x404.co.uk
http://www.x404.co.uk/forum/

Germany warns surfers against Firefox
http://www.x404.co.uk/forum/viewtopic.php?f=19&t=7181		 Page 1 of 2
Author:  bobbdobbs [ Tue Mar 23, 2010 11:59 am ]
Post subject:  Germany warns surfers against Firefox
clicky

Quote:
German's official cyber-security response team is advising surfers not to use Firefox pending the release of a patch to defend against a critical unpatched vulnerability.
Author:  l3v1ck [ Tue Mar 23, 2010 12:05 pm ]
Post subject:  Re: Germany warns surfers against Firefox
The patch has already been released, I updated to 3.6.2 this morning.
Author:  jonlumb [ Tue Mar 23, 2010 12:10 pm ]
Post subject:  Re: Germany warns surfers against Firefox
l3v1ck wrote:
The patch has already been released, I updated to 3.6.2 this morning.


Ditto.
Author:  pcernie [ Tue Mar 23, 2010 12:36 pm ]
Post subject:  Re: Germany warns surfers against Firefox
jonlumb wrote:
l3v1ck wrote:
The patch has already been released, I updated to 3.6.2 this morning.


Ditto.


As a result of this thread I've just noticed that I'm auto-downloading it :D
Author:  bobbdobbs [ Tue Mar 23, 2010 1:14 pm ]
Post subject:  Re: Germany warns surfers against Firefox
pcernie wrote:
jonlumb wrote:
l3v1ck wrote:
The patch has already been released, I updated to 3.6.2 this morning.


Ditto.


As a result of this thread I've just noticed that I'm auto-downloading it :D


My work is done here :D
Author:  big_D [ Tue Mar 23, 2010 4:58 pm ]
Post subject:  Re: Germany warns surfers against Firefox
Yep, they seem to launch these alerts every couple of weeks, the last 2 were for Opera and Flash...
Author:  pcernie [ Tue Mar 23, 2010 9:52 pm ]
Post subject:  Re: Germany warns surfers against Firefox
bobbdobbs wrote:
pcernie wrote:
As a result of this thread I've just noticed that I'm auto-downloading it :D


My work is done here :D


And I'm now updating the desktop (manually), before getting to the new netbook at some point :D
Author:  Amnesia10 [ Tue Mar 23, 2010 11:04 pm ]
Post subject:  Re: Germany warns surfers against Firefox
big_D wrote:
Yep, they seem to launch these alerts every couple of weeks, the last 2 were for Opera and Flash...

I can understand Flash being on that list, though really everyone should apply security patches as fast as possible and use the latest browser as it will be more secure than the previous incarnation.
Author:  big_D [ Wed Mar 24, 2010 6:41 am ]
Post subject:  Re: Germany warns surfers against Firefox
Amnesia10 wrote:
big_D wrote:
Yep, they seem to launch these alerts every couple of weeks, the last 2 were for Opera and Flash...

I can understand Flash being on that list, though really everyone should apply security patches as fast as possible and use the latest browser as it will be more secure than the previous incarnation.

Opera 10.5 was released (on the day of the Browser Ballot screen going live in Windows) with a 0-day flaw.

If you open a web page, it could cause a buffer overflow. There was a problem with the 64-bit file size meta tag passed to the browser. If the MSB of the 32-bit border was set (negative 32-bit number, for a 32-bit signed value), the browsers buffer would overflow and become corrupt and if you used a specially crafted page, image or general file, it could lead to code execution situation.

As the web page itself, any images, any embedded objects and any files to be downloaded use this meta tag, it is potentially disastrous.
Author:  l3v1ck [ Wed Mar 24, 2010 8:14 am ]
Post subject:  Re: Germany warns surfers against Firefox
I think most risks I read about are to do with java script, that's why I use NoScript.
Author:  Amnesia10 [ Wed Mar 24, 2010 9:26 am ]
Post subject:  Re: Germany warns surfers against Firefox
l3v1ck wrote:
I think most risks I read about are to do with java script, that's why I use NoScript.

The problem is that many pages use java or javascript. I have found that click to flash is so effective that I am considering disabling Glimmerblocker, an ad blocker.
Author:  l3v1ck [ Wed Mar 24, 2010 10:27 am ]
Post subject:  Re: Germany warns surfers against Firefox
Amnesia10 wrote:
l3v1ck wrote:
I think most risks I read about are to do with java script, that's why I use NoScript.

The problem is that many pages use java or javascript.
Which is why I allow them on a site by site basis from sites I trust.
Author:  Amnesia10 [ Wed Mar 24, 2010 2:44 pm ]
Post subject:  Re: Germany warns surfers against Firefox
l3v1ck wrote:
Amnesia10 wrote:
l3v1ck wrote:
I think most risks I read about are to do with java script, that's why I use NoScript.

The problem is that many pages use java or javascript.
Which is why I allow them on a site by site basis from sites I trust.

But as a mac user I do not know of a program that allows me to whitelist and blacklist scripts.
Author:  jonlumb [ Wed Mar 24, 2010 2:46 pm ]
Post subject:  Re: Germany warns surfers against Firefox
Amnesia10 wrote:
But as a mac user I do not know of a program that allows me to whitelist and blacklist scripts.


I use Firefox on a Mac with Noscript installed...
Author:  big_D [ Wed Mar 24, 2010 2:54 pm ]
Post subject:  Re: Germany warns surfers against Firefox
Amnesia10 wrote:
l3v1ck wrote:
Amnesia10 wrote:
The problem is that many pages use java or javascript.
Which is why I allow them on a site by site basis from sites I trust.

But as a mac user I do not know of a program that allows me to whitelist and blacklist scripts.

I use NoScript on Firefox on Windows, OS X and Linux...
Page 1 of 2 All times are UTC
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/