firefox plugin security hole

k-dub · 2005-03-01 04:04:28

http://www.mozilla.org/security/announc … 05-27.html

i3839 · 2005-03-01 14:43:54

Michael Krax's "Fireflashing" example demonstrates that an attacker can open about:config in a frame, hide it with an opacity setting, and if the attacker can get the victim to click at a particular spot (design some kind of simple game) you could toggle boolean preferences, some of which would make further attacks easier.

I don't know, but somehow this makes me only laugh and doesn't scare me at all.

jerem · 2005-03-01 14:57:25

Next Firefox version is supposed to have improved support against phishing and fake sites that make these exploits still possible.

JGC · 2005-03-01 23:37:59

compiling 1.0.1 now, hope to have it in the repositories tomorrow (no, I don't have access to it :X)

skoal · 2005-03-02 00:54:46

This information is good to know, but I think I share i3839's sentiments. Hell, I seem to wipe my computer clean every 3 months anway. If you want to hack my box, just "pm" me and I'll give you my IP and root password. No point in making things difficult for either of us...

cactus · 2005-03-02 01:03:09

skoal wrote:

If you want to hack my box, just "pm" me and I'll give you my IP and root password. No point in making things difficult for either of us...

:?:
With a name like skoal, I was surprised your root password is "LEVI#garrett"

skoal · 2005-03-03 01:28:23

cactus wrote:

With a name like skoal, I was surprised your root password is "LEVI#garrett"

Yeah, you got me. However, I typed "w -f" last nite and saw you rooting my machine. By the way, those videos on my `/home/vids` partition aren't mine. I got those from Phrakture's box awhile back when I rooted him.

The best thing about you rooting my machine is...I got your IP now sucker...

muahahhah...
muahahahahaaha...

damn, here I go again...

cactus · 2005-03-03 01:30:32

We don't just have webs of trust, we have roots of trust.

skoal · 2005-03-03 01:37:15

cactus wrote:

We don't just have webs of trust, we have roots of trust.

Yes, indeed. Great concept too. Cactus and Skoal = shared root access = parallel computing distributed system. I just noticed my CPU usage jump to 98% use...lay off my "mp3"s homey...

Dusty · 2005-03-03 02:03:42

Like me, you guys have too much time on your hands.

skoal · 2005-03-03 02:24:16

Dusty wrote:

Like me, you guys have too much time on your hands.

Yeah, I'm knocking off a few "cold ones" anyway for the next hour or so...

I've earned it...been in the office for 12 hours. Plus, television sux and I got this wireless keyboard on my lap with a 5 Mbit pipe to the internet. What would you do?

cactus · 2005-03-03 03:50:22

skoal wrote:

I've earned it...been in the office for 12 hours. Plus, television sux and I got this wireless keyboard on my lap with a 5 Mbit pipe to the internet. What would you do?

Well, I couldn't do it with a keyboard on my lap, I can tell you that much..

skoal · 2005-03-03 06:54:41

cactus wrote:

Well, I couldn't do it with a keyboard on my lap, I can tell you that much..

That hasn't stopped me before...

You're talking about getting up from the chair and grabbing another "cold one" from the fridge, right?

muahahha...

Arch Linux

#1 2005-03-01 04:04:28

firefox plugin security hole

#2 2005-03-01 14:43:54

Re: firefox plugin security hole

#3 2005-03-01 14:57:25

Re: firefox plugin security hole

#4 2005-03-01 23:37:59

Re: firefox plugin security hole

#5 2005-03-02 00:54:46

Re: firefox plugin security hole

#6 2005-03-02 01:03:09

Re: firefox plugin security hole

#7 2005-03-03 01:28:23

Re: firefox plugin security hole

#8 2005-03-03 01:30:32

Re: firefox plugin security hole

#9 2005-03-03 01:37:15

Re: firefox plugin security hole

#10 2005-03-03 02:03:42

Re: firefox plugin security hole

#11 2005-03-03 02:24:16

Re: firefox plugin security hole

#12 2005-03-03 03:50:22

Re: firefox plugin security hole

#13 2005-03-03 06:54:41

Re: firefox plugin security hole

Board footer