Firefox Support Forum

Hello, Microsoft Defender did a scan tonight and apparently detected a trojan script, located in the folders for Firefox extensions for both profiles I use on my computer

Trojan description: Trojan:Script/Wacatac.B!ml

Files: C:\Users\[user]\AppData\Roaming\Mozilla\Firefox\Profiles\[default profile]\extensions\langpack-fr@firefox.mozilla.org.xpi C:\Users\[user]\AppData\Roaming\Mozilla\Firefox\Profiles\[second profile]\extensions\langpack-fr@firefox.mozilla.org.xpi

This scan happened at 9pm, and a previous scan at 6pm didn't show anything. When it detected the script, MS Defender contained it and apparently deleted it when it asked me to restart the computer, I then did a full offline scan and nothing else showed up, same with a full scan with the free version of Malwarebytes. I didn't do anything unusual between 6pm and 9pm, so I'd like to know if there's a way to determine whether that script was an actual threat (instead of a false alarm)? If so, any way to know how long it has been on my computer? Any further risks to take into consideration? Other steps to follow? Thanks for the help

Hi, I planned to block my users from installing extensions/add-ons. I found an article that might be the answer (https://support.mozilla.org/en-US/questions/1308646). I tried to create a simple policy (below), but somehow it does not work (I can still install any add-on/extension). What is wrong with my script? I'm using Firefox ESR 78.11.0 (64-bit) by the way.

My "policies.json" looks like this:

{

"policies": {
  "ExtensionSettings": {
    "*": {
      "blocked_install_message": "Blocked!",
      "install_sources": ["https://addons.mozilla.org/"],
      "installation_mode": "blocked"
    }
  }
}

Sincerely, Jonathan

Hi all :)

From a fresh Linux Debian Bullseye I try to connect to a local machine with Firefox (v97 64-bits) by its hostname (avahi server with default domain "local") with the port 6180 bound to a remote web service port (61 is the distant machine IP and 80 is the forwarded port).

When I want to open this URL : http://bionic.local:6180/ FF displays "We can't find this site ... Unable to connect to server at bionic.local ... check your network connection and firewall"

BUT ping bionic.local works perfectly and resolve the good IP address from the Chromium navigator the same URL works without a problem, I can open the distant web site.

This workaround works : add a static resolution in the /etc/hosts file : 192.168.0.71 bionic bionic.local => so FF works in the expected way for now ! But as I said this a workaround and a bad solution.

I supposed too the port was blocked because I accessed an unusual port. So I tried this without success.

How the hell make that FF v97 allows me to use an unusual port ? Or is it bound to the domain "local" which is no more accepted by FF ?

Thank you in advance for your help. With adelphity, lnj

How to do

suddenly I ca no longer log into iCloud. I get a security issue. I refreshed / uninstalled and reinstalled. no help. any assistance would be appreciated. see images.

Noticed geo.provider.network.url setting in about:config no longer works in firefox 102.0 ubuntu. I use it consistently so it was easy to notice that it no longer had any effect after updating.

tested both on https://maps.google.com and https://browserleaks.com/geo

Is it possible to revert to an older version without losing my data?

I had a personal certificate installed in Firefox and it was working well. It expired, so I got a new one from the same provider. Both appear in Firefox under "Privacy & Security" -> Certificates -> View Certificates... The previous one is not valid any more, and every time I try to access some page with a certificate, it uses the old one. So I tried to delete the old one. Nothing has worked so far. Doing the straightforward way of selecting it in the Certificate Manager and deleting it makes the certificate disappear from the manager menu, but if I enter the certificate manager again, it is there again. I tried to delete both certificates, same issue, both reaper in the manager. I tried to delete them, close firefox, delete cert9.db, cert8.db and key4.db and nothing. Only thing left is delete my current firefox profile and start again... Any other idea or something that I might delete before to solve this?

Scroll down until you find "PERMISSIONS" and find for "Camera". Click on "Settings" that is parallel to "Camera". Now, select/type all websites, that you want to give permission/access to your camera.

Never used a webcam before, but i did that... the site is there, it says allow... i'm on the website now, says webcam not found... am i forgetting something? do i even have one? i'm at the library...

Tim

Hello, I can't access the home router. 192.168.1.1 results in "Secure Connection Failed" and nothing can be done. How can I solve the problem?

Please answer me at [email]@yahoo.com

Best regards, Ioana Udrea

Hi.

I need to print out my saved passwords. I have no cellphone to access, just my laptop and printer. I only use Firefox and no other browser. If my laptop gets hacked or breaks down, then I need to use someone else's computer to access my passwords in an emergency, and can't access my passwords to do so...so printing them out periodically is the smartest thing I can think of.

Help, anyone? This is pretty important to me. Thank you!

Hello I'm referencing the topic where TLS 1.0 and 1.1 support was removed but rolled back to accommodate some government agencies / sites and support for COVID-19 data

https://support.mozilla.org/en-US/questions/1290040#:~:text=Mozilla%20and%20other%20browser%20makers,and%20performance%20of%20Internet%20connections.

Quoted answer "Right, support for TLS 1.0 and TLS 1.1 has been removed few months ago, but we reverted the change for an undetermined amount of time to better enable access to critical government sites sharing COVID19 information."

Since it was referenced as "undermined amount of time", is there anything currently on your roadmap/release schedule in regards to removing support again? I have some cutover decisions I need to make and knowing if ESR for example will remove this support in 2 months may effect the direction of those. If you have anything to share, i'd really appreciate it.

Regards,

-Chad

Hello!

I always use private browsing so I thought that my history was totally not being saved, but discovered recently that when I started to type within the search field, that many of my past searches were listed in the search field with the type highlighted in purple. I had to manually go in and delete all of these past searches. I don't want any search history to be saved. Is there a setting in preferences that I'm somehow missing? Why is Firefox saving these past searches if I have it set to Always Use Private Browsing?

Thank you!

I've saved and can use the log-in details for a particular site, but they doesn't show up in the password list, so I cannot edit/delete them. Whilst it may not be relevant and may confuse the issue more, the reason I want to delete log-in + password is because I have to create a new account every 2-3 months, which I then save. So when loading the home page, the current and all previously saved log-ins get listed. I've tried to manually delete one when on the home page, but unlike keystroke searches which do get deleted, this one remains in the list. I suppose I could clear everything and save all the log-in details for each site again, but why are the log-ins for one particular site not showing up ?

Thanks

Google offers to use a Google login for many websites in the top-right corner of Firefox, for example, when I start Twitter. I don't remember this behavior more than a few months ago. This is on desktop Firefox, not mobile. I never login to Google unless I want to use Gmail or Blogspot, and then I logoff and kill the browser when done. Can this offer be disabled?

I installed the Firefox browser (version 113.0.2 (64-bit)) onto a new PC running Windows 11. When attempting to clean up the Firefox cache with another utility, I noticed that the amount of space recovered was much smaller than expected. When I tried to check my profile using the Troubleshooting Information page (to open the folder) I received a message that the location was not available. I double checked with Windows Explorer and this was the case. Searching for "cache2" in Explorer located the folder/directory in a different location.

The Firefox Profile Folder should be in this location, according to Firefox's Troubleshooting Information page (anonymized information in square brackets):

C:\Users\[username]\AppData\Roaming\Mozilla\Firefox\Profiles\[character string 1].[profile name]

The best I can tell, the actual Profile Folder created in Windows 11 is located here:

C:\Users\[username]\AppData\Local\Packages\Mozilla.Firefox_[character string 2]\LocalCache\Roaming\Mozilla\Firefox\Profiles\[character string 1].[profile name]

The cache folder for the profile is located here:

C:\Users\[username]\AppData\Local\Packages\Mozilla.Firefox_[character string 2]\LocalCache\Local\Mozilla\Firefox\Profiles\[character string 1].[profile name]\cache2\entries

I am not sure if this situation is unique to me, or if this is a common occurrence with Windows 11.

The use of the Packages folder may be the result of installing an application that is not fully "Windows 11-native" or it may just be the new way Windows deals with some applications. I am not sure if the data in character string 2 is consistent, or if it is a unique string created by Windows when Firefox was installed.

If I go to the Settings and clear data, the folder that is a sub-folder of Packages is cleared, so Firefox "knows" where the data is, but the Troubleshooting Information page is confused.

If this is a common occurrence, a tweak to this page in a future release would be helpful. If it is a rare occurrence, a help article may be, well, helpful.

Thanks.

On my laptop, I run FDE as my daily driver, with the release version to handle my webmail. I also use portable firefox (from portableapps.com) as a browser to use while at work, from a thumb drive. While using that portable verison, I usually just go to google image search, and a work site that would definitely be secure.

My question: I don't like to update the installation on my thumb drive very often, and occasionally work computers are very slow anyways. So if I were to update it no more often than once a month, which version of firefox would be most secure: Release, Beta, or Nightly?

If doing this is just dumb, then which version gets updated less often--it would be Release, correct?

The rumble video interview of Jonathan Cahn by Greg Hunter is NOT visible in my linux version 91.12.0esr(64-bit) of Mozilla Firefox, straight from an openSuse software repository and directly installable under yast, which is their administrator program over the linux software including the software manager

The web page in question is https://usawatchdog.com/only-way-to-save-america-is-turn-back-to-god-jonathan-cahn/ but the java script code is grayed out on this page

!function(r,u,m,b,l,e){r._Rumble=b,r[b]||(r[b]=function(){(r[b]._=r[b]._||[]).push(arguments);if(r[b]._.length==1){l=u.createElement(m),e=u.getElementsByTagName(m)[0],l.async=1,l.src="https://rumble.com/embedJS/ugdmvn"+(arguments[1].video?'.'+arguments[1].video:)+"/?url="+encodeURIComponent(location.href)+"&args="+encodeURIComponent(JSON.stringify([].slice.apply(arguments))),e.parentNode.insertBefore(l,e)}})}(window, document, "script", "Rumble");

I have used other browsers, such as Opera, Brave, Google Chrome and the rumble video is clearly visible and playable.

What do I have to change in Firefox so that this video becomes visible on the page?

Randall

p.s. Greg Hunter is interested in this reply too

I have 2-Step verification on Gmail. When I go to log in I get this: Insert your security Key into the USB. I cancel out of it and get this: Your phone can’t locate your device. Move your phone closer to the device where you’re signing in, and then try again. I "Try another way" and I try to get a "one-time security code" and it forwards me to a website where the cycle begins again. If I try "Auto-recovery" it sends me to google. I can access Gmail on the same machine via Chrome, but would rather not. I can also get it on Firefox on my phone.

I did recently turn on two-step and it asked if I wanted a key, and I thought it might mean Google Authentication, I think it meant a USB key.

Any thoughts? I rather not give up Firefox.

I was trying to sync my settings to my new laptop with my login and PW (which was correct) and it kept telling me it wasn't right. So, I decided to change it but my MFA on Google for Firefox got wiped once I switched phones. I had to use a backup code to get in and want to re-enable the MFA.

Unfortunately, and for no real reason, it won't work. I scan the QR code in Google Authenticator, it sets up and gives me a code, I enter the code, and then it tells me it's the wrong one. I even tried to do it by manually setting it up and it made no difference. Now I can't re-enable it because it won't work right.

What the actual hell is going on here, guys?

I haven't had to sign in for a while, so tonight when I tried and I typed the password in correctly the box just immediately closes and reopens like its incorrect. I have tried locating the key3.db and key4.db which I can't find on my system, nor can I find the login.json that is supposed to have the log of passwords to back them up. I don't have any 3rd party password managers and I've tried with my VPN disconnected. I've used the password generator to secure some of my websites so I don't even know was some of my passwords are, so resetting the primary password would be a huge hassle. If someone could please help me out I would be very appreciative. Thanks!

I've looked into this situation, and none of the solutions submitted online work.

I went to about:preferences, and set "security.certerrors.mitm.auto_enable_enterprise_roots" to false, but "security.enterprise_roots.enabled" is set to true and locked; I can't change it.

First of all, I am not using Avast, AVG, Kapersky, etc. antivirus; I'm using Win 10's built-in security suite, so it's not my antivirus causing it.

To double check that, I opened the Registry and went to " HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Mozilla\Firefox\" and "HKEY_CURRENT_USER\SOFTWARE\Policies\Mozilla\Firefox\", looking for a Mozilla\Firefox\Polices key, and neither one had any Mozilla keys.

I even checked the Autoconfig settings, and found no settings in the JS file that had anything to do with Enterpise Roots (I renamed the file temporarily to disable it), but I still can't disable security.enterprise_roots.enabled

I have no "Organization"; I'm an independent home user, so needless to say I'm concerned that Firefox is suddenly saying some organization is controlling my Firefox.

Win 10 Home Ver. 22H2 OS Build: 19045.3086 Windows Feature Experience Pack 1000.19041.1000.0

Antivirus/Firewall: Windows 10 Security

Firefox: 114.0.2 (64 bit)