BugTraq
Fwd: New possible scam method : forged websites using XUL (Firefox) Jul 30 2004 09:05PM
David Ahmad (da securityfocus com) (1 replies)
Re: New possible scam method : forged websites using XUL (Firefox) Jul 31 2004 11:15AM
Marc (md nomensa com) (3 replies)
RE: New possible scam method : forged websites using XUL (Firefox) Aug 02 2004 01:02PM
Thomas T. Evans, III (ttevans hawkcorp net)
Re: New possible scam method : forged websites using XUL (Firefox) Aug 02 2004 09:59AM
Peter J. Holzer (hjp wsr ac at) (1 replies)
Re: New possible scam method : forged websites using XUL (Firefox) Aug 03 2004 08:11AM
Peter J. Holzer (hjp wsr ac at) (2 replies)
Re: New possible scam method : forged websites using XUL (Firefox) Aug 03 2004 07:10PM
Michael Reilly (michaelr cisco com)
Re: New possible scam method : forged websites using XUL (Firefox) Aug 03 2004 06:13PM
Kim Scarborough (kjs uchicago edu)
Re: New possible scam method : forged websites using XUL (Firefox) Aug 01 2004 07:43PM
Nicholas Knight (nknight runawaynet com) (1 replies)
Marc wrote:

> The latest version of Firefox is 0.9.2.
>
>
>>The developers of Mozilla are currently looking into various
>>methods to make a fake user interface more obvious. The most
>>likely solution will be to force the status bar to always be
>>visible, as Microsoft will do with IE6 SP2.
>
>
> This appears to be the case with 0.9.2.

Tools -> Options -> Web Features -> Advanced button by Java/Javascript
check boxes. I'll bet you have "Hide the status bar" unchecked.

This caught me for a moment, too, then I remembered I always disable
everything in the Advanced JavaScript Options box, and that's one of
them. So users actually have a defence right now, but they have to
specifically set it themselves.

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus