பயர்பாக்ஸ் Community Forum

2FA login on sites works with Chromium but NOT WITH Firefox (Linux)

Present setup:

Does NOT work firefox 102.7.0esr on debian 11.6 bullseye 5.10.162-1 (x86-64) firefox 110.0 on Ubuntu MATE 22.04 LTS 5.15.0-58 (x86-64)

Works chromium 109.0.5414.119 on debian 11.6 bullseye 5.10.162-1 (x86-64)

I am able to register and authenticate with security devices Yubikey NEO (without FIDO2) and Yubikey 5 NFC (FIDO2 compliant) on several sites (eg. pypi, google..) using Chrome or Chromium but now not with Firefox at all. It has not worked for at least the last few updates. Changing settings in about:config or plugging/unplugging keys, stopping every Firefox plugin etc. don't help. Neither does a fresh Firefox install without any super-security-settings.

Testing sites like Yubico's own or Okta's works fine using Chromium but not Firefox.

From what I can see this is not especially related to FIDO2 (Webauthn). pypi seems to use U2F which should work just fine with Firefox since way back.

I haven't tested Firefox for Windows but Chrome browser for Windows 10 works fine (which I tested first when Firefox didn't cut the mustard), I therefore expect it to work also on Chrome browser for Linux. Just to check if this was related to a debian bullseye package, I tested it on Ubuntu MATE too, which didn't do the trick. Haven't done any more testing than that on MATE.

This seems like a strictly firefox problem. -What to do?

Yours, Kaare

I am facing issue while downloading files in Firefox Private Browsing. Whenever I download my PDF files, as soon as I close the browser window, the files also get deleted automatically. What should I do to rectify this issue.

Hi I have a problem with the configuration of my Firefox. (I hope it is not something more serious like a malware or a security break)

Firefox version 124.0 (64bit) Os: Windows 10 Pro (64bit) 10.0.19045 Build 19045

Step to reproduce

1. 1. I go to: https://wwws.tesoro.es/index.aspx (website of the Spanish gov)
2. 2. I click on the link: Cl@ve in the center of the page (that should bring me to https://pasarela.clave.gob.es/Proxy2/ServiceProvider)
3. 3. I receive an error page "Did Not Connect: Potential Security Issue" "SEC_ERROR_UNKNOWN_ISSUER" (see the attached screenshot)

Things I tried

• I followed the same steps on Chrome on the same machine

The website works

• I followed the same steps on the same Firefox in Incognito mode on the same machine

The website DOESN'T work

• I followed the same steps on a completely new Firefox profile on the same machine

The website DOESN'T work

• I followed the same steps on Firefox on a different machine (same Firefox version, windows 11)

The website works

suddenly I ca no longer log into iCloud. I get a security issue. I refreshed / uninstalled and reinstalled. no help. any assistance would be appreciated. see images.

Hi there! I am a long time Chrome user and decided to try Mozilla Firefox. I loved it and after a bit of tweaking, I run into a problem I can't deal with myself. In Chrome I loved auto fill options every time I needed the option for my home address, email address or credit card. In Firefox I just can't do it. The option is only available for Canada or SUA. Is there any way I can make it work? Of course, I looked for some add-ons and actually found several, but given the fact that auto-fill in my case deals with personal and sensitive data, I need a safer method. Is there any? Thank you!

I installed the Firefox browser (version 113.0.2 (64-bit)) onto a new PC running Windows 11. When attempting to clean up the Firefox cache with another utility, I noticed that the amount of space recovered was much smaller than expected. When I tried to check my profile using the Troubleshooting Information page (to open the folder) I received a message that the location was not available. I double checked with Windows Explorer and this was the case. Searching for "cache2" in Explorer located the folder/directory in a different location.

The Firefox Profile Folder should be in this location, according to Firefox's Troubleshooting Information page (anonymized information in square brackets):

C:\Users\[username]\AppData\Roaming\Mozilla\Firefox\Profiles\[character string 1].[profile name]

The best I can tell, the actual Profile Folder created in Windows 11 is located here:

C:\Users\[username]\AppData\Local\Packages\Mozilla.Firefox_[character string 2]\LocalCache\Roaming\Mozilla\Firefox\Profiles\[character string 1].[profile name]

The cache folder for the profile is located here:

C:\Users\[username]\AppData\Local\Packages\Mozilla.Firefox_[character string 2]\LocalCache\Local\Mozilla\Firefox\Profiles\[character string 1].[profile name]\cache2\entries

I am not sure if this situation is unique to me, or if this is a common occurrence with Windows 11.

The use of the Packages folder may be the result of installing an application that is not fully "Windows 11-native" or it may just be the new way Windows deals with some applications. I am not sure if the data in character string 2 is consistent, or if it is a unique string created by Windows when Firefox was installed.

If I go to the Settings and clear data, the folder that is a sub-folder of Packages is cleared, so Firefox "knows" where the data is, but the Troubleshooting Information page is confused.

If this is a common occurrence, a tweak to this page in a future release would be helpful. If it is a rare occurrence, a help article may be, well, helpful.

Thanks.

I have my Firefox Firefox Privacy & Security History settings set to 'Always Use Private Browsing Mode.' Yet every time I open Firefox and visit the History tab, 'Recently Closed Tabs' shows a history of the websites I've visited. How do I disable this feature?

Hello, Microsoft Defender did a scan tonight and apparently detected a trojan script, located in the folders for Firefox extensions for both profiles I use on my computer

Trojan description: Trojan:Script/Wacatac.B!ml

Files: C:\Users\[user]\AppData\Roaming\Mozilla\Firefox\Profiles\[default profile]\extensions\langpack-fr@firefox.mozilla.org.xpi C:\Users\[user]\AppData\Roaming\Mozilla\Firefox\Profiles\[second profile]\extensions\langpack-fr@firefox.mozilla.org.xpi

This scan happened at 9pm, and a previous scan at 6pm didn't show anything. When it detected the script, MS Defender contained it and apparently deleted it when it asked me to restart the computer, I then did a full offline scan and nothing else showed up, same with a full scan with the free version of Malwarebytes. I didn't do anything unusual between 6pm and 9pm, so I'd like to know if there's a way to determine whether that script was an actual threat (instead of a false alarm)? If so, any way to know how long it has been on my computer? Any further risks to take into consideration? Other steps to follow? Thanks for the help

I am running Firefox 126.0-1 on an Arch Linux system. Most websites are failing to connect for security reasons.

Some sites, including google.com and nytimes.com, fail with an "SEC_ERROR_UNKNOWN_ISSUER" error, and their certificates confirm that they are respectively issued by Google Trust Services LLC and DigiCert Inc.

The website archlinux.org errors with "MOZILLA_PKIX_ERROR_MITM_DETECTED", stating that "Software is Preventing Firefox From Safely Connecting to This Site", citing in particular ISRG Root X1 as the problem. The certificate confirms that it is issued by Let's Encrypt.

The website duckduckgo.com simply errors with "SEC_ERROR_PATH_LEN_CONSTRAINT_INVALID" and states "Secure Connection Failed"

I have confirmed in preferences that my proxy settings are set to "No proxy" and the problem persists across troubleshooting mode and making a new profile. I have also tried removing the cert9.db file in a given profile folder.

Hi.

I need to print out my saved passwords. I have no cellphone to access, just my laptop and printer. I only use Firefox and no other browser. If my laptop gets hacked or breaks down, then I need to use someone else's computer to access my passwords in an emergency, and can't access my passwords to do so...so printing them out periodically is the smartest thing I can think of.

Help, anyone? This is pretty important to me. Thank you!

Hi Everyone, My Bank has suddenly decided that ALL cookies must be allowed before letting their customers in -- a requirement with which I wholly disagree. My FireFox is set to block anything that moves, and supported by Ad Blockers and Ublock too. Is there a way in which I can configure FF to allow me into the Bank site without having to change my "secure" settings every time? I am no computer genius - so please make it simple for me.

Thanks everyone.

Ian

I don't have the option to see or edit my saved credit cards in firefox's settings, autofill still works but I can't make any changes to my cards. I went into about:config and made sure both of the below setting are set to true and they were and it's still not working, there are no settings to change the autofill

extensions.formautofill.creditCards.enabled extensions.formautofill.creditCards.available

When I visit an http site and specify a non-standard port, it automatically changes to https, which is not a site redirect but something Firefox changes. This site already has an https service, and the http service will redirect to https. I reproduced the same situation in chrome. Accessing the http service with a non-standard interface was normal. After accessing the https service once, the service with the non-standard port was also changed to https. Clearing the data will restore it. Is this cached? My HTTPS-Only Mode is turned off, and set an exception for this site. thx.

I've looked into this situation, and none of the solutions submitted online work.

I went to about:preferences, and set "security.certerrors.mitm.auto_enable_enterprise_roots" to false, but "security.enterprise_roots.enabled" is set to true and locked; I can't change it.

First of all, I am not using Avast, AVG, Kapersky, etc. antivirus; I'm using Win 10's built-in security suite, so it's not my antivirus causing it.

To double check that, I opened the Registry and went to " HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Mozilla\Firefox\" and "HKEY_CURRENT_USER\SOFTWARE\Policies\Mozilla\Firefox\", looking for a Mozilla\Firefox\Polices key, and neither one had any Mozilla keys.

I even checked the Autoconfig settings, and found no settings in the JS file that had anything to do with Enterpise Roots (I renamed the file temporarily to disable it), but I still can't disable security.enterprise_roots.enabled

I have no "Organization"; I'm an independent home user, so needless to say I'm concerned that Firefox is suddenly saying some organization is controlling my Firefox.

Win 10 Home Ver. 22H2 OS Build: 19045.3086 Windows Feature Experience Pack 1000.19041.1000.0

Antivirus/Firewall: Windows 10 Security

Firefox: 114.0.2 (64 bit)

I have tried the suggestions as described in the following article: https://support.mozilla.org/bm/questions/1273784 However, am still having the issue. It's as if the settings are totally ignored. I am using version 108.0a1 of Firefox developer edition. Ideally what am trying to achieve is away to disable all features of ETP. I figured setting it to custom with all values unchecked would have done the trick but it's not working. What works is if I add the site to the list of Exceptions for Enhanced Tracking Protection, then I will see all Ads loaded just fine on the page. However, this is not viable for me as I have a large list of sites that I visit, and I need to see the ads on them.

Does anyone know of a way to get around this feature in FF?

Is there another setting am missing from the previous article?

Hi, I accidentally allowed notifications (while using Firefox) from a particular web site only to find out that now I get numerous notifications regarding phony virus alerts, etc. I am unable to block the notifications.

I searched the web for how to block a notification from a web site, but have not come up with any solutions.

In particular, I went to about:preferences > Privacy & Security > Permissions > Notifications. The web site is set to Block, but still the unwanted notifications continue. Perhaps the notifications are coming from a different web site that seems to be hidden?

I also quit Firefox and restarted Firefox, but the notifications continue. I also restarted my Macbook Pro, but that didn’t help either.

Here is the link I originally clicked on, but I obviously wouldn’t want anyone to click on it:

https://duckduckgo.com/?q=!ducky+trialjuries&ia=web

I would be so grateful if anyone has a solution!

Hi,

Is there any reason firefox would flag an mp4 file legitimately?

• The file extension and file type are absolutely mp4.
• There seem to be no mp4 related zero days.

Does Firefox perhaps just treat all downloads from suspicious domains as malware? Is there a zero day I missed? Is this based on some missing metadata on the file or something?

Thanks for any advice you can give here, I'm scared.

I have a (quite old) Iomega 2 NAS in my local network. I have to connect to the admin page to change some settings, but FF responds with SSL_ERROR_UNSUPPORTED_VERSION, with no option to bypass.

It's my own NAS, in my own local network. How can I bypass this (in this case stupid) restriction? I know it's safe, I know no harm can be done, still I can't get to this page.

When using the Export Logins feature to create a .csv file, the last few fields don't seem to translate into any known date-stamp format in Excel. The data seems to have relative chronological value, but I can't make sense of it in a spreadsheet.

Can a developer check this and modify the output of those fields so it's more compatible?

Example:

 Header             Cell data
 ----------------------------

timeCreated 1675178753239 timeLastUsed 1684763722184 timePasswordChanged 1675178753239

I am running Firefox 118.0.2 64 bit on windows 10 22H2. For one particular website I get a 403 error on Firefox, the site opens normally on Edge. I do not have any add ons or extensions that block websites. I have cleared cache and cookies and tried to open the site in troubleshooting mode, no luck. I have also disabled BitDefender, same results. Any suggestions are appreciated.