Firefox Security Flaw Affecting Gmail’s Users

Last week, security companies around the world spotted a new vulnerability in Mozilla Firefox which could allow the attackers to use a malicious JAR file to harm users’ computers. The security flaw is still there and moreover, it seems it affects most websites on the Internet including the super search giant Google. GnuCitizien wrote that Michal Zalewski from Google (you know, that famous hacker who joined Googleplex) required additional information about a potential exploitation over the company’s technologies. In addition, beford.org discovered a way to steal the Gmail contact list using a malicious JAR file especially created to take advantage of the Firefox vulnerability.

I’m not going to offer you more details about it but I’ll give you a tip on how to remain protected against attacks. You can always install the NoScript extension which was already updated to provide protection for this exploit. In case you never tried it, NoScript is an add-on designed to work with Mozilla Firefox which is supposed to disable the webscripts included on the websites you choose.

Obviously, you can always choose another browser to visit the Internet pages which will surely keep you away from the Firefox JAR attacks. But in case you’re a Firefox-addicted user, I think you can try signing out of your account but I’m not sure this would be 100 percent efficient. However, stay away from dangerous websites and unknown links which could attempt to steal your private Google information.

Now, since the flaw affects both Google and Firefox, I’m pretty curious to see which will be the first company to patch it. “Who’s fault? Both, Google for having open redirect issues and not fixing them, and Mozilla Corporation for failing to address this problem,” beford wrote.

Comments

Post a Comment

Popular posts from this blog

Convert Google Books to Sony Reader Format

When I bought my Sony Reader, I planned to buy e-books from Sony’s on-line ebook store. But I soon realized that a lot of ebooks are available on the internet for free. Project Gutenberg offers thousands of titles (mostly fiction) in txt format, while manybooks.net provides an impressive array of books in Sony format (as well as several other formats). The motherload of free ebooks, however, is books.google.com. The Google folks are busy digitizing every book they can get their hands on. As of this writing, they have reportedly digitized over 10,000 public domain books, which anyone can download for free in pdf format. But there is something screwy about the Google pdf files. My Sony Reader (PRS-500 model, purchased in December 2006) cannot read Google pdfs, and I understand that later models have the same problem. Recommended Technique for Google Book Conversion I have tried many techniques for adapting the Google pdfs to my Sony Reader and here is the best I have come up with: 1. sel
Read more

BIOS to pc performance

# BIOS Backup: Sometimes the BIOS program on your motherboard can become corrupt and your PC will not function properly. So, you need to always keep a backup of a good version of the BIOS on a floppy disc. If something ever goes wrong with the BIOS, you can flash (overwrite) it with your backup. The software used to backup or flash the BIOS is usually available on the motherboard driver CD or on the motherboard/BIOS manufacturer’s website. Refer the motherboard manual for step-by-step instructions on using the BIOS flash software. # Do not Detect Absent Devices: When a PC is started, the BOIS checks all available ports/connectors on the motherboard to identify devices attached to them. Usually, not all of these ports/connectors have devices attached to them and bootup time gets unnecessarily prolonged. For example, even if you have only one IDE drive on your PC, the BIOS will still check the other three IDE connectors. To avoid this delay, enter the BIOS Setup program and change the s
Read more

Use tough passwords but make them easy to recall

You can see whether your current passwords you do use more than one, right? are rated “strong” by using Microsoft’s online Password Checker. I bet you’ll be unpleasantly surprised by the results. The three keys to strong passwords are length, randomness, and use of different types of characters. Each additional character multiplies the potential combinations a brute-force attack must try. Random passwords use upper- and lower-case letters, numbers, and symbols. When at least three of these four categories are used, an eight-character password should suffice in most instances. According to the FrontLine security site, such a password would take a century or more to crack by a hacker using a single PC. The eight-character standard is also the minimum the Microsoft Password Checker deems “strong.” Of course, the more characters in your password, the safer you’ll be. If you wish to create your own password, use a sentence or phrase you can recall easily and then tweak it for each account.
Read more