Firefox 3.0.4 closes nine security holes

Thursday, November 13th, 2008

The Mozilla Foundation has released Firefox version 3.0.4 to close nine security holes. The developers rated four of the holes as critical because they allow attackers to execute arbitrary code on the victim's system. One of the critical holes is a classical buffer overflow that can be triggered via specially ...

Private Browsing in Firefox

Wednesday, November 5th, 2008

Today, a major feature was added to the pre-release versions of Firefox 3.1, called Private Browsing. I've been working for quite some time on this, so I thought it may be a good time to write about what this feature is and how to use it. As you may know, while ...

Firefox Extension Blocks Dangerous Web Attack

Wednesday, October 8th, 2008

A popular free security tool for the Firefox browser has been upgraded to block one of the most dangerous and troubling security problems facing the Web today. NoScript is a small application that integrates into Firefox. It blocks scripts in programming languages such as JavaScript and Java from executing on untrusted ...

NoScript mitigates HTTPS cookie hijacking attacks

Thursday, September 11th, 2008

The invaluable NoScript for Firefox plug-in just got a tad better. According to Giorgio Maone, the developer behind the popular browser extension, a new experimental feature called “Forced Secure Cookies” has been added to NoScript v1.8.0.5 to mitigate the HTTPS cookie hijacking attack vector discussed at DEFCON 16 last month. Source: http://blogs.zdnet.com/security/?p=1882

Private Browsing and the Enterprise

Wednesday, August 27th, 2008

The rumors were right: Internet Explorer 8 will have new privacy features akin to those in Apple Safari. What role should they play in the enterprise? InPrivate Browsing ("Private Browsing" was already taken by Apple) lets the user control whether or not IE saves potentially privacy-related data, including cookies (all cookies ...