Firefox is a Web browser that is smaller, faster, and in some ways more secure than the Netscape browser from which much of its code was derived.

learn more… | top users | synonyms

2
votes
2answers
45 views

ssl_error_bad_certificate_domain, does Firefox still validate the certificate? [duplicate]

I have a private NAS device. It uses a self-signed SSL certificate. I can import the cert into Firefox and everything works as long as I'm accessing the device from somewhere on the internet. SSL ...
0
votes
0answers
31 views

Restrict FireFox to specific sites [migrated]

There are a few particularly pernicious sites that I actually use who also monitor users activity everywhere online, mostly just Facebook, but every so often I'll log into a Google service. I'll ...
1
vote
1answer
68 views

What Firefox settings should be changed from factory defaults to ensure privacy vis-à-vis Mozilla?

Besides turning off everything in Edit/Preferences/Advanced/Data Choices and browser.newtabpage.directory.ping browser.newtabpage.directory.source browser.safebrowsing... ...
1
vote
1answer
119 views

Does the browser still stores the website you visited Private Browsing [incognito Firefox]?

As they clearly state in their website they mention that What does Private Browsing not save? Visited pages: No pages will be added to the list of sites in the History menu, the Library window's ...
0
votes
2answers
78 views

Browser Updated, yet still vulnerable to POODLE

So here's a situation, some of my company's partners notified us that they will be entirely disable their server's SSLv3 support. This prompts my superior to take this chance to update our operation ...
1
vote
1answer
632 views

Untrusted connection visiting https://www.opensource.apple.com/

Somebody on Stackoverflow posted some code from https://www.opensource.apple.com/ When I click this link in Firefox (36.0) it says "This Connection is Untrusted". But other people on that thread on ...
1
vote
0answers
36 views

Making the Firefox key and CSR creation process transparent

Background I was a bit surprised that several CAs do not allow anymore to send a plain old CSR in text form to them which was created in the classic fashion with OpenSSL or similar. But this would ...
0
votes
1answer
73 views

Are firefox bugs cross platform? [duplicate]

I use Ubuntu and last firefox version. I opened an image with firefox, and a crash occurred. Let's assume it's a crafted jpg to run an exploit, and execute arbitrary code. To sum up: (1) Firefox ...
-1
votes
1answer
130 views

Fingerprint scanner browser support [closed]

I need to implement fingerprint scanning for all the users in a secure web app. Do fingerprint reader support chrome or firefox? From my google search they all seems to only be supported by IE. All ...
9
votes
2answers
442 views

How to improve the security and privacy of Firefox

What would be a sensible approach to enhance the security and privacy of Firefox? I did not find a question about this and I feel that some guidelines for casual web users would be handy. Currently ...
1
vote
0answers
28 views

How is the random string of Thunderbird's profile folder generated? [closed]

As per this link, Thinderbird creates a folder by name in the format ".default” where ”” is an eight digit string randomly generated by Thunderbird. But how is it generated? Which random generator ...
3
votes
2answers
103 views

Security of Firefox extensions such as Mailvelope

I am asking these question because I am not very familiar with javascript or the Firefox plugin/extension system. The specific context is the Mailvelope pgp extension but the questions are general and ...
-1
votes
2answers
90 views

Is Firefox on Ubuntu less secured (does it not confine Flash)?

Ubuntu Linux makes it easy to install Flash as soon as you encounter it. Just like Firefox on Windows really! Installing it on Ubuntu even provides security updates through the standard OS method. ...
1
vote
2answers
105 views

How to create secure portable firefox?

When I need to access our school web portal I need to access it with my certificate (pfx). Since certificate needs to be installed in browser, I'm thinking (out of security reasons) to create a ...
11
votes
2answers
799 views

How safe is it to use developer's version of the browsers [closed]

I have heard that the developer versions of browsers (chrome and firefox) are less secure than stable versions of them. Is it true? Is there any sense in using developer editions of browsers for ...
3
votes
1answer
379 views

How does firefox sync password recovery work?

According to Mozilla Sync-new-security-model, Firefox servers are not able to decrypt your sync data without your password. So I figured that, the browser generates a key from your password, encrypts ...
2
votes
2answers
171 views

Why Google Chrome complains about mozilla.org identity?

On a "brand new" (but fully updated) Windows XP installation (an Asus EeePC that I restored to factory setting and than updated with all Microsoft's upgrades) I installed a few days ago Google Chrome. ...
0
votes
1answer
131 views

Open source alternatives to tamper data

I'm developing a browser(firefox) plug-in which essentially checks for malicious input. My current approach is to store all input fields sent in GET/POST requests, try to heuristically determine ...
0
votes
1answer
61 views

Should one worry about using an outdated version of Firefox? [duplicate]

I have access (and the general public) to a computer lab with many workstations. Each workstation is identical in terms of software, hardware and the version of firefox. The version that is installed ...
2
votes
2answers
1k views

Invalid OCSP signing certificate in OCSP response

I want to open the following page in Firefox, and get an error. https://www.acm.nl/nl/ Secure Connection Failed An error occurred during a connection to www.acm.nl. Invalid OCSP signing ...
0
votes
0answers
42 views

How to store the Firefox trust setting in a PKCS12 file?

A PKCS12 file typically contains a user's private key the corresponding certificate and the certificate of the authority. Firefox imports all three items during an import of a PKCS12 file. When the ...
1
vote
0answers
77 views

Untrusted Certificate Not just on my computer?

yesterday I tried going to several websites but an "untrusted certificate" warning popped up several times. Eventually it went away. I am the latest version of Mozilla Firefox. I also connect to ...
1
vote
2answers
282 views

bit.ly is not safe and an attack page? [duplicate]

I click on a bit.ly link on a Youtube video and I was fronted with this. I have used bit.ly before and I entered the url manually, but Firefox came up with this. Any ideas?
7
votes
3answers
2k views

Is Firefox Password Manager less secure than LastPass?

After installing the LastPass password manager, I am presented with a login dialog including the option to "Disable Insecure Firefox Password Manager". (This option appears as long as the Firefox ...
1
vote
2answers
105 views

Do browser add-ons increase security risk due to possible vulnerabilities

A large amount of people use add-ons such as NoScript or AdBlock to avoid exploitation by malicious JavaScript from advertisments. This decreases the risk of becoming the victim of web-exploits. But ...
0
votes
1answer
274 views

Privacy of web surfing by Free gate

I am connected to the internet in the university where I don't want the administrator or any organization to find out some of the websites and contents I check in them. I'm afraid that they might ...
4
votes
2answers
1k views

How Do I Troubleshoot a Browser Hijack on a Mac?

My Mac is getting weird redirects with Safari and Chrome, however not with Mozilla Firefox. Since I cannot find software to do malware removal on Apple products or any good information, I am at a loss ...
2
votes
2answers
142 views

Steps after getting hit with malware or browser exploits on Xubuntu

Well, today I was browsing the internet and I suddenly got redirected to a chinese hosted malware site and firefox started going crazy. I checked the url on virustotal with my phone and it found other ...
1
vote
1answer
279 views

How safe are Firefox addons from official mozilla.org site?

I would like to install the Dictionary Pop-Up addon for Firefox. I usually don't install any addons, but this one looks especially tempting. I could not find any information on the Mozilla page, ...
1
vote
2answers
147 views

Xubuntu guest session security

lately I've been using the guest session on my xubuntu install because I am lazy and I was wondering what the security implications can be on the rest of the system if there is a web browser exploit ...
4
votes
2answers
131 views

How do I check if a script is safe to run?

I've been using NoScript for a couple of years now but I can't seem to figure out which scripts are safe to allow and most of the time I just temporarily allow all the scripts. Is there a way to check ...
1
vote
1answer
133 views

Is drive-by-download possible with NoScript?

I am using and getting my friends to use NoScript, and the argument I usually have to use to convince them is "It prevent website to infect you without you downloading something (by yourself)". But ...
0
votes
1answer
650 views

Firefox vs. Chrome extensions: Which are---ceteris paribus---more secure?

As an 'extension' to earlier questions on this topic (for instance here and here), What makes Firefox extensions (appear) more secure than Chrome extensions? Do they just appear to be more secure, ...
2
votes
0answers
201 views

Some http requests are not send encrypted by vpn! Why?

I subscribed to a VPN service recently, and installed wireshark to take a look at the traffic sent from my computer. Practically all of it goes through UDP protocol, encrypted. But there are two HTTP ...
1
vote
1answer
346 views

How to force browsers to accepte all further SSL certificates

I am using the last versions of IE, Firefox and Google Chrome web browsers on Windows 8. How can force these browsers to accept automatically the SSL certificates of any website I will visit ? I know ...
1
vote
1answer
56 views

Preventing tracking in browsers by setting HOME directory

Following worked on Ubuntu 12.04 using chromium and firefox browsers. I ran following command on terminal for both firefox and chromium browser HOME=/tmp/tmpdir firefox Both browsers promptly ...
6
votes
1answer
198 views

Why does Firefox split HTTPS request?

I am using Firefox browser version 28.0. To access https://www.yahoo.com, I put a proxy with a self-signed certificate in between and my client PC can access the HTTPS site. I then sniffed traffic in ...
-1
votes
1answer
93 views

Why deleting navigation history of firedfox is not reflected in places.sqlite file? [closed]

This file is where Firefox saves bookmarks and navigation history. I cleared the history navigation from the GUI of Firefox. I went back to places.sqlite and I found everything is still there. Why the ...
6
votes
3answers
2k views

How to sandbox Iceweasel (Firefox) on Debian? [closed]

Are there any tools for sandboxing Iceweasel (Firefox) on Debian systems? I'm mostly interested in tools distributed by Debian. (An equally trustworthy source would be second best.) (I suppose that ...
1
vote
1answer
329 views

How to harden a “dedicated” Firefox?

I want to set up an instance of Firefox to be used to access a strictly limited "white list" of websites (my bank's, my credit cards', etc.). How can I harden such an instance of Firefox to reduce ...
2
votes
4answers
576 views

How to block web-sites from viewing browsing history within firefox?

How can I block websites in Firefox from viewing my browsing history within my browser cache? For example; I've done some Google searches that Amazon is now starting to use to target advertise; the ...
0
votes
2answers
131 views

Can malware cause firefox to send GET requests?

Is it possible for a site to host malware such that if a certain page is accessed, Firefox is made to send additional GET requests? I'm seeing traffic for attacks coming from me that I haven't done. ...
0
votes
2answers
930 views

Firefox can import the .p12 format, but that contains a private key? Isnt this a security risk?

Everywhere I go, people tell me the private keys need to be kept away, possibly even locked into a safe then how come Firefox and other keystores expect you to give them a private key? Firefox is a ...
2
votes
1answer
97 views

How does the Perspective addon work?

I've just installed the Perspetive addon in firefox. When I'm vistit, for example google, Perspective says the following message: Warning: Perspectives has NOT seen this certificate consistently. ...
3
votes
1answer
359 views

Why warning sign when visiting https-website? [duplicate]

Sometimes when I visit a website using HTTPS, I get a warning sign next to the URL in my browser (see screenshot; look for yellow/orange arrow) and I wonder if this marks a potential threat or an ...
4
votes
1answer
1k views

Why did firefox remove Javascript injection on address bar?

Why did firefox remove Javascript injection on address bar? Someone said it was a security issue. What security issues could there be?
0
votes
1answer
40 views

programs or methods to review Internet browser applications for security [closed]

I've been tasked with doing a security review on a Firefox update, but we don't have any utilities that we can find. How would we go about running a security review on Firefox before pushing it to ...
0
votes
1answer
184 views

Preventing body onload xss that is injected as a request parameter

I have a rails 4.0.1 app that allows locale as a request parameter. Here is what i saw when i tested my app on firefox; ...
2
votes
2answers
1k views

Username and password stored under form data in Chrome Dev Tools

When I record the network tab in Chrome Developer Tools when logging in to my site I find that the username and password are stored in plaintext under form data. You can also find it in Safari, ...
-2
votes
1answer
254 views

Surfing web anonymously on a mac using Firefox SSH and Tor [duplicate]

I want to download and upload to the internet anonymously. I have successfully configured Forefox to access internet through a secure SSH tunnel service (and remote server). I use 'SSH Tunnel Manager' ...