Printable View
Just thought I would drop you guys a heads up. Apearantly your keystrokes can be seen with a simple exploit in FireFox. Here is a site that has a test so you can go there and see your own keystokes being exploited. I went there and it works, my keystrokes that I used previously were revealed. Passwords are not secure in Firefox until they patch this.
Secunity Link With Test For FireFox!!
Still waiting for Mozilla to come up with a patch... :(
Firefox 1.0.3 final will be out as soon as testing is completed. See:
http://www.mozillazine.org/talkback.html?article=6348
Fifth Set of Mozilla Firefox 1.0.3 Release Candidates
Quote:
As many people have asked, we would like to inform readers that the JavaScript engine memory heap disclosure bug will be fixed in Firefox 1.0.3. There will also be a Mozilla 1.7.7 update and possibly a Camino 0.8.4 release to fix this vulnerability in other Mozilla products.
mine showed all x's
frebo. What browser did you use? I tried my Firefox and I could see some text and other codes.
maxthon browser
Ok, thanks. This is a worrisome problem for people using FireFox. Today when I checked my banking site I switched to IE. Didn't want to take a chance with FF. As Firefox becomes more popular we are going to see the malware writing scumbags trying to take advantage of any flaw they can find. This could be a major problem for the Mozilla foundation. They can't turn out the patches as fast as Microsoft.
Opera is all clear :). Ran FF and each time you click the link some more info is shown. Looks like FF is on the shelf for a while for me.
jmtjet why dont you give maxthon a try it is almost like ie without the problems
Frebo, yes I have it installed, but thought it be as vulnerable as IE since it's built on the IE engine so I haven't used it much. I'm using Opera right now. What's your experience with Maxthon. Any problems or security concerns?
Should we avoid using Firefox for banking etc.. until this is fixed?
I would say yes.
Thanks Crunchie, I'll revert to IE for the timebeing then.
Just turn off Javascript support until the patch is released.
Click Tools > Options > Web Features and remove the check mark in Enable Javascript.
The "patch" is actually a new Firefox browser release. Testing isn't completed yet but, if anyone is interested, download links to the Firefox 1.0.3 candidate builds and more information can be found on Mozilla staff member Asa Dotzler's weblog:
http://weblogs.mozillazine.org/asa/