Page 3 of 7 FirstFirst 12345 ... LastLast
Results 21 to 30 of 62

Thread: How to Secure Firefox

  1. #21
    Join Date
    May 2008
    Beans
    137

    Re: How to Secure Firefox

    Quote Originally Posted by bodhi.zazen View Post
    ...

    I personally do not like cookies and feel the invade my privacy. Thus I use a white list ...
    You are aware of Flash cookies, right? Have a look for/in this directory:
    /home/[username]/.macromedia

    There's also a new/better(evil?) way of storing data:
    http://developer.mozilla.org/en/docs/DOM:Storage

    Flashblock is another good add-on:
    https://addons.mozilla.org/en-US/firefox/addon/433
    http://flashblock.mozdev.org/

    Which would have saved a few folks from running into this clipboard issue:
    http://www.theregister.co.uk/2008/08...ard_hijacking/
    http://www.theregister.co.uk/2008/08...zing_epidemic/

    p.s. Some people even change their HTTP User Agent to get that little extra "security", but please note that installing add-ons (extensions) might open a can of worms (the a.m.o review process is a mess).

    Quote Originally Posted by Pyre_Vulpimorph View Post
    Concerning master passwords, how do you rate the FireFox Add-On, Password Maker, the one with the LotR-esque catchphrase "one password to rule them all"?

    It claims to be uncrackable, but I'm sceptical about such claims.
    I do happen to know the author/developer (as I work on the Mozilla codebase since 1999) and I can assure you that Eric's work is very good (Eric is also known to be a mozdev.org board member which are good people/funded by MoCo).
    Last edited by Master Chief; August 19th, 2008 at 03:46 PM.

  2. #22
    Join Date
    Apr 2006
    Location
    Montana
    Beans
    Hidden!
    Distro
    Kubuntu Development Release

    Re: How to Secure Firefox

    Quote Originally Posted by Master Chief View Post
    You are aware of Flash cookies, right? Have a look for/in this directory:
    /home/[username]/.macromedia
    Yes, I added a "one liner" about flash under "cookies" some time ago.

    There's also a new/better(evil?) way of storing data:
    http://developer.mozilla.org/en/docs/DOM:Storage
    I will have to look at at that ....

    Flashblock
    NoScript also blocks Flash , so why add Flashblock ?

    p.s. Some people even change their HTTP User Agent to get that little extra "security", but please note that installing add-ons (extensions) might open a can of worms (the a.m.o review process is a mess).
    Thanks for that.

    I do happen to know the author/developer (as I work on the Mozilla codebase since 1999) and I can assure you that Eric's work is very good (Eric is also known to be a mozdev.org board member which are good people/funded by MoCo).
    Hats off to all the developers
    There are two mistakes one can make along the road to truth...not going all the way, and not starting.
    --Prince Gautama Siddharta

    #ubuntuforums web interface

  3. #23
    Join Date
    May 2008
    Beans
    137

    Re: How to Secure Firefox

    Quote Originally Posted by bodhi.zazen View Post
    Yes, I added a "one liner" about flash under "cookies" some time ago.
    Ugh, which I obviously missed with my old dyslectic eyes. Sorry.

    NoScript also blocks Flash , so why add Flashblock ?
    First; I personally don't use any add-ons (extensions) at all, but I know that Flashblock implemented "Click-To-View" (an idea of someone I know which was picked up by Jesse Ruderman - who wrote the first public scripts for it, way back in time) and I'm unaware of NoScript using the same kind of trickery.

    Have you tried Flashblock? If not give it a try and let me know what you think of it.

  4. #24
    Join Date
    Apr 2006
    Location
    Montana
    Beans
    Hidden!
    Distro
    Kubuntu Development Release

    Re: How to Secure Firefox

    LOL Master Chief

    Yes, I have used Flashblock in the past and had no problems with it. I was "educated" by another user on these forums, DrSmall, re NoScript blocks Flash as well, so I no longer use Flashblock (Why run 2 extensions when 1 will do).

    NoScript is very nice, eliminates ads as well.
    There are two mistakes one can make along the road to truth...not going all the way, and not starting.
    --Prince Gautama Siddharta

    #ubuntuforums web interface

  5. #25
    Join Date
    Aug 2006
    Beans
    82
    Distro
    Kubuntu 13.10 Saucy Salamander

    Thumbs down Re: How to Secure Firefox

    Quote Originally Posted by bodhi.zazen View Post
    This combination is NOT recommended by the Adblock Plus author!

    [*]Hosts file. I prefer a hosts file as it protects more then just Firefox.
    An alternative is a new list for Adblock Plus that blocks more than 40,000 malicious websites. (Note: Only recommended for Firefox 3, NOT for Firefox 2!)


    Cookies

    Go to your Firefox menu -> Preferences -> Privacy Tab

    UNSELECT "Accept cookies from sites"

    All cookies are now blocked.
    The problem is that there are websites that require cookies in order to operate properly. A better way is to use a cookie manager. The best and most comprehensive one, IMHO, is CookieSafe (already mentioned in another post)- you should also visit its homepage.


    Java/Flash

    Java/Flash are a cross platform programing languages commonly used on the web. They add functionality, but also allow browser hijacks.

    Install NoScript
    You forgot to mention Javascript != Java. Actually most security leaks in Firefox have been related to Javascript.

  6. #26
    Join Date
    Apr 2006
    Location
    Montana
    Beans
    Hidden!
    Distro
    Kubuntu Development Release

    Re: How to Secure Firefox

    It is nice to see this thread getting a little more traffic / discussion.

    * Updated java => javascript

    Thanks for the suggestions everyone, keep them coming, I am sure this discussion has helped a number of people.
    There are two mistakes one can make along the road to truth...not going all the way, and not starting.
    --Prince Gautama Siddharta

    #ubuntuforums web interface

  7. #27
    Join Date
    May 2008
    Beans
    137

    Re: How to Secure Firefox

    The best thing people can do is to be cautious, and at all times.

    The good news is that Mozilla will change the world once more; because we are writing something that will eliminate the need for add-ons like:

    Flashblock, NoScript, Permissions manager, Content blockers and even our own Page Info.

    It is just a matter of time, and I am sure that Microsoft, Apple, Opera and the others will follow suite again... just like they did with tabbed browsing.

    Note: This is the first public posting about this feature. That's how hot this feature still is! And that's all I can say about it for now.
    Last edited by Master Chief; August 21st, 2008 at 03:17 PM.

  8. #28
    Join Date
    Nov 2007
    Location
    Central Coast, California
    Beans
    1,789

    Re: How to Secure Firefox

    Quote Originally Posted by benny bronx View Post
    I have used the updated version of this, cs lite, and it comes with a large blocklist of the usual tracking cookie suspects.
    cs lite++
    I do not use Ubuntu any more, nor have I ever used Gnome. Therefore, I tend to give advice that is distro- and DE-agnostic, which, while perhaps not the easiest way, will allow you to move freely between machines.

  9. #29
    Join Date
    Jun 2006
    Location
    Fairfax, VA
    Beans
    1,482
    Distro
    Ubuntu 6.06

    Re: How to Secure Firefox

    How is java a threat in Firefox running on Linux?

  10. #30
    Join Date
    Apr 2006
    Location
    Montana
    Beans
    Hidden!
    Distro
    Kubuntu Development Release

    Re: How to Secure Firefox

    Quote Originally Posted by tturrisi View Post
    How is java a threat in Firefox running on Linux?
    java script to be precise.

    http://it.slashdot.org/article.pl?sid=03/06/08/239237
    There are two mistakes one can make along the road to truth...not going all the way, and not starting.
    --Prince Gautama Siddharta

    #ubuntuforums web interface

Page 3 of 7 FirstFirst 12345 ... LastLast

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •