Firefox NOT Most Secure Browser Ever

Wednesday, February 9, 2005

A new vulnerability was announced for all Mozilla-based browsers. Apparently they are vulnerable to phishing attacks just like everyone else. Looks like the rose-colored glasses are coming off. Source: Neowin

5 Comments

No installer though :(

Steve Maine - Tuesday, February 8, 2005 8:50:00 PM
in address bar, type:

about:config

browse down to:

network.enableIDN

set value to false.

close browser, restart browser, fixed.

Frans Bouma - Tuesday, February 8, 2005 10:09:00 PM
Try fixing IE that way.

Christian Romney - Tuesday, February 8, 2005 10:35:00 PM
IE isn't vulnerable to this as they don't support the IDN feature. Firefox will be shipping version 1.0.1 with the IDN feature disabled by default.

Tyler Brown - Wednesday, February 16, 2005 8:14:00 PM
Interesting...it appears that IE's lack of "keeping current" actually helped it out on this one.

The actual flaw doesn't lie in the browsers themselves, it lies with IDN itself, so the powers that be at Verisign should be taken out back and shot (don't kill the messenger).

jayson knight - Sunday, February 27, 2005 10:19:00 PM

Comments have been disabled for this content.