Saturday, September 10 2005

Mozilla offers temporary fix for Firefox flaw. The patch protects against exploitation of a serious flaw by disabling the browser feature that contains the vulnerability. [CNET News.com]

If you run Firefox, which many of the visitors here do, you need to protect yourself against this vulernability in the way Firefox handles International Domain Names. This isn't the first time IDNs have been the root of a security problem (they still have a critical issue in the ability of nefarious agents to use IDNs for phishing purposes). Firefox is no longer a fringe browser, and has enough of a user-base that it is a likely target for criminal hackers.

The CNET article above appears to give a bogus link. Instead go to the source directly, at https://addons.mozilla.org/messages/307259.html.

   

Reader Comments

Add Comment

Name *:

Email Address:

(your email address is not displayed)
Website:

Comment *:



About the Author
Dennis Forbes Dennis Forbes is a Toronto-based software architect. While focused primarily on the .NET and SQL Server worlds, Dennis frequently ventures outside of this comfort zone into game development and image processing. He has been published in several industry magazines, has been quoted in the Wall Street Journal and has been interviewed by NPR.

He is a vice president and lead software architect at an innovative New York City hedge fund back-office services firm.

Dennis has been working on solutions for the financial, telecommunications, and power generation markets for over 15 years.





 

Dennis Forbes