Questions tagged [firefox]

Firefox is a Web browser that is smaller, faster, and in some ways more secure than the Netscape browser from which much of its code was derived.

Filter by
Sorted by
Tagged with
0
votes
1answer
46 views

Should I sign in to my accounts in Firefox on Kali Linux

I've unpacked a Kali Linux VM and am running it as a VM in my Windows 10 workstation. I'm using the host, Win 10 to browse but it's more convenient to use Firefox in Kali. Is it recommended that I ...
90
votes
6answers
14k views

Why does my IT department block Firefox?

We received a message from the IT bods this week stating: Summary of the issue: IT will disabling and blocking the use of the browser Firefox next Thursday the 03.12.20 on all IT managed devices. Due ...
2
votes
0answers
62 views

What is the threat-model of a malicious browser-extension accessing the data of *another browser-extension* that is security-critical?

Modern password-managers are moving towards a "fully-in-the-browser" model (see: historical RCE on LastPass, and now 1Password is also moving towards 1Password X as "the future" ...
0
votes
0answers
28 views

Browser with flexibility for tool integration

Browsers don't allow a JavaScript to spoof/modify 'Host' header. It's a part of a browser's security. For a regular user that is a feature, for me that is a limitation in a context of my tool which ...
2
votes
1answer
182 views

Firefox pretending to update itself, but actually not doing it, and thus being a risk for security - what am I missing?

I am a long-time Firefox user and remember that usually the UAC prompt popped up when Firefox updated itself. Some months ago (or is it years?), Firefox obviously changed the way it updates itself: I ...
6
votes
2answers
148 views

What impact does an installed extension have on the browser fingerprint (uniqueness)?

Motivation I want to develop a custom, local Firefox extension and investigate, if its installation has any impact on the browser fingerprint. Background Some time (years?) ago, there were articles ...
0
votes
0answers
38 views

Does enabling javascript from Google domains automatically nullify firefox privacy and tracking settings?

I run firefox with no-script and privacy and tracking protections as maxed out as I can, with the full gamut of addons (all a them "container" addons, as well as cookie cleaners, tracking ...
1
vote
0answers
37 views

What, if anything, are the consequences of temporarily enabling and then disabling WebRTC in Firefox?

For security and privacy purposes, it's best to keep WebRTC disabled if you aren't using it. Firefox makes this easy by simply setting media.peerconnection.enabled to false. Due to COVID-19, the use ...
4
votes
1answer
652 views

Effect of Firefox's “Responsive Design Mode” on the browser's fingerprint

Today I switched ON the "Responsive Design Mode" under the "Web Developer" Section of the Firefox menu, and from the dropdown menu selected "iPhone X/XS iOS 12". So now ...
1
vote
0answers
178 views

CA certificate somehow not taken by browsers on android [closed]

This is a follow up question related to this answer. In short: I am importing the self signed Root CA certificate into android system via Settings -> Security -> Trusted Credentials -> ...
0
votes
1answer
145 views

DNS spoofing protection in Chrome and Firefox

I'm using hostapd to setup a wireless access point and dnsmasq as a DNS/DHCP server. I defined in dnsmasq to reply with the IP of the access point (10.0.10.1) when it receives a query for www....
1
vote
2answers
262 views

Where to put SAN

Where SAN means: Subject Alternative Name. I feel I have a basic misunderstanding in which certificate the SAN stuff shall go: ca or server or both or what? It might be 3 Years or more in the past, ...
0
votes
1answer
83 views

What can be the risks of opening mdb files in windows using microsoft access? [closed]

I have download file.mdb from internet. When I click to open it, firefox tells me that mdb is an executable file and can harm my computer! How can this file harm my computer and is it just for mdb ...
1
vote
1answer
140 views

Firefox does not trust Burp Suite's certificates in case of accessing sharepoint online

I want to investigate requests/responses between firefox and some private mysite.sharepoint.com site which I could access using my microsoft's email and password. For this I've configured Burp Suite'...
1
vote
1answer
43 views

Why did browser authors not make 127.0.0.1/localhost-hosted webpages skip the referrer?

For a long time, I was so convinced that 127.0.0.1/localhost-hosted webpages, that is, with URLs such as: http://127.0.0.1/MySecretControlPanel/sensitive.php?stuff=goes&here=dude ... did not ...
0
votes
0answers
39 views

Domain Joined computer doesn't browser properly with any website with Let's Encrypt CA cert

Navigating to any website with Let's Encrypt CA cert and even after enabling the HTTPS Everywhere addon, I'm getting "Your connection is not private". Getting this error from all the browser except ...
0
votes
1answer
56 views

Are security scrutinies conducted by independent agencies on open source software like Ubuntu or Mozilla Firefox?

Any intentional malware injected into open source software by the same people who are developing them may eventually get known as the source code is open to the public. However, if the code base is ...
3
votes
2answers
358 views

Effect of Script tag inside HTML comment

I recently participated in a CTF and solution of that CTF is based on this weird behavior of browser. In First case when I am including script tag inside an HTML comment and without closing that ...
1
vote
1answer
110 views

Firefox: What would be more secure/private: storing session cookies or saving password in the browser?

I am wondering, assuming the latest version of Firefox, which of the following options would be more preferable security-wise (e.g. assess and/or password to user account will be stolen) and which one ...
0
votes
0answers
64 views

Firefox bypass proxy for some addresses - why?

I'm using the latest firefox on a ubuntu 18.04 OS. Today I noticed some outgoing connection which are bypassing my proxy server. For example: $ netstat -tpun tcp 0 0 my-local-ip:44214 ...
1
vote
1answer
348 views

What are the sources of “SEC_ERROR_REUSED_ISSUER_AND_SERIAL” errors when using self-signed x509 Certificates in PKCS#12 files?

As part of an internal Client/Server application, I have created my own (self-signed) Certificate Authority (CA), as well as both Client and Server certificates signed by my CA. Loading my CA ...
0
votes
1answer
247 views

Unknown Google Account Signed into Browser

An unknown Google account is signed into Firefox on my Arch Linux machine. The computer is in my apartment (where I live alone) and I lock the screen when I leave. Some observations: The unknown ...
0
votes
1answer
120 views

Youtube/Firefox access to my history

I recently noticed something weird. From time to time I watch on YouTube (Firefox) something political. In my case 'lastweektonight'(left) and 'StevenCrowder'(right), (because it is fun to see, where ...
0
votes
0answers
58 views

Customize default Prompt options (camera to share) when I trigger camera in Firefox with code development

I am having 2 cameras in my PC. When I try to trigger camera in firefox it always opens a permission prompt box with a webcam options. But I don't want to show the camera options in the prompt box. So ...
2
votes
0answers
370 views

Firefox SSL_ERROR_BAD_CERT_DOMAIN but the names are correct

Today I've create new certificates for my server (since the old ones were about to expire) using openssl with my own CA. I also used that as an oportunity to change the server's name because it was ...
5
votes
3answers
910 views

Why are many US Department of Defense certificates not trusted by Firefox?

There are a number of US Department of Defense (DoD) websites that I need to access on a regular basis (e.g., https://ataaps.csd.disa.mil/ and https://web.mail.mil) that Firefox issues a Warning: ...
40
votes
1answer
5k views

Can a browser extension (Chrome, Firefox, etc.) read the web console log?

I realized that my bank handles sensitive information in the web console log, so my concern is if any browser extension could read the log?
0
votes
2answers
688 views

Why does Firefox (version 71.0 (64-bit)) indicate “weak encryption” but Google Chrome (Version 79.0.3945.88) does not?

I read that Mozilla uses its own trust certificate store but does "weak encryption" have anything to do with whether the browser trusts the certificate? Has it got anything to do with the signature ...
9
votes
1answer
394 views

What would happen if some random webpage made an Ajax request for http://127.0.0.1/private.txt?

I run a localhost-only webserver (PHP's built-in one) for all my admin panels and whatnot on my machine. I'm worried that, if any random webpage has a JavaScript snippet which makes an Ajax call to ...
7
votes
3answers
626 views

Browser setups to stay safe from malware and unwanted stuff

I have to set up a browser to surf the internet. I'm trying to stay safe from malware as much as possible. (I already know that there's no way to stay 100% safe.) My idea is to use Firefox with these ...
0
votes
1answer
300 views

Purpose of Decrypting & Scanning HTTPS traffic

Navigating to the below URL link from the Mozilla Firefox and entering some website link and clicking on View, displays certificate Viewer chrome://pippki/content/exceptionDialog.xul After enabling ...
9
votes
5answers
9k views

Is Firefox's Lockwise secure?

I have lot's of passwords saved in Firefox Password Manager, now called Lockwise. I recently installed Opera Browser on my machine. It somehow managed to import all the history-data and form fields, ...
2
votes
1answer
138 views

Browser copy function overridden silently, is this security risk?

I came across a site which overrides copy functionality and injects current page url as paste value. I was trying to select couple of words and instead it copied the page link. Simple developer tools ...
9
votes
1answer
760 views

How well do current browsers handle certificate revocation?

I am a Firefox user and recently stumbled upon the Liu, Yabing, et al. "An end-to-end measurement of certificate revocation in the web's PKI." Proceedings of the 2015 Internet Measurement Conference. ...
1
vote
1answer
198 views

Is encrypting the FireFox folder with EFS protecting saved passwords in case of someone accessing the hard drive?

What I want to do: Use the "save password" feature in FireFox (on Windows 10) without using FireFox's master password feature. What I'm afraid of: Someone stealing my laptop or getting access to my ...
0
votes
1answer
144 views

Is there any way to mitigate against a compromised CA as a client on Firefox?

If I, as a client, connect to a server and there is a malicious certificate authority, how can the client protect against this CA and still connect to the site? If this isn't possible, how can the ...
0
votes
1answer
247 views

Is there a way to download the Firefox Phishing and Malware Protection list?

I'm building an app that needs to check bad websites and was wondering if there is a way to download the Firefox bad site list directly outside of the browser? The list is described in the Mozilla.org ...
0
votes
1answer
187 views

Are the privacy features of Firefox 69.0 complementary to PrivacyBadger 2019.7.1.1?

Are the privacy features (blocking of Trackers, Cookies, Cryptominers, Fingerprinters) of Firefox 69.0 complemantary to PrivacyBadger? or do they interfere with each other?
10
votes
2answers
2k views

How are Mozilla Firefox passwords encrypted?

As far as I know, current versions of Mozilla Firefox store the saved passwords (encrypted with 3DES) to the logins.json file meanwhile the keys are stored in key4.db (or key3.db in older versions). ...
1
vote
1answer
2k views

Localhost intercept not working for burp suite [closed]

I configured my Firefox proxy to send my php website traffic running on localhost to burp suite for intercept but its not intercepting anything.My firefox and burpsuite configurations here.I've tried ...
0
votes
1answer
104 views

Firefox Account - Export user data (GDPR)

Is there a way of exporting all user data associated with a Firefox Account? Yes? where can I request/download it? No? isn't right of access a legal requirement under the current GDPR ...
10
votes
1answer
834 views

Firefox bug permits stealing encrypted passwords: How is this possible?

It's my understanding that passwords I save in Firefox's Password Manager are encrypted and that setting a Master Password encrypts the encryption key used in this process. The Google hit for "...
2
votes
1answer
112 views

Firefox 68 — any changes affecting CSRF capabilities?

My Ubuntu 18 system did an upgrade to Firefox 68 (presumably from 67.x). I have a simple XSRF demo that I use for class --- the demo is extremely simple: I have a login program that sets a sessionid ...
6
votes
2answers
3k views

Did google chrome kill public key pinning?

I've read many articles talking about google chrome killing public key pinning in Chrome 67 (May 2018). See here, here, and here. However, I haven't found any information about whether or not they ...
0
votes
0answers
74 views

How to use browser bookmarks more securely?

I have been wondering in how far any tracking sites or other instances could gather information about me through my browser bookmarks (ie. in Firefox). An online search did not result in a lot of ...
0
votes
0answers
138 views

Why does Firefox keep offering “unreputable” add-ons and add-ons that they don't even review?

When I install an add-on to Firefox, choosing it from the ones I find by using the Tools / Add-ons menu, sometimes after a few days Avast pops up a warning that the add-on is "unreputable" and ...
0
votes
1answer
309 views

Firefox reports every HTTPS page as unsecure in Windows 7 for standard user

I started with looking at this this post as I have exactly the same issue. But I am not on a company network, after a proxy or anything special. I am at home with three computer where Firefox works ...
3
votes
1answer
158 views

What mechanism does Firefox use to remember the in-session logins, after entering the Master Password?

After I have entered my Master Password, does Firefox decrypt all the logins and store them somewhere? Or does it store the Master Password itself? Is the in-session period (more) vulnerable to attack?...
6
votes
1answer
159 views

Information obtained from executing Javascript math functions in browser

I came across interesting piece of javascript across few sites. It's executing Javascript math functions such as abs, acos, random etc. thousands of times - or four thousand times in my case, though ...
1
vote
1answer
226 views

How do I use never remember history in Firefox effectively? [duplicate]

Under Firefox - Privacy and Security, I can change my history settings to never remember, remember, or use custom settings. Right now, I have it set to remember history, under what circumstances is ...

1
2 3 4 5
7