Thread: Firefox and Chromium

A Tale of Two Firefox Bugs (youtube.com)

L 1 pts 0 comments by jcs Nov 27, 2012 browsersreversingsecurityvideo Web Development Systems / Low-Level / OS Security / Privacy thread

Any Firefox add-on people out there? [Plugin for validating SSL via DNS] (blather.michaelwlucas.com)

L 1 pts 0 comments by jcs Feb 26, 2013 browserssecurityunix Web Development Systems / Low-Level / OS Security / Privacy thread

Protecting Mozilla Firefox users on the web (garykwong.wordpress.com)

L 3 pts 0 comments by jcs Mar 10, 2013 browserssecurity Web Development Security / Privacy thread

The Case of an Unconventional CSRF Attack in Firefox (blog.whitehatsec.com)

L 1 pts 0 comments by inactive-user Jun 27, 2013 browserssecurity Web Development Security / Privacy thread

Firefox Sync: Then and Now and Soon (people.mozilla.org)

L 2 pts 1 comments by tobym Jan 31, 2014 browserssecurityslides Web Development Security / Privacy thread

Firefox 32 supports Public Key Pinning (monica-at-mozilla.blogspot.com)

L 5 pts 0 comments by journeysquid Aug 27, 2014 browserssecurity Web Development Security / Privacy thread

CVE-2014-1564: Uninitialized memory with truncated images in Firefox (lcamtuf.blogspot.com)

L 6 pts 0 comments by tedu Sep 3, 2014 browserssecurity Web Development Security / Privacy thread

Opportunistic Encryption For Firefox (bitsup.blogspot.com)

L 5 pts 2 comments by journeysquid Mar 31, 2015 browserssecurity Web Development Security / Privacy thread

Stop Firefox leaking data about you (github.com)

L 14 pts 2 comments by vvh Jun 28, 2015 browserssecurity Web Development Security / Privacy thread

Firefox: Same origin violation and local file stealing via PDF reader (mozilla.org)

L 24 pts 3 comments by jcs Aug 7, 2015 browserssecurity Web Development Security / Privacy thread

Firefox 42 Will Require Signed Extensions (wiki.mozilla.org)

L 18 pts 2 comments by pushcx Aug 11, 2015 browsersreleasesecurity Web Development Security / Privacy thread

Leak of 0-days of Firefox due to Bugzilla account compromise (blog.mozilla.org)

L 18 pts 5 comments by calvin Sep 5, 2015 browserssecurity Web Development Security / Privacy thread

Firefox Nightly starts marking login-forms in HTTP as insecure (ma.ttias.be)

L 21 pts 0 comments by mattiasgeniar Oct 21, 2015 browserssecurity Web Development Security / Privacy thread

W^X enabled in Firefox port in OpenBSD (undeadly.org)

L 38 pts 5 comments by calvin Oct 22, 2015 browsersopenbsdsecurity Web Development Systems / Low-Level / OS Security / Privacy thread

Firefox v46+ Security Hardening + Some Tweaks (github.com)

L 9 pts 27 comments by w00w May 12, 2016 browserssecurity Web Development Security / Privacy thread

Mozilla plans Firefox fix for same vulnerability that bit Tor (arstechnica.com)

L 5 pts 0 comments by jabberwock Sep 17, 2016 browserssecurity Web Development Security / Privacy thread

Postmortem of the Firefox (and Tor Browser) Certificate Pinning Vulnerability Rabbit Hole (medium.com)

L 10 pts 0 comments by jabberwock Sep 19, 2016 browserssecurity Web Development Security / Privacy thread

Postmortem of the Firefox (and Tor Browser) Certificate Pinning Vulnerability Rabbit Hole (hackernoon.com)

L 0 pts 0 comments by pushcx Sep 22, 2016 browserssecurity Web Development Security / Privacy thread

Security vulnerabilities fixed in Firefox 50 (mozilla.org)

L 9 pts 0 comments by tedu Nov 15, 2016 browsersreleasesecurity Web Development Security / Privacy thread

See also the release notes: https://www.mozilla.org/en-US/firefox/50.0/releasenotes/ I felt the security fixes deserved more attention than "various security fixes".

Firefox 0-day in the wild is being used to attack Tor users (arstechnica.com)

L 17 pts 4 comments by sigint Nov 30, 2016 browserssecurity Web Development Security / Privacy thread

Binary Transparency for Firefox (wiki.mozilla.org)

L 2 pts 0 comments by chadski Mar 29, 2017 browserssecurity Web Development Security / Privacy thread

Chrome and Firefox Phishing Attack Uses Domains Identical to Known Safe Sites (wordfence.com)

L 2 pts 1 comments by tf Apr 16, 2017 browserssecurity Web Development Security / Privacy thread

Crash Firefox on Linux via Notification API (files.hboeck.de)

L 5 pts 6 comments by hanno Sep 12, 2017 browserssecurityweb Web Development Systems / Low-Level / OS Programming (General)Security / Privacy thread

Verified cryptography for Firefox 57 (blog.mozilla.org)

L 50 pts 3 comments by duclare Sep 13, 2017 browserscryptographyformalmethodssecurity Web Development Programming Languages / CS Theory Security / Privacy thread

Firefox takes a bite out of the canvas ‘super cookie’ (nakedsecurity.sophos.com)

L 16 pts 0 comments by calvin Oct 31, 2017 browsersprivacysecurityweb Web Development Security / Privacy thread

Linux sandboxing improvements in Firefox 57 (morbo.org)

L 26 pts 3 comments by freddyb Nov 12, 2017 browserslinuxsecurity Web Development Systems / Low-Level / OS Security / Privacy thread

Some minor Security Quirks in Firefox (blog.hboeck.de)

L 16 pts 0 comments by hanno Nov 16, 2017 browsersjavascriptsecurity Web Development Security / Privacy thread

Firefox is on a slippery slope (sircmpwn.github.io)

L 76 pts 37 comments by goodger Dec 16, 2017 browsersprivacyrantsecurity Web Development Security / Privacy thread

Master password in Firefox or Thunderbird? Do not bother! (palant.de)

L 7 pts 0 comments by jstoja Mar 20, 2018 browserssecurity Web Development Security / Privacy thread

Supporting Same-Site Cookies in Firefox 60 (blog.mozilla.org)

L 9 pts 9 comments by freddyb Apr 26, 2018 browsersprivacysecurity Web Development Security / Privacy thread