Browser Virtualization Secures Firefox
111981
A company called GreenBorder that has already made some headway with security-conscious consumers with a freeware/commercial combo of browser virtualization software for Internet Explorer, today released a new edition exclusively for Firefox users on Windows systems.
57823
US web browser developer Mozillaâs open-source browser Firefox has recorded over 10m downloads since it was launched in November.
514013
MyPhish.com The latest versions of both Firefox and Internet Explorer are vulnerable to an unpatched flaw that allows hackers to snaffle users' login credentials via automated phishing attacks.â¦
409383
Beta version makes it clear that the final Firefox 3 will include some nice extras but won't push the boundaries for browser upgrades.
174787
The Mozilla Foundation celebrated the worldwide release of Firefox 1.0 Tuesday as new Mydoom variants exploited yet another Internet Explorer vulnerability.
590080
For many people, using a non-Microsoft browser such as Firefox is now a must for secure Web surfing--but most still keep a copy of Internet Explorer around just in case.
497821
Alternative browser features protection against online scams.
226672
Firefox 3.0's memory consumption is "dramatically improved," Mozilla's chief engineer says.
116046
Help on the way Mozilla's chief of security has confirmed a vulnerability that could cause fully patched versions of Firefox to expose a user's private data.â¦
415939
Add-ons add security threat A security weakness in the update mechanism for third-party add-ons to the Firefox browser could give an attacker the ability to exploit unsecured downloads and install malicious code on the victim's computer, a security researcher warned on Wednesday.â¦
166030
With more and more users opting for &quot;alternate browsers&quot;, Firefox and Opera have been getting a fair deal of attention. Firefox 1.0 has already been downloaded 10 million times since its release in November.
622863
Vista stability also improved by critical browser update Firefox users need to update their browser software following the release of updates designed to fix multiple security vulnerabilities.â¦
79110
SAN FRANCISCO - Internet users are getting more Web browser choices. On the heels of a new Netscape preview release and the launch of Firefox 1.0, a U.K. company on Thursday released a Web browser it claims is more secure than Internet Explorer (IE) or Firefox.
659738
Firefox, the open-source alternative to browser heavyweight Internet Explorer has surpassed the 10 million download mark in the month that has passed since version 1.0 of the browser was released.
416887
(InfoWorld) - Makers of some of the most popular extension software used by the Firefox browser are not doing enough to secure their software, a security researcher said Wednesday. The problem is that many widely used Firefox extensions, including toolbars from Google, Yahoo, and AOL, do not use secure connections to update themselves, according to Christopher Soghoian, a security researcher who blogged about the issue on Wednesday. Soghoian is best known as the researcher who attracted the attention of the FBI late last year after publishing a tool that could be used to print fake boarding passes. The Indiana University doctoral student discovered the Firefox issue last month while examining network traffic on his computer. He noticed that many of the most popular Firefox extensions are not hosted on servers that use the SSL Web protocol. SSL Web sites, which begin with "https://," use digital certificates to provide users with some level of assurance that they're not connecting with a fake server. Although the corporation behind Firefox, Mozilla, hosts the majority of Firefox extensions on its own SSL-enabled Web site, it is common for commercial extension-makers like Google to host their software on an unsecured site, Soghoian said in an interview. This leaves users vulnerable to a "man-in-the middle" attack, where Firefox could be tricked into downloading malicious software from a site it mistakenly thought was hosting an extension. It wouldn't be easy for an attacker to pull this off, however. In one scenario, the hacker would set up a malicious wireless access point in a public area where people are using wireless connections. He could then redirect extension update traffic to a malicious computer. "An attacker who sets up a wireless access point can then infect anyone who connects to it," Soghoian said. The Del.icio.us Extension, Facebook Toolbar, Ask.com Toolbar, LinkedIn Browser Toolbar, Netcraft Anti-Phishing Toolbar, and PhishTank SiteChecker are also vulnerable to this issue, Soghoian said. Though Soghoian said Firefox users should avoid extensions that are not from the secure Firefox add-ons site, not all security researchers see this as a major issue. "It's just yet another vulnerable design among billions,"said Gadi Evron, security evangelist for Beyond Security. "I don't see it as that critical. There is no inherent vulnerability, but it does make the over-whole design weaker, and that should probably be addressed" Evron said it was "silly" that sites weren't using SSL for these extensions. Soghoian said he notified Google, Yahoo, and Facebook of the issue in mid-April, but nobody had addressed the issue as of Wednesday. Just hours after Soghoian went public with his findings, Google said it would "soon" have a fix for the problem. It's common for Web developers to ignore security in the rush to push out new and cool features, Soghoian said. "Your average Web 2.0 developer doesn't learn about security," he said. "Google has a spectacular security team ... my suspicion is that one hand wasn't talking to the other."
685180
Even though it was patched twice in July, Mozilla's Firefox browser is still vulnerable to attacks exploiting protocol-handling bugs, according to security researchers.
60742
On July 10, engineers at Secunia issued a security advisory, rated "Highly Critical," warning Firefox users that their browser could be tricked into executing arbitrary JavaScript code. While Internet Explorer was originally blamed for the ability to trick Firefox, as it turns out, Mozilla admitted today its own browser is to blame, even after a patch was released.