotely?

It just struck me odd that simply port-scanning the
machine could produce this behaviour, and I wonder if
it might be a security issue.Probably not directly. Sun has distributed several items in the past that launch via inetd connections (calendar manager and font server were two common ones). Just because it launches doesn't mean it's a security problem. The application itself may require authentication after running.
Of course the resources required by the process may be non-trivial, and the application may have security issues, but the fact that it launches isn't a direct indication of a problem.
Darren

ADF Pgaes with Dynamic Tab Shell not rendering in iPAD 1+

Hi,
We have used Oracle Dynamic Tab Shell templates to build our Dashboard page with multiple dynamic tabs.
One year back when we initially created the main Dashboard with Dynamic Tab Shell and used UIShell API's to open new dynamic tab on click of command links in left hand side navigator. We started with Jdev 11.1.1.3 and we upgrade till Jdev 11.1.1.5.
Now recent requirement is, we need to test our applications in Safari browser within iPAD(2.0). While testing we observed below issues.
1) The JSPX page with Dynamic Tab Shell is keep showing "Loading..." We had to refresh the Safari browser twice to render the page.
2) Any af:commandLink as part of the JSPX which has dynamic tab shell template, not working. We have bunch of links on left navigator and on click of each link will open a new dynamic tab(we use UIShell API) . Nothing happens on click of those af:commandLinks.
3) We have "Home" and "Logout" links on top right corner. Nothing happening on click of those links too.
All these like af:commandLinks and af:commandButtons working as expected when we have them in side a JSPX page w/o dynamic tab shell.
Tested and observed same behavior both in iPAD 1.0 and newer version iPAD 2.0.
We desperately need help on thin. Pls let us know, if i need to provide more details. Is there any specific configurations required to make it work in Jdev 11.1.1.5? At this point we can not upgrade our Env to 11.1.1.6 or 11.1.2 as we already have these Apps in Production and we should give the users flexibility to use it in iPAD.
Please help!!
Thanks!!
Subba.

Hi Jaun,
Thanks your response.
Yes- I have seen the support for iPAD and iOS are more enhanced it in 11.1.1.6 and later versions.
But we already hosted our apps in Production which is currently 11.1.1.5. We have complex workflows designed in SOA suite too.
Now, if we need to upgrade to 11.1.1.6, we need to basically do validate/test all our applications on new release and it cost us. CLient may not approve for upgrade as of now.
Is there any guidance or way for customers like us who are on 11.1.1.5 version, to get the ADF features and support for iPAD or iOS? Kind of backward compatible patches kind of thing?
Do we need to log a SR on ORACLE?
Please suggest!!

Flash 8 security issue

I'm using Flash 8 and in my code i use the XMLSocket.connect
command. When i try to connect to another computer in my LAN i get
a security warning that says that flash stopped an unsafe
operation. When i select "Settings" and add the swf path to the
trusted locations everything works well.
My question is, what if i'm not connected to the internet?
How can i pass this security warning without an intenet connection
to get to the URL in which i add trusted locations?

Unfortunately, that doesn't help me pin it down much. It sounds like we tightened restrictions on a behavior that was previously allowed, which caused them to need to update their content. The web is a dynamic place, and Flash has an obligation to be a good citizen in the larger ecosystem. As new web standards evolve and emerge, it's important that Flash Player is aligned with them to the extent possible. In the same vein, we work closely with partners in industry, academia and government to identify and resolve security issues based on the latest research and intelligence.
While we take backwards compatibility seriously, the security landscape looks very different than it did 5-10 years ago. The security of both end-users and the network is of paramount importance. With the quantity and age of existing Flash content (not all of which is generated by Adobe software), it's incredibly difficult to anticipate whether or not content will break when we change something, particularly if it's esoteric. We operate a public beta program and encourage content providers to participate in order to prevent unexpected outages as the result of changes to Flash Player. The beta can be found at http://www.adobe.com/go/beta/.
If your cable provider needs assistance in resolving the issue, their engineers are more than welcome to reach out to me directly.

Flash Player Security issue

All,
Please note that I've just had a chat discussion with Adobe support because of a security issue in the most recent update of Flash that caused services from several providers to become inaccessible. Does anyone have any information regarding this issue?

Unfortunately, that doesn't help me pin it down much. It sounds like we tightened restrictions on a behavior that was previously allowed, which caused them to need to update their content. The web is a dynamic place, and Flash has an obligation to be a good citizen in the larger ecosystem. As new web standards evolve and emerge, it's important that Flash Player is aligned with them to the extent possible. In the same vein, we work closely with partners in industry, academia and government to identify and resolve security issues based on the latest research and intelligence.
While we take backwards compatibility seriously, the security landscape looks very different than it did 5-10 years ago. The security of both end-users and the network is of paramount importance. With the quantity and age of existing Flash content (not all of which is generated by Adobe software), it's incredibly difficult to anticipate whether or not content will break when we change something, particularly if it's esoteric. We operate a public beta program and encourage content providers to participate in order to prevent unexpected outages as the result of changes to Flash Player. The beta can be found at http://www.adobe.com/go/beta/.
If your cable provider needs assistance in resolving the issue, their engineers are more than welcome to reach out to me directly.

RV042 reports tunnel disconnection without connection for foreign IP, Security issue?

Dear all,
we are recently working with a RV042 router, with VPN group tunnel (connectig throw shrew VPN). Last days router is logging disconnections like this ("[XXX]" text replaced for security reasons)
Dec 9 17:02:58 2014 XXX VPN Log: (grpips0)[72] [XXX].[XXX].[XXX].0/24=== ...113.240.173.58===?: [Tunnel Disconnected] instance with peer 113.240.173.58 {isakmp=#0/ipsec=#0}
But NO RELATED "connections" (apart from our own controled connection/disconnection) is reported previously. Is this a security issue/breach?
(The foreign IP was left clear so if anyone knows about that particular IP, can make a comment.)
Thanks in advance. Regards, Juan.

Zach,
I will try to use that approach while using dynamic IPs to connect to VPN (cannot build an stable whitelist, and this can lead to connection lost in the near future until new IP is registered in the remote router).
What I do not understand is:
router logs a disconnection without a previous connection
no other activity is detected on the VPN (perhaps only spying?)
when I disconnect, two logs are generated (in order of appearance)
Dec [xxx] [xxx]:[xxx]:[xxx] 2014 3EFF-3196 VPN Log: (grpips0)[73] 192.168.2.0/24=== ...[xxx].[xxx].[xxx].[xxx]===?: [Tunnel Disconnected] instance with peer [xxx].[xxx].[xxx].[xxx]{isakmp=#0/ipsec=#0}
Dec [xxx] [xxx]:[xxx]:[xxx]2014 3EFF-3196 VPN Log: (grpips0)[73] [xxx].[xxx].[xxx].0/24=== ...[xxx].[xxx].[xxx].[xxx]===? #220: [Tunnel Established] ISAKMP SA established
when foreign IP disconnects, only one is generated (e.g. whitout #220)
Does this have an explanation?
Thanks again, Juan.

Dynamic Tab Shell Template - Ctrl+P (Browser Print)

We have are using dynamic tab shell template and rendering all our pages. The problem now is, that when the user tries to print the page using the regular browser print button or Ctrl + P, only the background (blue color content area see: http://www.oracle.com/technetwork/developer-tools/adf/uishell-093084.html ) screen gets printed in the entire page and none of the other rendered content prints. Print button does not solve our purpose either. So, it would be great if anyone could provide some pointers on what could be the reason that the rendered content is not printing (even in print preview it displays only the blue content)?
Note: We have already created our default template based on the dynamic tab shell template to get handle to the closeIcon.
Edited by: 119413 on Feb 21, 2013 5:02 PM
Edited by: 119413 on Feb 21, 2013 5:16 PM

Hi,
never had a problem to perform a print screen using the UI Shell (would have noticed if this didn't work). So there must be some condition under which this happens. Can you download and run the sample for this article and try it with this.? Its using JDeveloper 11g R2
http://www.oracle.com/technetwork/issue-archive/2012/12-mar/o22adf-1518265.html
Frank

Can not view slidshows or creat a book on Snapfish. SF IT folks say it's a security issue on my end. Any ideas?

Can not view slidshows or creat a book on Snapfish. SF IT folks say it's a security issue on my end. Any ideas?

You will need to contact Snapfish to find out their system requirements and which plugin you need
- http://support.snapfish.com/app/answers/detail/a_id/669/brand/3

I updated some security issues and suddenlly my gmail does not open. it shows 75% of the procees and does not go on

I updated automatically some security issues in my computer (I don't remember which) and now my gmail will start opening until it reaches 75% and it will not go on opening.
I can open it Internet explorer but not in Mozila fireworks

Clear the cache and the cookies from sites that cause problems.
"Clear the Cache":
*Tools > Options > Advanced > Network > Cached Web Content: "Clear Now"
"Remove Cookies" from sites causing problems:
*Tools > Options > Privacy > Cookies: "Show Cookies"
Start Firefox in <u>[[Safe Mode|Safe Mode]]</u> to check if one of the extensions or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox/Tools > Add-ons > Appearance/Themes).
*Don't make any changes on the Safe mode start window.
*https://support.mozilla.org/kb/Safe+Mode
*https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes

Other web browsers and security issues?

Since even an Apple KB article recognizes the need for an additional browser and because of Safari's limitations and problems, I'm going to try switching to another browser (most likely OmniWeb and am looking at Firefox, Shira and Opera also though perhaps not as a primary browser) but I'm wondering about their ability to keep on top of any security issues for Mac? (and how do you keep up with security updates?)
Though perhaps unfounded, at least with Safari, I feel that Apple has a vested interest in keeping on top of security issues (for Safari and Java) and I can readily find out about security updates via software updater.

Most of the other Mac browsers have their adherents. They are all good browsers (I have 7 browsers installed to test various web sites and for change-of-pace usage). They all have their strengths and they all have their weaknesses. Only iCab and OmniWeb are still shareware, the rest are now or always have been free (Opera just recently stopped charging for its browser).
I have settled on Firefox as my alternate browser and I use it maybe just a tad more than Safari, but I do switch back and forth between them. The Mozilla foundation is good at getting security updates out when needed. Firefox has a button on the toolbar to check for updates. One nice thing about Firefox is that you can install free extensions which enhance the features available. I have one to supplement tab features, one to control iTunes from Firefox's status bar, one to help me format messages in discussion forums, and one to block ads.
I prefer OmniWeb for doing intensive research because of the way it handles tabs in its sidebar, showing me which ones I've looked at and which ones I haven't, and giving me great flexibility in rearranging tabs, which are viewable as thumbnails or text names (I have had up to a hundred or so tabs open in OmniWeb.
Shiira is good and its fast. I have not checked for updates for a while, but the last time I updated there was still a problem with Shiira kicking you out of logged-in sites when you moved from page to page with in web site. This may have been fixed by now - they were aware of the problem back then.
Camino is a native OS X cousin of Firefox and is also fast, but is not updated as often.
I would stay away from Mozilla or Netscape unless you need all the additional modules they have and which take up hard disk space. Firefox and Camino represent the browser module of Mozilla/Netscape. Mozilla and Netscape have modules for email, irc chat, newsgroups, and for creating and editing web pages. Netscape is a branded and slightly customized version of Mozilla and is not updated as often.
Opera is a nice browser and some use it as their main browser, but I have not seen anything that really stands out for me, but that does not mean it is not worth a look.
I would stay away from abandonware Internet Explorer.
As for checking for updates, several of them, as with many Mac programs, now have a menu item that allows you to check for updates. Most of them also announce their updates on both VersionTracker and MacUpdate.
Happy Exploring.

Security Issue with Apple ID

Today while using my iphone and trying to use facetime for the first time since updating to IOS6, my phone asked me if I wanted to use some email address that I do not have for facetime. What? The message pretty much said that this email address was linked to my apple ID. So I got to work logged into AppleID.Apple.com and saw the email address verified and also saw it displayed as an alternate apple id. Immediately, I changed my Apple ID password and called apple at 1800myapple since that is the number on the website and try to talk to someone that could assist me with this severe issue. Anyway, my iphone went dead and the people on the phone couldn't connect me to anyone because I couldn't give them a serial number to an apple device. I tried to explain to the technicians that this is a problem with my ID and that the alternate ID has access to everything that my Apple ID has access to. Both times the call went nowhere. This is ridiculous. Why can't I talk to a security team? Why is the technician telling me that I can manage my ID from the website, when I know that I am looking at the website and I cannot remove the alternate ID? How did this ID get associated with my account and why did I never receive an email informing me of the change?
Since Apple has other services and not just products STOP ASKING FOR A SERIAL NUMBER AND ASSIST THE CUSTOMER WITH THE ISSUE especially since it is a SECURITY ISSUE.

oh man, I know exactly what you're talking about. i have a relatively easy to guess apple id email and everybody in the world thinks it's theirs... but once I turned on two-step authentication, the emails stopped completely. here's a faq about it:
http://support.apple.com/kb/HT5570
once i turned that on, whenever they'd want to reset my password, they would get asked for my recovery key, which they don't have, haha! victory is mine.

My account was deleted for security issues. I made a new account, but I can't syncronise my apps with this new account. I bought a new Iphone and would like to transfer the apps ans music on this new one. Can somebody help me?

My account was deleted for security issues. I made a new account, but I can't syncronise my apps with this new account. I bought a new Iphone and would like to transfer the apps ans music on this new one. Can somebody help me?

Why would you make a new account? This will likely cause many problems. Just get you old account enabled.
Apple ID: "This Apple ID has been disabled for security reasons" alert appears
Frequently Asked Questions About Apple ID
Everything you purchased with the old account will always be tied to that account. You will have to authorize the computer for that account and you will have to update the apps from that account.

HT5642 I need to update iOS 6.1.3 on my iPad2 to 6.1.6, due to security issue. Why is no update available? I do NOT want to install iOS 7, due to memory limitations.

I need to update iOS 6.1.3 on my iPad2 to 6.1.6, due to security issue. Why is no update available? I do NOT want to install iOS 7, due to memory limitations.

Any upgrade will be to the most recent, compatible version, in this case 7.0.6.

Dynamic UI Shell & Security Issue - FYI

Similar Messages

Maybe you are looking for