gLoBpoR+aL©

Welcome to gLoBpoR+aL© !! gLoBpoR+aL© condemns racist boggers. gLoBpoR+aL© also condemns over-cencorship, hinderance to the freedom of speech, perpetration of fear and misuse of the rule of law to enhance control of a police state.

Tuesday, February 15, 2005

Geek Speak #4 - Security flaw found in Firefox

For those who use Mozilla Firefox, here's some bad news. Security company Secunia has found a spoofing security hole in almost every browser on the market, except, incredibly, Microsoft's Internet Explorer. The loophole could be used to spoof the URL displayed in the address bar, SSL certificate and status bar. I tested IE and Firefox with a spoofing test set up by Secunia. Indeed, Firefox was spoofed and IE returns an error page. Read more about the flaw below.

News Articles:
The Register
The Age

The actual advisory from Secunia, and the spoofing test.

2 Rantings:

  • IE always return error pages for everything it doen't know how to process.
    That still doesn't justify that IE is better.
    Morever, Mozilla is still only at it's first full version.

    My verdict: Screw IE. Mozilla is the way of the future.

    Blogger Jazzo said... at Wednesday, February 16, 2005 12:18:00 PM  

  • It's true that IE often (not always) return error pages when they encounter errors or problems while loading. Also, I did not say anywhere that IE is better. I only mentioned that amazingly, it wasn't affected this time round.

    My take on this is because it was so affected by spoofing scams in the past that most of the holes in IE have been discovered and plugged. Firefox and the other browsers are not necessarily safer in this aspect. They may just have less attacks in the past. Now the attacks starts coming as Firefox and other browsers gain market share and caught the attention of the people with ill-intentions.

    Finally, I must agree and say in chorus with you that Firefox (not Mozilla, just like it's IE and not Microsoft) is the way to the future. It has superior features that at least for now, it's the choice browser. =)

    Blogger Alvin said... at Wednesday, February 16, 2005 6:33:00 PM  

Post a Comment

<< Home