Tag Info

New answers tagged

1

Thanks to Milen I saw that I have had a version update of google chrome (from 38.0.2125.111 to 39.0.2171.71) just while downloading firefox. The Chrome's UI did the update without any notification, and this fooled me. Quite strange, from Google. I mean: would you like to know that an upgrade will change the security policy in the next execution of the ...


3

Check if you're running Chrome 39, there are major changes to the way some certificates are treated - e.g. Chrome 39 starts to penalize sites with long-lived SHA1 certificates This release warns about SHA1 certificates that expire in 2017. Versions 40 and 41 will increase the scope of the warnings to include certificates that expire in 2016. More info can ...


1

This is a pretty scary thing to be doing, as by definition, you are wanting to look at sensitive, user-submitted data on those computers. Sure, you might catch the occasional wrongdoer, but you're going to be capturing quite a lot of normal people's passwords, emails, etc. Which is probably opening a whole slew of liability to whoever owns the computer lab. ...


0

The checkbox in the screenshot refers to the Firefix Password Manager without Master Password, although it doesn't check and it works in both cases. I guess most of the time people use the password manager in Firefox without master password. They login to a site, Firefox offers to store the password, they agree, and that's it. This is the use case for most ...


1

In my opinion, Lastpass is referring to the Firefox password manager insecure when the user is not using master password for Firefox. Which won't be apples-to-apples comparison. Firefox uses 3DES for storing passwords and in case master password is not set, null ("") is used, which is insecure for sure. To read in detail about how Chrome, IE and Firefox ...


1

It does matter that much via the amount of vulnerabilities and exploits available that affect that particular version. For example, that version had 8 vulnerabilities, 3 of which were critical. From the current release, to that version, there were 53 CRITICAL vulnerabilities discovered. Developers won't go back and say: "Well the exploit on version 28 didn't ...


4

It seems their OCSP-cert has expired on September 10th. Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: C=NL, O=Digidentity B.V., CN=Digidentity Services CA - G2 Validity Not Before: Sep 20 10:40:55 2012 GMT Not After : Sep 10 ...


0

When I open this page in Chrome it opens normally. Why does Firefox object? Chrome only does very limited checking of revocations, especially it does not use OCSP any longer. Firefox instead does OCSP checks.



Top 50 recent answers are included