Firefox security "hole"

coyote · Joined: 28 Jul 2004 Posts: 2353 Location: London

I found this.

http://habaneronetworks.com/viewArticle.php?ID=122

I have done some reaserch on this and it is true!. Follow the instructions on this web page to patch the problem. Have a look here to find out more.

http://secunia.com/advisories/14163/
http://www.theregister.co.uk/2005/02/07/browsers_idn_spoofing/
http://techrepublic.com.com/5100-10595_11-5567461.html?part=rss&tag=feed&subj=tr

Spode · Posted: Wed Feb 09, 2005 1:55 pm Post subject:

Where is the fix? In the top URL? My eyes aren't working very well today...

coyote · Joined: 28 Jul 2004 Posts: 2353 Location: London

It's at the bottom of the page, I have copied it here for you, but please read the whole thing.

Mozilla has offered a solution to the problem, which involves a tweek to the browser. Follow these steps to Disable Internationalized Domain Names in Mozilla products.

Open a new brower window and in the address bar type: about:config
A window will come up with all the settings of Firefox, in the filter area, type IDN and hit enter.
You will now see, network.enableIDN double-click this line to set the value to false.
Close the browser for the change to take effect.

Sveneric · Joined: 27 Oct 2004 Posts: 42

This solution doesn't seem to have worked for me, page still loads with network.enableIDN set to false. Browser has been restarted, even rebooted pc.

coyote · Joined: 28 Jul 2004 Posts: 2353 Location: London

I have just tried it again and it has worked for me. Try again and be careful to follow the instructions to the letter.

This is the home page of Habanero Networks, run by a really helpfull guy buy the name of Jay Calvert.

Have a look at this website, it,s full of useful things.

http://habaneronetworks.com/index.php

Mike · Joined: 05 Apr 2003 Posts: 1037 Location: Southampton, UK

mneh, doesn't work for me either.....

flushed my cache too

coyote · Joined: 28 Jul 2004 Posts: 2353 Location: London

I'm sorry, but it does work!

I have rebooted my machine and tried it again. when I try to get on to the bogus paypal site that says meoww, all I get is "paypal.com could not be found, please check the name and try again." With an OK button at the bottom of the box.

I can't understand why it doesn't work for you, I'm normally useless at doing these things, but I really had no trouble!

Lorna · Joined: 04 Apr 2003 Posts: 1280

Worked for me.

Sveneric · Joined: 27 Oct 2004 Posts: 42

Ok got it to work, wasn't opening a new browser window. First time tried it in a new tab. Then tried in first window i'd opened.

ClubBarf · Joined: 26 Apr 2003 Posts: 2135 Location: London, UK

If the instructions don't work for you, close all browser windows and find/edit your compreg.dat file. Remove all entries (there's probably 2) that mention IDN. Next time you open firefox, the problem should be fixed.

coyote · Joined: 28 Jul 2004 Posts: 2353 Location: London

Thank Buddah for that, I was about to get my coat!

Spode · Posted: Wed Feb 09, 2005 5:55 pm Post subject:

Here, take mine!

coyote · Joined: 28 Jul 2004 Posts: 2353 Location: London

Ok, thank's Spode, Bye Bye.

lawrencetao · Posted: Wed Feb 09, 2005 6:24 pm Post subject:

Coyote is leaving - and as a final note of spite includes a greengrocers' apostrophe in his last post, no. 838. We're all very sad. Twisted Evil

danrok · Joined: 01 May 2004 Posts: 262 Location: GB

ClubBarf · Joined: 26 Apr 2003 Posts: 2135 Location: London, UK

coyote · Joined: 28 Jul 2004 Posts: 2353 Location: London

Spode, thank you for the loan of the coat, it was so nice I nearly kept it. Sorry if I spilled some pizza down the front, I always was a messy eater.

Mrs. Coyote and I have been out on a mystery shopper thingy where they pay £20 towards a Pizza Express and all you have to do is answer some questions about the resteraunt? or what ever you want to call it. PE is very poor value and the food varies from just about ok to terrible! Pizza hut is so much better and more of it.

Lawrence, anyone would think you wanted to get rid of me, and sorry, the apostrophe was a leftover from working in a greengrocer and having to write on the windows and blackboard! (The extra apostrophes are traditional) There was no spite in it? What the hell is an 838?

CB, I'm Intreagued, what is this Croydon thing?

ClubBarf · Joined: 26 Apr 2003 Posts: 2135 Location: London, UK

coyote · Joined: 28 Jul 2004 Posts: 2353 Location: London

Oh yes, I remember, the Croydon/London thing. LOL

Post count, I never bother to look at that, does it matter?

I think Mrs Coyote is going to the Greenwich one after work next week.
I hope that one will be better for her. Not too far from where she works now. She will be taking an old work mate this time as it's a bit far for me to travel all that way in one evening.

Thank's CB. Smile

ClubBarf · Joined: 26 Apr 2003 Posts: 2135 Location: London, UK

Hey, like, no problemo, buddy!

Wink