site Search:


 
    All Forums Hot Topics Gallery






how-to block ads


 
Search Topic:
Uniqs:
9414
Share Topic
Posting?
Post a:
Post a:
Links: ·Hijack This logs? ·Panda Free Tools ·Vundo Removal
page: 1 · 2 · 3 · 4 · 5 · 6
AuthorAll Replies


FF4m3

@bhn.net

Firefox 'New Tab' Feature Exposes Users' Secured Info

Firefox 'new tab' feature exposes users' secured info: Fix promised:

Privacy-conscious users have sounded the alarm after it emerged the "New Tab" thumbnail feature in Firefox 13 is "taking snapshots of the user's HTTPS session content".

Mozilla acknowledged that the behaviour was undesirable and promised a patch. In the meantime, the browser and email client firm points privacy-conscious users towards various workarounds, as a statement (below) explains.

We are aware of the concern and have a fix that will be released in a future version of Firefox. Mozilla remains resolute in its commitment to privacy and user control. The new tab thumbnail feature within Firefox does not transmit nor store personal information outside the user's direct control.

The new tab thumbnails are based on users' browsing history. All information is contained within the browser and can be deleted at any time. Users can also switch back to using blank new tab screens by clicking the square icon in the top right corner of the browser. That will change the default preference to show a blank page, rather than the most visited websites when a new tab is opened.

Users who share their computer or use Firefox on a public computer should follow best practices for protecting their privacy by utilizing the built-in privacy tools in in Firefox, such as Private Browsing Mode.
Firefox 13 was released on 5 June, adding new features including updated new tab and home tab pages. The updated new tab page feature is broadly akin to the Speed Dial feature already present in other browsers and displays cached copies of a user's most visited websites.

Users can disable the 'New Tab' feature by making the above shown changes in about:config.

art22gg
Premium
join:2005-02-16
Courtenay, BC
kudos:5

Wow...Thanks for that...Made the changes...
I also think this should be posted in the Mozilla forums in case someone misses it here!!
Will reference it...



DownTheShore
Stronger Than The Storm
Premium
join:2003-12-02
Beautiful NJ
kudos:12

reply to FF4m3
Doesn't look like the Pale Moon iteration of FF has this feature to begin with.



therube

join:2004-11-11
Randallstown, MD

reply to FF4m3

Click for full size
At what point does it capture the thumbs?
Might it have captured my BoA login screen with my account number filed in?

To me, it's like, do I care? (Not.)

(Would you rather it be logging https: or my porn sites .)


AVD
Respice, Adspice, Prospice
Premium
join:2003-02-06
Onion, NJ
kudos:1

chrome and browser in android have a problem with incognito mode.



sivran
Opera ex-pat
Premium
join:2003-09-15
Arlington, TX
kudos:1

reply to FF4m3
Title's somewhat confusing, I came in here wondering how the heck could opening a new tab expose info, only to find out it's about Firefox's half-assed Speed Dial.

Silly Firefox not stopping to think, "maybe we shouldn't add https sites to this."
--
Think Outside the Fox.



planet

join:2001-11-05
Oz
kudos:1

Doesn't seem to be present in Fx ESR 10.0.5 either.



rcdailey
Dragoonfly
Premium
join:2005-03-29
Rialto, CA
Reviews:
·RoadRunner Cable

reply to FF4m3
I clicked on the square in the upper right corner of the screen and got the blank new tab screen back. I then looked at about:config and I saw that the new tab option (browser.newtabpage.enabled) is user set to false now. That appears to take care of the issue as described. I left it as user set and closed about:config.
--
It is easier for a camel to put on a bikini than an old man to thread a needle.


HarryH3

join:2005-02-21
kudos:1

reply to FF4m3
Thanks for the update! I don't use that "feature" anyway so it's now disabled.



goalieskates
Premium
join:2004-09-12
land of big

reply to FF4m3
duplicate post, sorry



goalieskates
Premium
join:2004-09-12
land of big

reply to FF4m3

quote:
We are aware of the concern and have a fix that will be released in a future version of Firefox.
I'm sure it wasn't deliberate, but this is a good example of why they need to slow down their release schedule a little. You can't just say "oops" and count on the user base all getting the word they need to change a setting.

After all, with silent updates Mozilla took responsibility for security, and they pushed the hell out of FF13 with dire warnings about same.


therube

join:2004-11-11
Randallstown, MD

reply to planet
> Doesn't seem to be present in Fx ESR 10.0.5 either.

It wouldn't be.
ESR is feature frozen, only receiving security fixes (generally).



FF4m3

@verizon.net

reply to planet

said by planet:

Doesn't seem to be present in Fx ESR 10.0.5 either.

the "New Tab" thumbnail feature in Firefox 13


Mele20
Premium
join:2001-06-05
Hilo, HI
kudos:4

reply to FF4m3
Where did the ridiculous name "new tab thumbnail" come from? It is Fx's idea of Speed Dial (which I hate and turned off immediately in browsers that have it). All tabs already have thumbnail don't they in Fx? They do in SeaMonkey. (I use TBE 3 and related extensions on Fx so I have thumbnails via one of those extensions so I don't know what plain Fx has but I assume it has thumbnails already). This new feature should have a better name. Speed Dial has zero relationship to thumbnails on tabs.
--
When governments fear people, there is liberty. When the people fear the government, there is tyranny. Thomas Jefferson



Dude111
An Awesome Dude
Premium
join:2003-08-04
USA
kudos:11

reply to art22gg

 

Wow usually they arent that careless!!! (Thier spying cant be detected by end users)



Its good someone noticed this


Blackbird
Built for Speed
Premium
join:2005-01-14
Fort Wayne, IN
kudos:3
Reviews:
·Frontier Communi..

said by Dude111:

Wow usually they arent that careless!!! (Thier spying cant be detected by end users)...

So, if the code's open source and end users can't detect spying, on what factual basis do you know they do (spying on users, that is)?
--
"Is life so dear, or peace so sweet, as to be purchased at the price of chains and slavery? Forbid it, Almighty God!" -- P.Henry, 1775


Dude111
An Awesome Dude
Premium
join:2003-08-04
USA
kudos:11

Well with all NEWER software you gotta assume some type of spying is going on.... (ESPECIALLY FROM MICROSOFT)



Blackbird
Built for Speed
Premium
join:2005-01-14
Fort Wayne, IN
kudos:3
Reviews:
·Frontier Communi..

said by Dude111:

Well with all NEWER software you gotta assume some type of spying is going on.... (ESPECIALLY FROM MICROSOFT)

But what is your factual basis for your assertion that some type of spying is going on in Firefox? (Particularly since this is not a Microsoft browser, and in fact is built with open-source code that anyone can inspect.)
--
"Is life so dear, or peace so sweet, as to be purchased at the price of chains and slavery? Forbid it, Almighty God!" -- P.Henry, 1775

LondonOntGuy

join:2004-05-12
London, ON

reply to FF4m3

Re: Firefox 'New Tab' Feature Exposes Users' Secured Info

So tell me, why do people continue to 'update' Firefox?

Mele20
Premium
join:2001-06-05
Hilo, HI
kudos:4

A lot of folks have Fx 10 Enterprise which is frozen except for security updates. It doesn't have new tab and won't have all the crap that is to soon be foisted on Fx users who are on the regular update channel.
--
When governments fear people, there is liberty. When the people fear the government, there is tyranny. Thomas Jefferson

page: 1 · 2 · 3 · 4 · 5 · 6

Wednesday, 19-Jun 18:25:26 Terms of Use & Privacy | feedback | contact | Hosting by nac.net - DSL,Hosting & Co-lo
over 13.5 years online © 1999-2013 dslreports.com.
Most commented news this week
Hot Topics