Hacking Firefox via Add-Ons

H

HardOCP News

[H] News
Joined
Dec 31, 1969
Messages
0
If you are a Firefox user, and I know a whole bunch of you are, you’d better read this.

According to Chris Soghoian, the Indiana University doctoral candidate who discovered the weakness, the vulnerability exists for some of the most popular Firefox add-ons, including Google Toolbar, Google Browser Sync, Yahoo Toolbar, Del.icio.us, Facebook Toolbar, AOL Toolbar, Ask.com Toolbar, LinkedIn Browser Toolbar, Netcraft Anti-Phishing Toolbar, PhishTank SiteChecker and a number of others, mainly commercial extensions. Ironically, at least two of the toolbars listed here are designed to help protect users from new security threats.
Click to expand...
 
No sign of "Daily Dilbert" add-on....
Whew!

Veditz added that Mozilla is seriously considering blocking all unsecured add-on updates in Firefox 3, the next version of browser, currently slated for release toward the end of the year.
Click to expand...

That's cool to know...
 
Never went in for add-on toolbars.Eventually Firefox will have the same security problems as IE,it's the one drawback to increasing popularity.
 
I highly doubt Firefox will suffer like IE. The Mozilla community is constantly trying to improve Firefox, and they listen to vulnerabilities instantly. Consider how often Firefox has an update available compared to how often IE is patched.
 
What exactly is the google toolbar? Doesn't firefox come with default a little box in the corner to do google searches?
 
My question is, is there any to know which extension updates are using secure and not secure lines? I agree that F3 should block unsecured updates.
 
You must log in or register to reply here.
Back
Top