Firefox Community Forum

I've been using Firefox for years, and I don't remember ever having a password, but it asked me for one when I set up a new Operating System. So it wanted my email addy, and I gave them the password for that addy. They wouldn't accept it. Then I created a new password, and now it shows too many dots for the password I created. I'm really confused now. Already they have sent me 8 different "Account Authorization Codes." I have no idea what is going on now, and I don't know if the password I created is the one that they now have because there is no "eye" to show me what they think that my password is. Like I said, they are showing too many dots, and there is no way for me to find out what they think my password is!

Multiple websites now requesting 2-factor authentication 2 and 3 times since last update.... Booking.com, my bank, Expedia, Sumup etc Is there something I need to change in security settings? Once I'm logged in once to these sites, they tend to remember the browser settings (me logging in basically) but since the latest update to Firefox last week, I am having to go through this process at least twice for several sites: once to log in and then again to take any actions once into my accounts... Thanks in advance UF

I checked the box in privacy settings to "Block new requests asking to allow notifications". But I am constantly asked by multiple web sites if I will allow them to send me notifications. I despise the very idea of push notifications and will never use them or allow them. If this option in settings does not work, then why is it there? Is there a way to make the browser impervious to push notification requests?

You can see from the first image that I had unchecked the "Block pop-up windows". But then if a page wants to pop up the windows like running "for(let i = 0; i < 24; i++) window.open("about:blank")", the result will be the second image. Firefox still keeps blocking despite my setting. And there is no even option like "allow the pop-ups" in the Options menus on the info bar.

Like below image, I wonder about mobile firefox browser's password list .

In the password list of Mobile Firefox, there are many accounts with red exclamation marks as shown in the picture below. I would appreciate it if you could tell me what this means

Hi Firefox community, I don't want to store any account login data (also not usernames) on the shared PC that I'm using. In settings > passwords there is no entry, and under access data and passwords any options are deactivated. Although passwords are not stored, Firefox shows the user names/account names whenever I click such field. Where can I deactivate that user names/account names are stored and shown? Many Thanks in advance. Best wishes!

Hello all, First of all thank you for the good quality of mozilla products. I am using mainly firefix and thunderbird on linux (Ubuntu) on all my computers, that of my children and of any friend I can convert to open-source computing.

I have done all possible documented actions to configure firefox for blocking pop-ups, including standard (permissions in privacy & security settings) and advanced (filter on autoplay parameters in about:config) options available. I keep receiving pop-up windows with unwanted videos, e.g. on my paid subscription to a local news website. See the attached screen capture, where I right-clicked on the pop-up window. You will see that a "digiteka" player keeps appearing and I never sollicited these videos. I hate this. It's not even pub, it's news, but when I'm reading an article I don't want to be bothered with other news that I'm not interested in. Plus, I don't want any unauthorised software like this digiteka player running on my computer without my permission. It's not a firefox module, it's probably silently downloaded over my connection with my news provider with no notice. I could go as far as blocking autoplay so the video will not start playing automatically, but I would like to completely block the apperance of such windows and any download of something executable on my computer. What could I do in addition? I there any way, other than stopping my subscription to this site?

Many thanks for your help. Patrice.

The queries don't even reach the server. On Windows 10 I don't have this problem. Both have the server parameter set to https://192.168.1.x/dns-query/. I have tested versions 102.7.0esr and 109.0.

Why am I getting this from Kaspersky? The most recent version is 108.0.2. Detect date ? 01/17/2023 Severity ? High Description

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, spoof user interface.

Below is a complete list of vulnerabilities:

   Security vulnerability in SystemPrincipal can be exploited to bypass security restrictions.
   Security vulnerability in WebWorker can be exploited to bypass security restrictions.
   Code execution vulnerability in GTK drag and drop can be exploited remotely to execute arbitrary code.
   Code execution vulnerability in process allocation can be exploited remotely to execute arbitrary code.
   Code execution vulnerability in Devtools can be exploited remotely to execute arbitrary code.
   Memory safety vulnerability can be exploited to execute arbitrary code.
   Security vulnerability in Notification permissions can be exploited to bypass security restrictions.
   Security vulnerability in format directive can be exploited to bypass security restrictions.
   Security UI vulnerability in cross-origin iframe can be exploited to spoof user interface.

Affected products

Mozilla Firefox earlier than 109.0 Solution

Update to the latest version Download Firefox

Hello,

In my newsletter subscription options, I did NOT checked the "Firefox Account Tips" option but I keep receiving mail saying this : "You're receiving this email because [edited] @gmail.com has a Firefox account and is subscribed to Firefox Account Tips."

Could you please fix this issue so that I don't receive these mails anymore ?

Thank you in advance,

Mikael

Hi,

I know how to turn on OS authentication to reveal passwords in about:config (signon.management.page.os-auth.enabled = true) But is there any way to turn this on in registry?

I've the same problem as https://support.mozilla.org/questions/1317794#question-reply but after following the steps for the solution, it doesn't work for me. Does it have to do with all updates since this question was answered? I've created the chrome folder. I've created userChrome.css file and added the following without "`" marks in it and saved it and restarted firefox after changing the toolkit.legacyUserProfileCustomizations.stylesheets = true . ```

@namespace url("http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul"); /* only needed once */

#appMenu-fxa-label > .toolbarbutton-text { visibility:hidden !important; }

```

It doesn't work for me. Please have a look.

Hi My government has enabled SafeSearch over our internet. we cant disable or turn it off.

we had a solution to disable it by changing DNS in our browsers to CloudFlare. but unfortunately, it's not working anymore, so the SafeSearch is back online again...

now, how can we disable it?

Hi,

I'm wondering if anyone can help me here. I use Google Fi to make and receive calls from my browser. I accidentally denied microphone permissions to Google Fi from the Firefox dropdown prompt and I cannot find how to get it back.

When I click the dropdown menu, I see no options to enable or disable permissions. I also do not see anything listed in the Security settings of the browser. When I check the google fi settings, I see it complaining about denied permissions though.

I've attached screenshots. Does anyone know where I can revoke the blocked permissions?

Thanks,

Today, after browsing about whether or not I should continue using Firefox as my password manager, I decided to mitigate the most important security flaw in browser based password managers, by setting up a Primary Password. I choose to use an easy to remember 8 word long passphrase as my Primary Password. I noted down the passphrase in my diary. Due to problem while loading YouTube, I decided to restart Firefox by going to about:profiles and selecting "restart normally". This issue where Firefox starts to struggle connecting to internet is a relatively common occurrence on my Firefox install, and restarting Firefox fixes the issue. When Firefox restarted, I was prompted to enter the primary password. I confidently entered my passphrase, but it was rejected. I tried to typing to it more carefully several times. I got my diary and checked it to make sure I was entering the passphrase correctly. Following troubleshooting steps on a similar thread, I restarted firefox, no luck. I than rebooted my computer, issue persisted. I decided to restart Firefox with extensions disabled, and also in troubleshooting mode. Firefox still rejects my passphrase. I have my Firefox account synchronized with two Android phones. Will reinstalling Firefox and syncing with my Firefox account solve the problem? In a similar troubleshooting thread, renaming key4.db and logins.json is suggested. However, it has not been explained very clearly. My logins.json file was modified an hour before disaster, even though I had made no changes to any of my logins or the master password. Is my logins.json corrupted causing the issue? I will like to point out a design flaw in Firefox which might have caused the issue. I usually want to see what I am typing when I am entering an encryption password. This is to make sure that I don't mistype something. However, in Firefox Primary Password configuration window, there is not option to see what you are typing. Firefox relies on low probability of typing the wrong password twice. I don't think devs should be so worried about shoulder attacks to not even allow users option to view what they typing. My case might be that low probability situation where I made the same mistake while typing the passphrase twice.

Team

Please help me with reason for why Firefox connecting CDN servers such as amazon, google is not security threat for customer data?

thanks Samvedna

I was previously able to connect to my local NAS using the server name, but now cannot. I verified that the server certificate error exception is still listed.

Here is the text of the error message I receive:

"Hmm. We’re having trouble finding that site. We can’t connect to the server at [server name redacted]. Did you mean to go to www.[server name redacted].com? If you entered the right address, you can:

   Try again later
   Check your network connection
   Check that Firefox has permission to access the web (you might be connected but behind a firewall)"

I am able to connect using the IP address.