Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror

Comment Re:MITM (Score 0, Interesting) 83

Maybe, unless you or someone else in your family or say a room mate who uses your computer didn't know any better and ran the easy setup CD that most/many ISPs include with a new modem.

Why would that matter?
Well most of those CDs are now auto installing a proxy TLS/SSL certificate into your root certificate store and then all of a sudden they are middle manning your TLS/SSL connections.

HSTS is supposed to stop this I think but it has its own problems.

Comment Re:NPAPI has started acting strange under FireFox. (Score 0) 134

Are you using any kind of HOSTS block?
If so search on:
Windows HOSTS "DNS Client"

All sorts of things start timing out for extended periods when your HOSTS file becomes to large for the "DNS Client" of Win7 forward not sure about Vista.

Are you running antivirus? Could also be DLL hooks "helpfullY" inspecting your traffic.

Comment Re:Wait, what? (Score 0) 236

They are both very important but I don't believe that is true.
I found an xpi extension on bugzilla before the first leadership change that I can't fucking find anymore.
It blocks silent cross-site Authentication Header cookies that you CANNOT normally block. They are SuperCookies. The site can silently "authenticate" without your knowledge creating a basic auth authentication "Supercookie" that is remembered and retained until browser exit (Or possibly remembered by your Session saver extension if so configured) and can be used to bypass the normal cookies that Mozilla has been making "easier" to disable, ha, har har, har.
The extension is called authtest.xpi.
Another that to my knowledge hasn't been ported to Firefox yet is WindowNameEraser which conditionaly clears window.name between transitioning sites. Please check out ip-check.info to see the authtest/Authentication Header and Window Name in action as a proof of concept. Also if not already known panopticlick.eff.org, and browserspy.dk. There are others but I don't have the exhaustive list handy.
Then there is geo location/positioning, canvas, webrtc, visited links (Still not fucking fixed and known about since Phoenix/Gecko/Firefox 1 ), cache. Still firefox aside from Torbrowser or Jondo is the most *secureable* browser out there. What ever security "gains" you get with Chrome OR Chromium fly out the window wrt ip-check.info.
What is a good site to share an extension on and forget about?

Slashdot Top Deals

Work is the crab grass in the lawn of life. -- Schulz

Working...