Jump to content

xper

Administrator
  • Posts

    3,317
  • Joined

  • Days Won

    10
  • Donations

    0.00 USD 
  • Country

    Croatia

Posts posted by xper

  1. NoScript, Firebug, and other popular Firefox add-on extensions are opening millions of end users to a new type of attack that can surreptitiously execute malicious code and steal sensitive data, a team of researchers reported.

    The attack is made possible by a lack of isolation in Firefox among various add-ons installed by an end user. The underlying weakness has been described as an extension reuse vulnerability because it allows an attacker-developed add-on to conceal its malicious behavior by invoking the capabilities of other add-ons. Instead of directly causing a computer to visit a booby-trapped website or download malicious files, the add-on exploits vulnerabilities in popular third-party add-ons that allow the same nefarious actions to be carried out.

    Of the top 10 most popular add-ons vetted by Mozilla officials and made available on the Mozilla website, only Adblock Plus was found to contain no flaws that could be exploited by a malicious add-on that relied on reuse vulnerabilities. Besides NoScript, Video DownloadHelper, Firebug, Greasemonkey, and FlashGot Mass Down all contained bugs that made it possible for the malicious add-on to execute malicious code.

    Many of those apps, and many others analyzed in the study, also made it possible to steal browser cookies, control or access a computer's file system, or to open webpages to sites of an attacker's choosing.

    Via ArsTechnica

  2. 1 hour ago, bphlpt said:

    both here and elsewhere, that MSFN was a joke and wasn't current,

    1 hour ago, bphlpt said:

    But I guess if the board traffic has been declining, which I believe is true in many/most technical forums

    You are probably right and because of that I'm thinking to completely shut down msfn.

  3. Quote

    It also seems unlikely that Ubuntu will be bringing its Unity interface with it. Instead the focus will be on Bash and other CLI tools, such as make, gawk and grep.

    Well... Only Command Line Interface tools. We have SecureCRT SSH for that.

  4. 2 minutes ago, jaclaz said:

    another is crashing the browser on access or preventing from logging in

    I tried Opera 12.15 for one hour and didn't have any issue with crashing or logging in/out.
    No problem with posting, editing etc.
    Main top menu doesn't work as intended. Not showing scroll menu.
    Will try 9.25 and see what can I do about it.

  5. 1 hour ago, jaclaz said:

    With the Opera I use, version 12.15 (as said Presto engine) though not as "old"

    More than 3 years old. I'm writing this from Opera 12.15 and I can see some differences. In a technology world we live today
    people can't expect at todays forum software works perfect with browsers old as 3-5-7 years.
     

    2 hours ago, ihateusernames said:

    This forum now causes Opera 9.25 to crash instantly

    Opera 9.25 release date 19 Dec 2007. Sure it's not working as intended with forum software released 2016.
     

  6. 14 minutes ago, JorgeA said:

    Is this behavior intended?

    Yes, it is intended. If a member makes a post or comment, and then makes another post or comment on the same topic within the specified timeframe before any other user, the posts will be merged. 
    Timeframe now is 3 hours.

    15 hours ago, xper said:

    Condensed view will be fixed tomorrow. Would be nice to edit "dreams" :-)

    Condensed and expanded view fixed. 

×
×
  • Create New...