Welcome Guest ( Log In | Register)



2 Pages V   1 2 >  
Reply to this topicStart new topic
> Status Bar Spoofing In Firefox
Rik©
post Mar 15 2005, 05:46 PM
Post #1


Newbie [Level 2]
**

Group: Members
Posts: 30
Joined: 7-March 05
From: The Netherlands
Member No.: 4,240



Hi cool.gif

Now that Firefox get's more popular each day people find more 'bugs' dry.gif

The next vulnerability was reported yesterday on SecurityTracker.com:
QUOTE
A spoofing vulnerability was reported in Firefox. A remote user can create HTML that, in certain cases, will spoof the status bar.

A remote user can create HTML with an A HREF link in a table, where the table is embedded within an A HREF tag. If the target user selects to save the spoofed link using the "Save Link As" feature, arbitrary content will be saved to the target user's system.

http://securitytracker.com/id?1013423

I wonder when mozilla will release v1.0.2

Greetz,
Rik©
Go to the top of the page
 
+Quote Post
whyme
post Mar 16 2005, 03:27 AM
Post #2


Privileged Member
*********

Group: Members
Posts: 661
Joined: 10-January 05
Member No.: 3,189



Yes! As I devout Interent Expolrer user, (Well, I used FireFox for 4 weeks), I'm happy that another secutiry flaw is found in FireFox. EVeryone that uses firefox has a false sense of secuirty that Fireox is 100% fail safe and that Internet Explorere sucks. What's really casuing the problem is not IE's coding, but rather the popularity of it. Whatever is the most popular, hackers wil target that, as firefox gets more popular, it will get more and more flaws.
Go to the top of the page
 
+Quote Post
googlue
post Mar 16 2005, 07:46 AM
Post #3


Privileged Member
*********

Group: Members
Posts: 512
Joined: 26-September 04
From: Googland
Member No.: 1,278



I totally agree with whyme and also the spirit behind Rik's post, when he says that 'Now that Firefox get's more popular each day people find more bugs'.

The main disadvantage of IE is that it is popular and people will try to bring it down. Now that Firefox is catching up, they won't even spare it.

However, being open source, it is more open for such attacks, and on the contrary also more likely that such bugs will be fixed very soon...
Go to the top of the page
 
+Quote Post
mahesh2k
post Mar 16 2005, 03:21 PM
Post #4


Super Member
*********

Group: Members
Posts: 324
Joined: 23-January 05
From: India
Member No.: 3,388



Yeah thanks for this thread.actually as many users will help them locate errors and bugs that browser will improve much with its user experience.and best of all the browser is free and works on various os's.
anyway if you more security tracking sites pls post them here.
Go to the top of the page
 
+Quote Post
EricDrinkard
post Mar 16 2005, 06:45 PM
Post #5


**removed link**
********

Group: Members
Posts: 180
Joined: 21-July 04
From: I Don't Know
Member No.: 162



Lets face it the only way to totaly protect you computer is take out our modem, cd drive, floppy drive, and usb ports. IE Or Firefox Can And Will Be Attacked.


And also while we are one the issue of false security apple computers are not safer than windows. It is that there are not that many mac users ( however there numbers are growing) out there so they have less people creating viruses for them. When the number of users grow the more attacks you will have.


Thanks
Eric Drinkard

Aslo just for the records. I own a windows and a mac computer
Go to the top of the page
 
+Quote Post
Casanova
post Mar 16 2005, 11:36 PM
Post #6


Super Member
*********

Group: Members
Posts: 240
Joined: 11-October 04
From: California
Member No.: 1,683



Well, at least using firefox means that one is safe from the massive ammount of exploits that already exist for IE. Since this is a open-source project, chances are that fixes will be released faster than what MS can do.
Go to the top of the page
 
+Quote Post
matthewbot
post Mar 22 2005, 10:11 PM
Post #7


Member [Level 1]
****

Group: Members
Posts: 57
Joined: 29-January 05
From: US
Member No.: 3,484



Hmm, i cannot reproduce the problem with there example code. Can anyone else get it to work? When I click the link, the browser goes right to www.mozilla.org like its supposed to. Does 1.0.1 fix this problem?
Go to the top of the page
 
+Quote Post
almooooot11
post Apr 12 2005, 02:03 AM
Post #8





Guests






Lets face it the only way to totaly protect you computer is take out our modem, cd drive, floppy drive, and usb ports. IE Or Firefox Can And Will Be Attacked.
And also while we are one the issue of false security apple computers are not safer than windows. It is that there are not that many mac users ( however there numbers are growing) out there so they have less people creating viruses for them. When the number of users grow the more attacks you will have.
Thanks
Eric Drinkard

Aslo just for the records. I own a windows and a mac computer
Notice from NilsC:
You just got yourself deleted and banned
Go to the top of the page
 
+Quote Post
CrashCore
post Apr 12 2005, 03:14 AM
Post #9


Super Member
*********

Group: [HOSTED]
Posts: 225
Joined: 8-April 05
Member No.: 5,385



I would just like to add to this that ric said "I wonder when mozilla will release v1.0.2", but I have Firefox v1.0.2... Screenshot of my about page is here. It is possible that his post (Mar 15 2005, 11:46 AM) was before Firefox 1.0.2 came out, but I don't think so because I thought I've had Firefox for over a month. Well anyways I support Firefox, but I agree that if it became as widely used as Internet Explorer, it would probably have just as many bug exploits. However, I believe the bugs would be fixed faster due to Firefox's open source'ness. tongue.gif
Go to the top of the page
 
+Quote Post
clagnol
post Apr 12 2005, 03:40 AM
Post #10


Premium Member
********

Group: Members
Posts: 186
Joined: 3-April 05
From: Wichita, KS
Member No.: 5,194



No, I'm pretty sure that Internet Explorer is inherently inferior to Firefox biggrin.gif

No browser is perfect with regard to security, but Firefox comes much closer than IE. They release their source code, allowing the general public to comb it for vulnerabilities. Thanks to the devout Firefox community, these vulnerabilites are promptly reported and fixed.

What does Microsoft do to protect IE from vulnerabilities? They withhold their code. IE has no active community. Microsoft finds out about IE's vulnerabilities when hackers exploit them on a large scale. And they wait entirely too long to issue patches to fix their broken software.

IE allows third parties to install software on your computer without your permission, using activeX, unless they bothered to fix that gaping hole in security since I last checked. This thread is no victory for IE. It is merely a reminder of how trivial the flaws in Firefox are in comparison with the manifold susceptibilities of Internet Explorer.
<