Lee Harvey - Prepare! - Posts tagged by "".

Posts tagged with "noscript"

Zero-day vulnerabilities in Firefox extensions

Saturday, 21. November 2009, 01:10:36

BEeF, vulnerabilities, browser, security ...

One of the reasons behind Firefox's popularity is the availability of a vast library of extensions. Users install extensions to modify Firefox and make their browsing experience more user-friendly and powerful. The problem is, unbeknown to them, these extensions can also expose them to risk...

Zero-day vulnerabilities in Firefox extensions
http://www.net-security.org/secworld.php?id=8527

In essence, when you rely on multiple third-parties for your browser security, then you need to check for updates more frequently.

No comments

Time to disable Flash? Perhaps...

Friday, 13. November 2009, 03:35:54

flashblock, vulnerability, noscript, security ...

Slashdot just linked to a Foreground Security article that describes an Adobe Flash attack from any domain that allows file uploads, and browsing of said content.

No patch from Adobe currently exists, and according to them:

"Unfortunately, there is no easy solution. This issue is very difficult to solve without also breaking existing, legitimate content elsewhere on the web."

Don't expect a fix from Adobe anytime soon.

Most frightening is the fact that the majority of Internet users have Adobe Flash installed and enabled -- which means all these users are vulnerable to this attack.

Ironically, the Foreground Security article includes a Flash tutorial video. Phishing anyone?

About the only mitigation factor is to disable Flash:

If you use Opera, press [F12], uncheck "Enable plug-ins" -- until you actually need them.
If you use Firefox, download and install the FlashBlock and NoScript extensions.
Internet Explorer users should explore using Toggle Flash

Good luck.

No comments

Photos