About this trail:
If you use Firefox all day, as I do, you may have mastered a few of the navigational tools it offers, but there are a lot of them under the hood. You can be faster and more efficient with the browser if you learn some easy ways to use your mouse and keyboard to navigate. In this post, I’ll round up 10 tips for more efficient surfing. Quite a few of these will work in other browsers as well.
1
If you use Firefox all day, as I do, you may have mastered a few of the navigational tools it offers, but there are a lot of them under the hood. You can be faster and more efficient with the browser if you learn some easy ways to use your mouse and keyboard to navigate. In this post, I’ll round up 10 tips for more efficient surfing. Quite a few of these will work in other browsers as well.
2
by Matthew posted on January 25, 2008 7:55 am
The Mozilla Security Blog has a post concerning a vulnerability that exists in the Firefox browser even when fully-patched. The vulnerability relates to extensions installed for Firefox that are “flat” rather than contained within a .jar.
A “flat” extension is different because it allows someone to travel outside the extensions directory to locations that are known about on a hard drive. An attacker could therefore explore what other software a machine has installed using this vulnerability. That, in itself, is not a threat, but it then allows that attacker to attempt to use vulnerabilities in those other pieces of software they know you have on your machine.<\/p> <p>The blog post states:<\/p> <p><em>A visited attacking page is able to load images, scripts, or stylesheets from known locations on the disk. Attackers may use this method to detect the presence of files which may give an attacker information about which applications are installed. This information may be used to profile the system for a different kind of attack … Users are only at risk if they have one of the “flat” packaged add-on installed. Examples of popular add-ons that are vulnerable include: Download Statusbar and Greasemonkey. <\/em><\/p> <p>The vulnerability was originally discovered on <a target="_new" href="http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/">hiredhacker.com<\/a> before being detailed on the Mozilla Security Blog. A comment posted in response to the blog entry by Girgio Maone points out that the vulnerability can be stopped by using the NoScript extension, although this has not been verified yet by Mozilla.<\/p> <p>Read more at <a target="_new" href="http://www.pcpro.co.uk/news/159300/mozilla-admits-firefox-extension-threat.html">PC Pro<\/a> and the <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=413250">Mozilla bug report<\/a>.<\/p>
3
This article applies to Firefox and Thunderbird. Note: SeaMonkey 2 (not yet released) can also be started in Safe Mode. Safe Mode is a debugging startup mode where all added extensions are disabled and the default theme and toolbar settings are used. Note, however, that all available plugins are used and any changes made to options and preferences remain in effect. In Firefox, Safe Mode includes troubleshooting options such as the ability to reset toolbars, bookmarks and preferences. [1] Contents [hide] * 1 Starting Safe Mode o 1.1 Windows o 1.2 Linux o 1.3 Mac OS X * 2 How to know you're in Safe Mode o 2.1 Thunderbird o 2.2 Firefox * 3 Safe Mode options in Firefox o 3.1 Buttons * 4 See also
4
This tutorial is a companion to the Safe Mode debugging tutorial. It describes effective procedures for isolating problems caused by incompatible, poorly written, or corrupted add-ons and extensions. I used it to solve a problem.
5
An essay I wrote detailing various ways to install the DOM Inspector and Talkback Quality Feedback Agent in Firefox.




