Firefox security

[danceboy]

Hey all, if anyone is using firefox, please check this out. It turns out that due to Firefox correctly implementing a flawed standard, it is vulnerable to certain spoofing attacks. They've come up with a fix pretty quickly, and it's yet another reason to get AdBlock...

I do not believe that any attacks were found using this, it looks like some people discovered the problem and then announced it.

Comments

You can disable the feature -- easier fix

[vectorvillain.livejournal.com]

Go to the address bar, and type "about:config". Scroll down to "Network.enableIDN", and double click on it.

This disables the flawed standard. It isn't all that likely that most people use IDN, so i souldn't impact anything.

From you friendly neighborhood IT security wonk.