Firefox 3.0 may Block Sites Fingered by Google
28387
Sites that Google has determined house malware would be blocked by a feature under discussion for the next major release of Firefox.
234529
Mozilla is trying to weave a new web. Not sure if it matters yet.
24451
A decision by Google Inc. to block certain search queries has helped thwart the spread of the Santy worm, but the public release of the worm&#39;s source code could lead to new attacks, security experts warned on Wednesday.
481060
Places Organizer is one of the most-awaited new features in the upcoming Firefox 3.0.
708445
Most sites are ignoring a new Firefox add-in that can block Web ads. The Daily Kos, however, is asking users of the product to buy subscriptions.
437595
Hackers can drop malicious code into systems running Firefox when the browser is armed with Google Toolbar, Yahoo Toolbar, or other add-ons.
619489
In the very week Mozilla Firefox Version 1.0 was launched, a series of potentially nasty security holes have been uncovered in older versions of the browser.
363180
Floor by flaw The latest versions of Internet Explorer and Firefox on Windows and (in the case of Firefox) Unix systems are vulnerable to attacks that could reveal the contents of sensitive files residing on a victim's hard drives.â¦
183325
Blog: Here's a follow up to a blog of a few days ago outlining workaround until Google issues a patch.
527702
Plus: Google apps for your site, and HP's pretexting debacle.
659755
Mozilla blocks those un-requested and annoying &quot;pop-up&quot; windows. It also has the ability to open new Web pages in a &quot;tabbed&quot; interface, as is common to most Windows-based programs.
614724
The Firefox browser is vulnerable to a flaw related to its pop-up blocker technology that could give access to local files, security analysts said.
657731
Google is working to fix a bug in the Google Toolbar that could allow criminals to steal data or install malicious software on a system, a security researcher warned Tuesday.The flaw lies in the mechanism Google Toolbar uses to add new buttons on the browser. Because the toolbar does not perform adequate checks when new buttons are being installed, a hacker could make his button appear as though it was being downloaded from a legitimate site when in fact it came from somewhere else. By spoofing the origin of the toolbar button, an attacker could download malicious files or launch a phishing attack against the victim, wrote security researcher Aviv Raff in a blog post on the issue.Raff has posted proof of concept code, showing how such an attack would work with the Internet Explorer browser. A Google spokeswoman confirmed Tuesday that the company is working to fix the problem.The attack requires many steps. First, the victim would have to be tricked into clicking on a Web link that would then pop up a window asking the user if he wants to install a custom button on his toolbar. Because of the flaw, this alert could look like it was downloading the button from a legitimate site, such as Google.com, even if it were not. Once the button was installed on the toolbar, the victim would then have to click on it and, finally, agree to download and run an executable file for the malicious software to be installed.Because the user would have to go through so many steps in order to fall victim to the attack, the bug isn&#39;t a critical one, said Marc Maiffret, an independent security researcher. &quot;While it is interesting, it&#39;s probably a low threat compared to other flaws out there,&quot; he said.Still, it was sloppy work on Google&#39;s part to miss such a simple attack, he said. &quot;They should definitely assess how it slipped through the cracks,&quot; he said.This is not the first obvious Google flaw that Raff has found. Last month, he showed how a simple Web programming error on the Google.com Web site could allow attackers to launch what&#39;s known as a cross-site scripting attack.Because Google&#39;s programmers didn&#39;t properly check the HTML generated by the Google search engine, Raff was able to create a specially crafted Google link that, when clicked by the victim, would trick the browser into running unauthorized scripting code. This type of link could be used to steal the victim&#39;s Google account or conduct phishing attacks, Raff saidThis error was fixed by Google just hours after Raff notified the company of the problem, but a demo of the flaw being exploited can be seen online.
665395
Just one day after Google's Firefox toolbar was revealed to have vulnerabilities that could be exploited in an online attack, a similar flaw has been discovered in Google Desktop.
111507
(InfoWorld) - A flaw in the pop-up blocker of the open-source browser Firefox could allow an attacker to access local files, according to security analysts. The flaw, however,Â does not affect Firefox 2.0, the latest version of the browser, but version 1.5.0.9, according to Beyond Security, which credited the find to Michal Zalewski. The attack could occur if a user manually allows a pop-window to appear. The browser normally blocks access to local files, but when a pop-up is manually allowed, "normal URL permission checks are bypassed," Beyond Security said. To make the hack work, however, a malicious file containing the exploit code would have to already be on the system, the advisory said. The file could be planted on the system by enticing a user to click on a link that would download the file. The malicious file could then enable access to other files, which could be transferred to a remote server. Mozilla, the distributor of Firefox, could not immediately comment on the report. Â
189807
Browser flaw may leave you vulnerable to phishing attacks.
340873
Mozilla Corp. has released a critical security update to Firefox, taking a third shot at patching bugs in the way the browser can be used to launch programs from Web links.