Spyware Mozilla IE

[Costa]

Surfajuci primjetio sam da se pojavio i prvi spyware koji se instalira pomocu Mozille.
Na nekim stranicama koje sluze za download ilegalnih stvari prilikom downloada ukoliko koristite Mozillu pojavi vam se prozor za instalaciju "Free Access Plugin" ekstenzije. Samo stisnete Cancel i no harm done.

Ne bi ja bio ja kad ne bi to instalirao pa eto i zanimljive stvari. Instalira vam spyware zvan Bridge za IE

Obicna zla ekstenzija.

[tor]

Originally posted by Costa
Surfajuci primjetio sam da se pojavio i prvi spyware koji se instalira pomocu Mozille.
Na nekim stranicama koje sluze za download ilegalnih stvari prilikom downloada ukoliko koristite Mozillu pojavi vam se prozor za instalaciju "Free Access Plugin" ekstenzije. Samo stisnete Cancel i no harm done.

Ne bi ja bio ja kad ne bi to instalirao pa eto i zanimljive stvari. Instalira vam spyware zvan Bridge za IE

Obicna zla ekstenzija.

Ništa novoga za IE, a eto i na Mozilli...

[Costa]

Moze se procitati na http://www.mozillazine.org/ o cemu je rijec. Naravno cim su vidjeli za ovo napravljene su male promjene. Od sljedece verzije ce se moci staviti white/black lista siteva s kojih zelite mogucnost instaliranja ekstenzija.

Bas skidam zadnju nightly build verziju koja ima tu mogucnost.

Puno vike nizasto

Over the past few months, it has become apparent that many authors of malware (a category of malicious software that includes viruses and spyware) have started targetting Mozilla users. While it is not believed that any attackers have managed to exploit the XPInstall mechanism to install software without the user's consent, several sites have tried tricks such as repeatedly asking to install an XPI package when a page loads, taking advantage of the fact that many users will accept the installation to make the dialogues go away.

Fortunately, users of recent Mozilla-based browsers now enjoy several new security safeguards designed to protect against these sorts of attacks. During the 1.7 release cycle, Daniel Veditz developed a patch that blocks XPI installs from being triggered by a page load, preventing software installation dialogues from appearing as soon as a user visits a site (bug 238684). Later in the same release cycle, a whitelist of sites that are allowed to ask the user for permission to install software was implemented (bug 240552). The default whitelist for Mozilla 1.7 features mozilla.org, mozdev.org and texturizer.net (home of Firefox Help and Thunderbird Help). Mozilla Firefox 0.9 just allows update.mozilla.org (though this has since being expanded to the whole of mozilla.org).

The most recent Firefox nightlies feature a new user-interface to manage the XPInstall whitelist. When a user tries to install software from a site that is not on the whitelist, a thin non-modal yellow bar appears at the top of the content area, informing the user that the install has been blocked (bug 241705). A button allows the user to add the site to the whitelist if they choose. Testers of the beta release of Windows XP Service Pack 2 will probably find the yellow bar familiar: it's almost a carbon copy of the new Internet Explorer Information Bar that appears when an ActiveX control is blocked. If you cannot wait for Firefox 1.0 to try this feature, grab a nightly build from the 0.9 branch but remember that there may be bugs.

[Costa]

Evo kako to trenutno izgleda po defaultu u zadnjoj verziji:
http://www.zippyimages.com/82886.html

A ovo dobijete na siteu kojem je zabranjena instalacija ekstenzija:
http://www.zippyimages.com/82887.html

[ßellerophon]

a kako se to dogodilo?

[Costa]

Originally posted by ßellerophon
a kako se to dogodilo?

Tako sto je bilo dozvoljeno instalirati ekstenzije s bilo kojeg sitea. Sad vise ne bude. Uostalom i prije si bio zasticen jer gumb cancel znaci cancel a ne kao kod IE-a kad sve ide automatski

[djjokla]

Pa jednostavno namjestiš Mozillu da ti ne instalira nikakve programe

[Costa]

Rjesenje je i stisnuti Cancel ali mnogi ljudi to ne gledaju pa bude svasta. Ovako je defaultno promjenjeno.

[dr.fiksi]

Originally posted by Costa
Rjesenje je i stisnuti Cancel ali mnogi ljudi to ne gledaju pa bude svasta. Ovako je defaultno promjenjeno.

Tako je, Costa.Nema softverskog rješenja koje zaštićuje od ljudske gluposti, a ljudska ne-glupost je najjači aparat zaštite.
Kako kažeš, svoju popularnost te stvari duguju nepromišljenosti i brzopletosti...

[Costa]

Djelomicno je Mic kriv sa svojim brzopletim programerima koji su omogucili da se takve stvari i automatski instaliraju.

Al da ljude treba obrazovati, uvijek i u bilo kojem poslu