Board fucked up with FireFox

[Michael O]

Can´t click the top threads because of the new RealityCash Ad

[rollinOn20s]

Is that what it is. Been having the same problem. How do you fix it?

[pornstar2pac]

there is a new microsoft update tomorrow.

[Michael O]

Is that what it is. Been having the same problem. How do you fix it?

IE I guess so I guess I will be back when they get rid of that annoying ad

[sickkittens]

Bummer. I'm not a fan of using IE anymore.

[Googooly]

Guys Listen!

Im using Avant Browser and I HAVE no problem at all!! just use avant instead of crapy firefox and ull be sorted

[nico-t]

yep got the same problem here... damn!

[Lensman]

Worked fine on our GFY Dev server with Firefox, but not with the real deal. We are disabling with Firefox until we find the fix.

[quiet]

board does not work on safari or ie for mac OS X.

i got to this thread by looking at the source code and then skipping the main page.

[pornstar2pac]

All Browsers But IE At Risk To New Spoofing Scheme Feb. 7, 2005
EMAIL THIS ARTICLE
PRINT THIS ARTICLE
DISCUSS THIS ARTICLE WRITE TO AN EDITOR
More Stories on:
Security
Viruses and Patches



A newly uncovered vulnerability in most browsers can allow hackers to spoof the URL displayed in the address bar and the SSL certificate.

TechWeb News



A newly uncovered vulnerability in most browsers can allow hackers to spoof the URL displayed in the address bar and the SSL certificate, a security firm warned Monday. The one exception? Microsoft's Internet Explorer.

Danish security company Secunia posted an alert describing the vulnerability -- which affects Mozilla, Firefox, Safari, Opera, and Konqueror -- as a "moderately critical" problem.

The vulnerability impacts every browser built atop the open-source Geko browser kernel -- nearly all except IE -- because of a flaw in handling International Domain Names (IDN). Hackers can register domain names with certain international characters that resemble other commonly-used characters, said Secunia, to spoof the address and trick the user into thinking they're at a legitimate site and/or it's secured by SSL.

Such spoofing vulnerabilities are typically exploited by phishers who try to dupe users into divulging financial information at bogus Web sites that resemble real-life banking, credit card, or retail sites.

The vulnerability has been confirmed in the latest version of Firefox, v. 1.0, as well as in Mozilla 1.7.5, Opera 7.54u1, Opera 7.54u2, Safari 1.2.4, Konqueror 3.2.2, and Netscape 7.2. Other editions of these browsers, however, may also be at risk, said Secunia, which posted an online test on its Web site.

Currently, none of the vendors have provided fixes for the flaw.

[wdforty]

I was wondering what was going on with the board..

[Michael O]

Now I have the same problem with IE

[quiet]

woohoo, working in safari now!

[xsivforce]

http://www.gofuckyourself.com/showthread.php?t=428471

[jukeboxfrank]

All Browsers But IE At Risk To New Spoofing Scheme Feb. 7, 2005
EMAIL THIS ARTICLE
PRINT THIS ARTICLE
DISCUSS THIS ARTICLE WRITE TO AN EDITOR
More Stories on:
Security
Viruses and Patches



A newly uncovered vulnerability in most browsers can allow hackers to spoof the URL displayed in the address bar and the SSL certificate.

TechWeb News



A newly uncovered vulnerability in most browsers can allow hackers to spoof the URL displayed in the address bar and the SSL certificate, a security firm warned Monday. The one exception? Microsoft's Internet Explorer.

Danish security company Secunia posted an alert describing the vulnerability -- which affects Mozilla, Firefox, Safari, Opera, and Konqueror -- as a "moderately critical" problem.

The vulnerability impacts every browser built atop the open-source Geko browser kernel -- nearly all except IE -- because of a flaw in handling International Domain Names (IDN). Hackers can register domain names with certain international characters that resemble other commonly-used characters, said Secunia, to spoof the address and trick the user into thinking they're at a legitimate site and/or it's secured by SSL.

Such spoofing vulnerabilities are typically exploited by phishers who try to dupe users into divulging financial information at bogus Web sites that resemble real-life banking, credit card, or retail sites.

The vulnerability has been confirmed in the latest version of Firefox, v. 1.0, as well as in Mozilla 1.7.5, Opera 7.54u1, Opera 7.54u2, Safari 1.2.4, Konqueror 3.2.2, and Netscape 7.2. Other editions of these browsers, however, may also be at risk, said Secunia, which posted an online test on its Web site.

Currently, none of the vendors have provided fixes for the flaw.

[pornstar2pac]

Fuck it, I'm going back to using WebTV

[xsivforce]

Fuck it, I'm going back to using WebTV

Funniest Post Of The Day!

[MachineHead]

Workaround for Firefox:

type about:config in your address bar and do the following:

You can disable IDN support in mozilla products by setting 'network.enableIDN'
to false. There is no workaround known for Opera or Safari.

[xsivforce]

Workaround for Firefox:

type about:config in your address bar and do the following:

You can disable IDN support in mozilla products by setting 'network.enableIDN'
to false.

Doesn't that reset each time you open the browser?

[MachineHead]

If you mean resets to default each time you open a browser, then no.

[xsivforce]

If you mean resets to default each time you open a browser, then no.

Thanks for the tip.

[MachineHead]

These are the guys that discovered it:

http://www.shmoo.com/idn/homograph.txt

[jimmyf]

Workaround for Firefox:

type about:config in your address bar and do the following:

You can disable IDN support in mozilla products by setting 'network.enableIDN'
to false. There is no workaround known for Opera or Safari.

thanks a bunch

[xsivforce]

To disable IDN as a workaround for this problem (on Gecko-based browsers): hit about:config and set network.enableIDN to false.

That is a great suggestion, except for the part where it does not work.

Go ahead, make the change, then restart your browser. Now go look at about:config again. Yup, still set to false. Now go see if it the setting worked. It does not. So at least with Firefox 1.0 just took a bad situation and made it worse. Now people will think turning off this setting will actually accompolish something and protect them and it will not.

http://it.slashdot.org/comments.pl?s...8&cid=11596841

[MachineHead]

Read a little further down on that Slashdot thread. You might have toggle it to True and then False again. It worked for me, but after reading the whole thread, I see it is not working for others.

[xsivforce]

Read a little further down on that Slashdot thread. You might have toggle it to True and then False again. It worked for me, but after reading the whole thread, I see it is not working for others.

Looks like some fixes are already in the works. I'll be keeping an eye for it.