So far so firefox !

Discussion in 'other software & services' started by Spanner intheWorks, Feb 1, 2005.

Thread Status:
Not open for further replies.
  1. jayzzz

    jayzzz Registered Member

    Joined:
    Mar 23, 2003
    Posts:
    367
    Location:
    California
    Thanks. :) I've printed it out what dog said...am not sure I'm competent to implement it. :doubt:
     
  2. iceni60

    iceni60 ( ^o^)

    Joined:
    Jun 29, 2004
    Posts:
    5,116
    i'm not at home at the moment, but while i remember, here's another eye-canyish extension Download Manager Tweak and i like Advanced Search Button it will search the page for a word/s you want to find and high light it. it is similar to a hot key combo. i used to use which would bring up a little toolbar which you could type a word in to and it will then high light. something like Windows Logo+F.
    i also like DictionarySearch
    here's another one. Select text and it's automaticaly copied to the clipboard. Like Trillian or mIrc -
    https://addons.update.mozilla.org/e...ication=firefox&version=1.0&os=Windows&id=383
     

    Attached Files:

    Last edited: Feb 7, 2005
  3. dog

    dog Guest

    Hi Jayzzz, ;)

    In regards to the rendering problem, throttling down ~a little~ the FireFox Network Speed Tweaks, should correct the problem.

    See this thread -> https://www.wilderssecurity.com/showthread.php?t=64325 (Post #6)

    HTH, ;)

    Steve
     
  4. bigc73542

    bigc73542 Retired Moderator

    Joined:
    Sep 21, 2003
    Posts:
    23,934
    Location:
    SW. Oklahoma
    I tried the tweaks on mozilla 1.7.5 and it works better on it than firefox :D

    bigc
     
  5. jayzzz

    jayzzz Registered Member

    Joined:
    Mar 23, 2003
    Posts:
    367
    Location:
    California
    Hi, Steve, and thanks for posting. I "throttled down" all the way to the defaults late this afternoon, except for leaving "network.dns.disableIPv6", true (I listened to my uneducated "inner voice" on that one...tell me if the voice lied, please?).

    Somewhere along the way, after I got Spellbound to work (between your post and Ron's advice), I lost the ability to post attachments here. The option disappeared. I ran scan disk at ronjor's suggestion, and then ran "sfc /scannow", because I figured it couldn't hurt. I'm back to having the option of adding attachments again and everything here at Wilders looks normal.

    [[I think I'm down to only one unaddressed post, which is related to IE/SPYAD and not critical, so I'm doing great! :D]]

    I appreciate your advice! :)
    Joyce
     
  6. jayzzz

    jayzzz Registered Member

    Joined:
    Mar 23, 2003
    Posts:
    367
    Location:
    California
    So maybe for my purposes, and in my situation, it's not worth doing. Certainly didn't notice improvement like I noticed the glitch! Thanks, bigc! :)
     
  7. DanL

    DanL Registered Member

    Joined:
    Nov 25, 2004
    Posts:
    159
    Spanner,

    I have spoofstick installed and the exploit also fools spoofstick.
     
  8. dog

    dog Guest

    Spanner,

    The exploit is only for Mozilla / Firefox / Camino / Opera / Netscape 7x ... so why would you even mention IE, doing so does nothing but mislead others. What is the point of that? Are you trying to say IE is more secure because it's not vulnerable to this particular exploit? ... come on buddy, seriously; get real ... Don't provide misinformation, trying to confuse other members.

    Steve

    {Edit} Ps. Sorry for my rough tone, but things like this really piss me off! If this was an honest mistake, I do apologize.
     
    Last edited by a moderator: Feb 7, 2005
  9. Ailric

    Ailric Guest

    Are there any extensions that work like WindowWasher?
    When I close IE, WW automatically cleans up. That would be a nice feature for FF."

    CCleaner can do this, but it's not an extension.
    http://www.ccleaner.com/

    dog,

    "The exploit is only for Mozilla / Firefox / Camino / Opera / Netscape 7x ... so why would you even mention IE, doing so does nothing but mislead others."
    "Sorry for my rough tone, but things like this really piss me off!"

    This thread was STARTED BY SPANNER. Don't get "pissed off" or "offended" if someone points to a flaw in Firefox that is NOT in IE. This is not a place to get "pissed off", it's a place to share knowledge and ideas. Spanner was told over and over that IE cannot be made secure yet shows an area where it is MORE secure than other browsers.

    Firefox is just a browser, not a religion.
    P.S. I am using Firefox right now. ;)
     
  10. dog

    dog Guest

    Ailric, ;)

    My being upset with Spanner has nothing to do with either IE or FireFox, it upsets me because he presents it as misinformation, which could confuse other members. The exploit doesn't involve IE at all, so of course it's immune to it. With that said, Then what's the point of Spanners statement, other than to misinform/confuse others. All browser/programs have weakness/exploits and they are patch according, this isn't in anyway intended as a Browser A vs Browser B type bashing. Furthermore, it's clear he didn't try the test with SpoofStick before suggesting it to members that it would prevent this exploit. It's great to give untested/uninformed advice isn't it. Sorry if that wasn't made clear.


    Steve

    Edit: Ps. Spanner I just read your post above ... I guess you still don't get it :rolleyes: ... Please don't advise anyone anywhere, before you're sure you know what/why it is you're talking about. It's a disservice to everyone.
     
    Last edited by a moderator: Feb 7, 2005
  11. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    Folks....I'll ask you to Please stick to the thread topic and keep your personal differences\comments\attacks to yourselves.

    Also....perhaps this is one of those times where interpretation of another members words are being misconstrued o_O

    Food for thought---> Have you ever noticed how easy it is to offend someone else online?

    "I'm just a soul who's intentions are good. Oh Lord, Oh Lord, please don't let me be misunderstood"
     
    Last edited: Feb 8, 2005
  12. Marcos T

    Marcos T Guest

    Ailric is right if theres a security problem with firefox its good too know it,im sure happy to here about it and why wont everybody with firefox too?And bubba is right to why has dog not understood what spanner said?I understood it as it was said by spanner and i did that test at secunias on ie too as well as on firefox before i read about it on here.Spanner didnt say spoofsticks cures the bug he said it can help to prevent it.If i can understand that plain and simple why cant dog?If you go to mozilla and do a litle homework yourself on spoofsticks you will read what it says its suposed to do.It says it gives you a toolbar so you can see if the adress is the same as were you want to go or not.If it doesnt work proper thats not spanners fault is it and i havnt seen anybody else try give any help on this even you dog so dont atack some one just becose they do care about peoples and do give some info which was writen very clear to me.You were very rude to spanner and peoples dont like that.I will be reading more of this threads i like some of the things said by some of the peoples.
     
  13. jayzzz

    jayzzz Registered Member

    Joined:
    Mar 23, 2003
    Posts:
    367
    Location:
    California
    As I understand spoofing, I should be protected to the extent possible by my own habit of watching the address window [field?] as I move around.

    Am I anywhere near correct? o_O
     
  14. LowWaterMark

    LowWaterMark Administrator

    Joined:
    Aug 10, 2002
    Posts:
    18,280
    Location:
    New England
    Well, I'm afraid not, if you mean that you are looking at the address and/or status bar to see if the links there are what you think they should be.

    In this particular case, the spoofing is based upon making links that "look" like the legitimate site, but in reality are some spoofed site. The international character set would allow for "look a like" sites to be created, which very well could mislead the viewers. That's the main reason they suggest typing the URLs in manually rather then clicking or even using a copy/paste operation.
     
  15. LowWaterMark

    LowWaterMark Administrator

    Joined:
    Aug 10, 2002
    Posts:
    18,280
    Location:
    New England
    This is kind of the concept they are describing...

    The two links below look the same, but are actually different. If the first one was a registered domain name and had a webserver running that looked right, some people would think they were going to the real site.

    http://Рaypal.com/

    http://Paypal.com/

    The exploit can probably be done a lot more complex than this simple demo, but it gives you the idea. A spoof that makes one thing look like another, but in reality is something different.
     
  16. jayzzz

    jayzzz Registered Member

    Joined:
    Mar 23, 2003
    Posts:
    367
    Location:
    California
    Thank you!

    So a malicious set-up would actually send you elsewhere while displaying the same thing in the window, though in this case, the top URL sent me nowhere. Firefox tells me to check the name and try again.

    I think I may have mixed up spoofing and phishing, or understood it to be some combination of the two that may not exist. :oops:

    Would you say everyone should have the added protection being discussed or that it's important primarily for those who go to sites with games, porn, music downloads, chat rooms, etc.? :)

    Is it off-topic if I ask whether Firefox is known to need any other extras beyond the basic installation to be secure?
     
  17. DanL

    DanL Registered Member

    Joined:
    Nov 25, 2004
    Posts:
    159
    Hi jayzzz,

    No, this thread seems to be covering several Firefox issues, so ask away... ;)
    I would go for the added protection, no matter what surfing habits I used.

    Dan
     
    Last edited: Feb 8, 2005
  18. DanL

    DanL Registered Member

    Joined:
    Nov 25, 2004
    Posts:
    159
    Hey Spanner,

    Thanks for the info on the ad-block filter. Easy fix and seems to work.
    When I click on the test link at Securia nothing happens.

    Dan
     
  19. Longboard

    Longboard Registered Member

    Joined:
    Oct 2, 2004
    Posts:
    3,238
    Location:
    Sydney, Australia
    This thread gets more interesting every day.
    I know there are the Mozilla forums for FF, occassionally the responses I get there are a little off putting. Often I get the feeling that dopey Winlusers and ex IE converts are tolerated rather than encouraged.

    What about a FF forum here?

    LWW and MrP: do I have to include the forward slashes in the adblock workaround of the spoofing problem.?
    I get a message in the FF window asking "do you really know what youare doing"

    Answer: sometimes a bit!! :blink:


    I have also read that these bugs have been addressed. True?
    I tested my version Of FF on the Secunia page and got the spoofed redirect.

    I have been following some of these issues here: http://www.mikx.de/ and at Secinia as best as I am able, and as I read, some of these issues have been adressed on the bugzilla pages. If so do we need to dl new "nightly" versions of Ff, accept updates as they come or just wait for FF1.0+

    Soory if this post is a bit confused. Have been working v.hard lately and thought processes might need defrag !
    Not counting effect of being somewhat out of depth. Heh.
    Not drowning yet, still just waving :eek:
     
  20. flinchlock

    flinchlock Registered Member

    Joined:
    Jan 30, 2005
    Posts:
    554
    Location:
    Michigan
    :eek: Typo... should be "C:\Program Files\Mozilla Firefox\firefox.exe" /Prefetch:1

    Mike
     
  21. flinchlock

    flinchlock Registered Member

    Joined:
    Jan 30, 2005
    Posts:
    554
    Location:
    Michigan
    Hmmm...

    In FF, Right-Click Properties on either link looks OK. :'(

    But, in IE6 (XP/SP2), the first/fake link shows the problem! :D

    Mike
     

    Attached Files:

  22. flinchlock

    flinchlock Registered Member

    Joined:
    Jan 30, 2005
    Posts:
    554
    Location:
    Michigan
    Also in IE (XP/SP2) I get an Error if I click on the fake link.

    (Sorry for 2nd post, I think I'm only allowed one image per post?)

    Mike

    Edit... sorry for the HUGH image. :eek:
     

    Attached Files:

    Last edited: Feb 9, 2005
  23. DanL

    DanL Registered Member

    Joined:
    Nov 25, 2004
    Posts:
    159
    Longboard,

    I just copy/pasted the filter /[^\x20-\xFF]/ as is and it works for me.

    If I click on the fake link with FF nothing happens.

    Dan
     
  24. jayzzz

    jayzzz Registered Member

    Joined:
    Mar 23, 2003
    Posts:
    367
    Location:
    California
    Thank you, Dan. I just downloaded it and will shut down. Will likely reboot for good measure. ;)

    Do my HOSTS file, IE/SPYAD, Enough is Enough, SWBlaster, etc., do anything, at all, in FF? o_O Of course, I'll keep them current in any case because sometimes IE is needed...
     
  25. jayzzz

    jayzzz Registered Member

    Joined:
    Mar 23, 2003
    Posts:
    367
    Location:
    California
    It seems to work for me, too. I copied and pasted as instructed, even though it suggested not to w/o knowing for sure what it was. I figure I had it on good enough advice not to need to know more. :D
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.