Password Vulnerability In Firefox 2.0.0.5

H

HardOCP News

[H] News
Joined
Dec 31, 1969
Messages
0
All you Firefox users out there should be aware of this recently discovered password vulnerability in Firefox 2.0.0.5. Hit the link for all the details.

According to a message posted over the weekend on the Full-Disclosure mailing list, the latest version of Firefox, 2.0.0.5, contains a password management vulnerability that can allow malicious Web sites to steal user passwords.
Click to expand...
 
Good thing I don't let any programs remember my passwords. That's the safest thing to do. (other than disconnecting your network connection :mad: )
 
So you download the NoScript plugin and only allow javascript to run from trusted sources that you select.

Won't be a problem for me. :D
 
Allowing your browser (whatever flavor) to save your passwords is insecure at the best of times.
 
I've somehow unknowingly managed to live wo/ java for almost 3 mos on a fresh install of Vista. Just the other day I came across a site that needed it. ;)
 
Jodiuh said:
I've somehow unknowingly managed to live wo/ java for almost 3 mos on a fresh install of Vista. Just the other day I came across a site that needed it. ;)
Click to expand...

There's a big difference between Java and JavaScript, we're talking about JavaScript. There's a ton of web sites out there that rely on JavaScript to do all sorts of things.
 
This is only an issue for social networking sites (sites that allow its users to post code)... to get the password it has to be from the same domain, I believe. Last time I checked myspace doesn't even allow javascript.
 
You must log in or register to reply here.
Back
Top