Mozilla Wants to Monitor Firefox Use

Saturday, January 24th, 2009

Mozilla Labs, the research arm of Mozilla Corp., wants 1% of Firefox users to allow it to watch how they use the browser -- and the Web in general. "We need to know how people are using our products and using the Web," said Aza Raskin, the head of user ...

Google shuts off antiphishing feature in Firefox 2.0

Wednesday, January 21st, 2009

Although the two most-recent builds of Firefox 2.0, labeled 2.0.0.19 and 2.0.0.20, have omitted the defense, earlier editions of the browser were still able to query Google for a list of sites suspected of hosting identity theft scams. But Google is now shutting down the blacklist, said Mike Beltzner , ...

Reveal TinyURL Links

Thursday, January 15th, 2009

TinyURL is a very handy service for shortening long URLs but it can also be used maliciously.  Anytime somebody wants to hide where they are sending you they can easily generate a TinyURL and you will not know where you will end up.  It could be a phishing site.  It ...

Foxmarks Uses Vulnerable MD5 Certificates

Tuesday, January 13th, 2009

I decided to try the ever popular Firefox plugin called Foxmarks that lets you sync and back up your bookmarks and passwords across multiple computers.  I didn't feel comfortable using the password sync quite yet because it will take me a while to trust a 3rd party with that kind ...

Google’s Browser Security Handbook

Sunday, January 4th, 2009

This document is meant to provide web application developers, browser engineers, and information security researchers with a one-stop reference to key security properties of contemporary web browsers. Insufficient understanding of these often poorly-documented characteristics is a major contributing factor to the prevalence of several classes of security vulnerabilities. Although all browsers ...