pez: (Default)
[personal profile] pez
[edit] I'm just posting links and a suggestion I received. Please verify the info yourself before installing or changing anything - I refuse to be responsible for any computer deaths!

To be honest I haven't had time to read this in detail yet, so please check the source of info etc yourselves.

News article on new phishing exploits that affects FireFox browsers

Original paper from the conference that exposed this vulnerability

Apparently there is a work-around. Again I haven't checked any of this info. It was sent out by the IT director of my sis's workplace and she forwarded it to me:

+++
There is a workaround, and I urge you to perform this tweak in order to make keep FireFox a safer and just more generally righteous web browser:

type

about:config

into the FireFox address bar. You'll be presented with a page of configuration options. Scroll down to

network.enableIDN

Double click this option to switch it's value from true to false. Having a setting of false will prevent you from being a victim of one of the most dangerous phishing attacks that I've ever seen. I don't normally send out advisories like this, but this one is such a doozy....
+++

Date: 2005-02-15 02:21 pm (UTC)
ext_5666: Icon taken from Alien Hominid (art by Dan Paladin) (Default)
From: [identity profile] tefkas.livejournal.com
Thanks for this (here via [livejournal.com profile] chinawolf): a quick google about the place seems to support the information, although responses are mixed as to whether turning enableIDN off actually effects a cure in Firefox.

Date: 2005-02-15 02:38 pm (UTC)
From: [identity profile] mirichan.livejournal.com
In one of the documents you linked to, there's this mention of a TrustBar.

I installed it. I'll see how it goes... Thanks for the heads up.

Date: 2005-02-15 03:18 pm (UTC)
From: [identity profile] yuki-scorpio.livejournal.com
^^ Let me know if Trustbar works well for you or not?

Date: 2005-02-15 03:28 pm (UTC)
From: [identity profile] mirichan.livejournal.com
I tried the "network.enable" thing first.

It froze when I tried to download a BT link from AnimeSuki... okay... Restarted Firefox and the default had already been changed back to auto. Not an option for me then.

TrustBar?

Well, it's at the top of my window, telling me THIS page here is not safe. And everytime I click on a link? It pops up to let me know.

It did this when I accessed my Gmail account so I told it it was secure and I'm back working correctly.

I'll let you know more but then again I don't click on links in email unless I registered somewhere and the link is the way to finish the transaction... I hate having to be so paranoid on the net though... damn.

Profile

pez: (Default)
Pez

January 2015

S M T W T F S
    123
45 678910
11121314151617
18192021222324
25262728293031

Most Popular Tags

Style Credit

Expand Cut Tags

No cut tags
Page generated Dec. 29th, 2025 02:34 pm
Powered by Dreamwidth Studios