Firefox is a Web browser that is smaller, faster, and in some ways more secure than the Netscape browser from which much of its code was derived.

learn more… | top users | synonyms

0
votes
0answers
12 views

autocomplete and cache in Firefox [migrated]

I am trying to understand if there is any difference between browser (in my case Firefox) cache and the place where 'autocomplete' data for an HTML form is stored in the browser. Unified storage for ...
0
votes
1answer
61 views

Firefox vs. Chrome extensions: Which are---ceteris paribus---more secure?

As an 'extension' to earlier questions on this topic (for instance here and here), What makes Firefox extensions (appear) more secure than Chrome extensions? Do they just appear to be more secure, ...
2
votes
0answers
111 views

Some http requests are not send encrypted by vpn! Why?

I subscribed to a VPN service recently, and installed wireshark to take a look at the traffic sent from my computer. Practically all of it goes through UDP protocol, encrypted. But there are two HTTP ...
1
vote
0answers
55 views

If even Apple cannot properly install certificate [closed]

I've just installed a new copy of Mozilla Firefox/29.0 SeaMonkey/2.26.1 on a new Mac with OS X 10.9.4, and I'm getting an error message in place of a webpage when trying to access ...
1
vote
1answer
71 views

How to force browsers to accepte all further SSL certificates

I am using the last versions of IE, Firefox and Google Chrome web browsers on Windows 8. How can force these browsers to accept automatically the SSL certificates of any website I will visit ? I know ...
1
vote
1answer
33 views

Preventing tracking in browsers by setting HOME directory

Following worked on Ubuntu 12.04 using chromium and firefox browsers. I ran following command on terminal for both firefox and chromium browser HOME=/tmp/tmpdir firefox Both browsers promptly ...
6
votes
1answer
118 views

Why does Firefox split HTTPS request?

I am using Firefox browser version 28.0. To access https://www.yahoo.com, I put a proxy with a self-signed certificate in between and my client PC can access the HTTPS site. I then sniffed traffic in ...
-1
votes
1answer
51 views

Why deleting navigation history of firedfox is not reflected in places.sqlite file? [closed]

This file is where Firefox saves bookmarks and navigation history. I cleared the history navigation from the GUI of Firefox. I went back to places.sqlite and I found everything is still there. Why the ...
5
votes
3answers
284 views

How to sandbox Iceweasel (Firefox) on Debian? [closed]

Are there any tools for sandboxing Iceweasel (Firefox) on Debian systems? I'm mostly interested in tools distributed by Debian. (An equally trustworthy source would be second best.) (I suppose that ...
1
vote
1answer
88 views

How to harden a “dedicated” Firefox?

I want to set up an instance of Firefox to be used to access a strictly limited "white list" of websites (my bank's, my credit cards', etc.). How can I harden such an instance of Firefox to reduce ...
2
votes
4answers
178 views

How to block web-sites from viewing browsing history within firefox?

How can I block websites in Firefox from viewing my browsing history within my browser cache? For example; I've done some Google searches that Amazon is now starting to use to target advertise; the ...
0
votes
2answers
96 views

Can malware cause firefox to send GET requests?

Is it possible for a site to host malware such that if a certain page is accessed, Firefox is made to send additional GET requests? I'm seeing traffic for attacks coming from me that I haven't done. ...
0
votes
2answers
144 views

Firefox can import the .p12 format, but that contains a private key? Isnt this a security risk?

Everywhere I go, people tell me the private keys need to be kept away, possibly even locked into a safe then how come Firefox and other keystores expect you to give them a private key? Firefox is a ...
2
votes
1answer
62 views

How does the Perspective addon work?

I've just installed the Perspetive addon in firefox. When I'm vistit, for example google, Perspective says the following message: Warning: Perspectives has NOT seen this certificate consistently. ...
3
votes
1answer
191 views

Why warning sign when visiting https-website? [duplicate]

Sometimes when I visit a website using HTTPS, I get a warning sign next to the URL in my browser (see screenshot; look for yellow/orange arrow) and I wonder if this marks a potential threat or an ...
4
votes
1answer
338 views

Why did firefox remove Javascript injection on address bar?

Why did firefox remove Javascript injection on address bar? Someone said it was a security issue. What security issues could there be?
0
votes
1answer
39 views

programs or methods to review Internet browser applications for security [closed]

I've been tasked with doing a security review on a Firefox update, but we don't have any utilities that we can find. How would we go about running a security review on Firefox before pushing it to ...
0
votes
1answer
116 views

Preventing body onload xss that is injected as a request parameter

I have a rails 4.0.1 app that allows locale as a request parameter. Here is what i saw when i tested my app on firefox; ...
2
votes
2answers
467 views

Username and password stored under form data in Chrome Dev Tools

When I record the network tab in Chrome Developer Tools when logging in to my site I find that the username and password are stored in plaintext under form data. You can also find it in Safari, ...
-2
votes
1answer
181 views

Surfing web anonymously on a mac using Firefox SSH and Tor [duplicate]

I want to download and upload to the internet anonymously. I have successfully configured Forefox to access internet through a secure SSH tunnel service (and remote server). I use 'SSH Tunnel Manager' ...
3
votes
3answers
570 views

If I use a good Master Password in Firefox, is security improved when I Remember Passwords instead of re-type?

In the old days I would emphasize that people should not select the remember passwords option because (besides the fact you tend to forget what the browser remembers) a bad guy could could display the ...
3
votes
1answer
311 views

I accidentally installed an adware filled Firefox [solved]

I installed Firefox using a download site, rather than the correct site. After running and installing Firefox I noticed my Chrome had an addon called swift browser added to it by a third party. After ...
1
vote
2answers
99 views

How to sign and encrypt mails using firefox

There is an option under Tools>options>Advanced>Security Devices. How to use that to encrypt and digitally signed your emails.
1
vote
1answer
306 views

Trying to verify my X509 certificate “could not verify this certificate for unknown reasons”

I have created my own X509 certificate with my own CA. I am able to import the CA certificate into Firefox, but when I try to import the user's certificates i get the following: "Could not verify ...
0
votes
1answer
163 views

Running browser as different user (in Linux)

On the ArchWiki, it is suggested, as a security measure, to run skype as a different user. My question is: would this make sense for the browser? I use firefox with NoScript and AdBlock, but also need ...
2
votes
1answer
469 views

Different SSL states as seen by Safari, Chrome and Firefox

Today, I visited some sites of the German DHL group. While Chrome and Safari complain about an invalid certificate of Firefox accepts it. Which one is right, which one is wrong? Which decision ...
1
vote
1answer
313 views

Which is a safe way to record Firefox passwords in Gnome Seahorse Keyring?

Here is a question that I asked on "AskUbuntu" and I've been suggested to ask it here: Searching for answers about ways to record Firefox passwords in Gnome Seahorse Keyring vault, I found severals ...
3
votes
2answers
400 views

how to view extension privileges in firefox

In Google Chrome, I can go to chrome://extensions/ and click "permissions" to view the permissions that an installed extension has been granted. I cannot find an equivalent in Firefox. Is there such ...
4
votes
2answers
2k views

Password management in Firefox, Chrome and Safari

I just read a couple of very interesting discussions on Chrome password security strategy. Chrome’s insane password security strategy Showing stored passwords - Tim Berners-Lee The following is how ...
0
votes
1answer
97 views

Java is running even after it is disabled [closed]

To prevent adds and pop-up that seduce users to install or download viruses I have disabled Java. But I have noticed that even with Java disables Firefox is still running it. The pop-ups are coming ...
6
votes
1answer
363 views

Comparison between Firefox password manager and chrome password manager

As a follow up to Is saving passwords in Chrome as safe as using LastPass if you leave it signed in?, I would like to know how firefox's password manager compares, if you have a master password and ...
1
vote
4answers
532 views

Configure Firefox against malicious 302 redirect from a embedded image resource?

Today my friend demonstrated such a attack. I am using RenRen, a social networking website in a way very like Facebook in China. And I saw an article he wrote. Actually there is only an "image" ...
15
votes
3answers
709 views

Are official browser add-ons really safe?

Almost any browser addon/extension that I install on my Chrome or Firefox (be it Firebug, RESTClient, ...) warns me, saying: It [the add-on] can: Access your data on all website Access ...
2
votes
1answer
368 views

How Browsers prevents Malware and Phishing attacks

I want to know how phishing and malware protection features are implemented in modern browsers like Chrome, Firefox, IE etc. Are these features heuristic based, or do browsers maintain a list of ...
7
votes
2answers
853 views

Is “Fingerprint Check” enough to verify HTTPS certificates?

So I'm at place A, see this sign: and I'm writing the fingerprints to a piece of paper (this website is just an example): Ok. Then, I go to place B (other country, etc.) then I check this ...
6
votes
2answers
11k views

How do some sites detect AdBlock Plus? [closed]

For example this one disables function if AdBlock plus is detected, and it works. Is there a way to circumvent this?
10
votes
2answers
497 views

Any tool for scanning vulnerabilities in browser extensions?

I am scanning browser extensions of Chrome and Firefox for vulnerabilities. Is there any tool which would help me do this?
1
vote
1answer
195 views

Canvas and Firefox

I have received this notification on Tor Browser (Firefox). What is it?
11
votes
2answers
391 views

What should I look for when auditing a Firefox extension / plugin?

I've been asked to do a security audit on a Firefox add-on developed by a third party. I am a web developer with a reasonable grasp of JavaScript but am not a browser security expert. What kinds of ...
3
votes
4answers
653 views

FireFox's restore previous session restores logins authenticated by server's sessions

In a website I'm building when I login, close FireFox, open FireFox and try to go to the website again I must login again (as expected) BUT if I select "Restore Previous Session" I am logged in again. ...
16
votes
3answers
1k views

What security risks does Firefox 19's built-in PDF reader (pdf.js) bring?

Firefox 19 ships with pdf.js as the default PDF reader. One of the main stated goals is to reduce the exposure of users to the often vulnerable Adobe PDF reader/plugin. So what new risks does pdf.js ...
1
vote
2answers
12k views

Error code: sec_error_untrusted_issuer

I need help with a security issue concerning this code that has just been popping up recently as I visit my favorite websites. Based on some past history I KNOW something is not right, and I am not ...
15
votes
4answers
687 views

Firefox pre-downloading

I've found out that if you download a file with Firefox, a similar window as this one pops up (in dutch in my case): ("Bestand opslaan" = "Save file") However, the file is already being ...
0
votes
1answer
1k views

Retrieving saved password from Firefox on Linux [closed]

I know there are ways to get the cookies from browsers in Windows and retrieve and decrypt saved passwords from them. Is there a similar way to do so on CentOS?
5
votes
1answer
205 views

Is this a security flaw in Firefox 18.0?

I had a couple of .mht files which opened in IE, a browser I never use. I renamed their extension to .HTML to run it in Firefox. When I opened the file in Firefox, Firefox created new tabs endlessly. ...
4
votes
2answers
144 views

Can webpages recognize that I saved my password?

If you save your logins in Firefox, username and password are auto-filled-in in corresponding webpages as soon as you visit them (if you have more than 1 account saved, you'd have to select a username ...
1
vote
2answers
252 views

Is it possible to block third party cookies but allow them when they are first party?

I have been using Cookie Monster in Firefox for a while now to great satisfaction. However, I haven't found a way to allow cookies like Google's on Google's services but block them when I visit other ...
5
votes
5answers
549 views

HOWTO : Email encryption in a browser

I have read about encryption and I think it's a good idea for me to encrypt my email. I run ubuntu 12.10 and use Firefox for browsing. In my quest for learning how to use gmail/hotmail to send and ...
-1
votes
2answers
570 views

Modifiy Webbrowser User Agent to what? [closed]

I originally have this useragent (normal DesktopPC): Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:16.0) Gecko/20100101 Firefox/16.0 but if I usually modifiy it to: New -> String ...
3
votes
2answers
140 views

Why firefox shows some connections are not secure?

I am using internet by connecting mobile phone to my laptop using usb. From yesterday,my browser (firefox) shows for all most all website. Why this happen? How can i solve this?