Diễn đàn hỗ trợ Firefox

Hello, Microsoft Defender did a scan tonight and apparently detected a trojan script, located in the folders for Firefox extensions for both profiles I use on my computer

Trojan description: Trojan:Script/Wacatac.B!ml

Files: C:\Users\[user]\AppData\Roaming\Mozilla\Firefox\Profiles\[default profile]\extensions\langpack-fr@firefox.mozilla.org.xpi C:\Users\[user]\AppData\Roaming\Mozilla\Firefox\Profiles\[second profile]\extensions\langpack-fr@firefox.mozilla.org.xpi

This scan happened at 9pm, and a previous scan at 6pm didn't show anything. When it detected the script, MS Defender contained it and apparently deleted it when it asked me to restart the computer, I then did a full offline scan and nothing else showed up, same with a full scan with the free version of Malwarebytes. I didn't do anything unusual between 6pm and 9pm, so I'd like to know if there's a way to determine whether that script was an actual threat (instead of a false alarm)? If so, any way to know how long it has been on my computer? Any further risks to take into consideration? Other steps to follow? Thanks for the help

I recently noticed that in the settings it says "Your browser is being managed by your organisation". The certificate "ImportEnterpriseRoots" seems to be affected. I have seen guides saying to delete a registry key but I do not have a Mozilla folder in my policies.

It is worth noting I do run two anti virus software. Kaspersky total security and gridinsoft anti malware. Just wondering if there is a way to permanently remove this or if its just a side affect of my anti virus software.

Thanks

I am using Firefox for windows on my laptop and I have this issue where it stopped filling in my credit card information. I tried to follow the steps of turning it on/off in settings, except no "Forms" or "autofill" appear anywhere in my settings, nor privacy & security. Going into config, it appears that form and autofill for credit cards are both switched on and available. My browser is updated and everything else seems in order. How do I fix this?

How can I get a list of all the sites that are set to "always open" in a specific container? For example, I want to see a list of all the sites set to always open in the Work container. I would also like to edit the list without needing to manually visit each site.

I'm an old Firefox user. Thank you for excellent Browser!

However, I've seen some bad things in Firefox 89, so I'll report it. After upgrading Firefox to 89, access from behind the proxy no longer reaches all addresses beyond the firewall. I noticed that the page opens correctly when I play around with the settings, which is related to the HTTPS-Only Mode and Automatic proxy configuration URL settings. I specify the address of "http:" in the Automatic proxy configuration URL. In that case, if HTTP-Only Mode is ON, it seems that the proxy configuration file cannot be read correctly. When I turned off HTTP-Only Mode and reloaded again, the page was displayed correctly. Alternatively, I can give up the specification in the Automatic proxy configuration URL and switch to the manual specification. That said, before 89, all settings were displayed correctly, so I think it was a trigger for the change in 89. Is there anything you can think of? Is such a phenomenon happening in other people?

Firefox Browser uprated to 92.0 today. Previously whilst browsing Ad's were showing; today I have no Ad's displayed but have not enabled an Ad Blocker on Firefox. A site I use extensively cannot now be properly viewed; I get a message to turn off Ad Blocker. I have set Enhanced Tracking Protection to 'Off' but am still unable to obtain full functionality, I am using standard Firefox Privacy settings otherwise. I am able to browse the site properly using MS Edge. I have deliberately refrained from using any AD Blocking on my part so as to ensure the site in question can be properly viewed. The only Firefox extension being used is Kaspersky Protection; I get the turn off Ad Blocker message both when Kaspersky Protection is on or off.

Hello, I use dark mode extensions extensively :) and I really dislike light mode pages. However, Mozilla pages refuse to be changed due to the fact that they are "protected" by default.

I don't really care for this protection. Can it be disabled?

Hello! A site kept popping up a confirmation window for an action I was trying to take, and in the confirmation window, there was a checkbox for something like "don't allow [this website] to prompt me again" (that's as best I can remember). I checked the box thinking it would just allow the action to happen without the confirmation window, but instead, the site just won't take that action anymore. How can I undo this setting? Thank you!

HI!

My buddy highlighted an issue, then i re-checked myself and it is worrying to me.

To recreate (windows):

Get any (non-webistaller [not nececarry, to do it this way, but simpler to check]) firefox version (buddy got a fresh portable, i used my kinda privacy fortified one). Disconnect from the internet (plug the cable for fastest result). Make your version usable (install it) Start firefox, and open the Resource Monitor, with the network tab open expand the Network Activity portion (short alphabeticly, by name, check for F for firefox). Plug the cable in.

You soon will see FF will start looking for things, then an adress with a googleusercontet.com will pop up. Does not matter what is the Homepage's default browser, does no matters even if the Homepage is set to blank, this happens.

My best bet would be google safe browsing, but still, without any activity it is already connecting to that?

I know about the Google-FF/Mozilla relation, but this really made me think about why i still like firefox.

I am control freak so because it I like Mozilla Firefox. So I need feature (inside about:config) that will

1. Notificate me about every access to every API that generate extensions (history access, bookmarks, webpage content, tabs access etc) 2. Ability to disallow/allow access inside these popups (permanently, session mode) 3. Such permission sandbox only for a list of addons (not all)

FF is offering me two versions of my e-mail when I login to a website where I have specifically told it to 'never' remember a password. The little black selection dropdown shows both myUserName@myMailserver.com myUserName@myMailserver.co When I click to login page of 'website.com'. It does not offer this for all websites that use e-mail address as login.

I have checked and the website in question shows up in 'never save' exceptions to my 'ask to save usernames and passwords'.

So I have no saved passwords to remove for that site--when I look up 'website.com', I get nothing.

2 questions: why does FF continue to offer a login name for that site?

FF 93.04 beta (will be updated in a few minutes to next version) MacOS 11.6 Big Sur and where can I find and zap 'myUserName@myMailserver.co' without losing all of my other logins & passwords that I do allow FF to store for me?

Hi can you tell me how I can generate a new Firefox Key because when I signed in to my firefox account to follow yr instructions, but there is No "Create" Button next to my name or email? I checked all the headings, security etc and can not find yr Create Button

Thank you

cheers Kev

@mozilla

 Only Firefox browser is logged in my Facebook account. Login and password  are not saved. If I loose session, account is gone. Please help view and save my password.

Since updating to Firefox 93.0, I notice that downloads from certain sites are being blocked, because they are using a basic HTTP connection, requiring me to explicitly allow each download. I understand that this is a new "feature," as explained here: https://blog.mozilla.org/security/2021/10/05/firefox-93-protects-against-insecure-downloads/, however, I in no way desire this behavior. It is an asinine nuisance, and if I cannot disable it, I will have no choice but to revert to an early version of Firefox. My question, then is this: is it possible to disable this check, and simply allow all downloads? If so, how can I do that?

Hi,

I found some discussion related (https://discourse.mozilla.org/t/disable-add-ons-on-specific-website/33693) but no solution yet.

This is imho a big flaw in the privacy of users.

There are trivial cases, for example if I use a YouTube downloader plugin, I obviously want it to monitor my browsing ONLY when I'm on youtube.com...

And there are some critical cases: when I browse my web banking, or when I go on some trading website, I don't want my financial operations to be at risk because of an add-on that is very useful everywhere but on those site.

However, I don't want to exclude all the add-ons for those website too, that would be just too much.

I think there's already a coding base in place, since you can disable each add-on when using private windows. This could be enhanced by having a system of whitelist/blacklist instead. And this feature would actually make more sense than using a private window.

Another way would be to have this feature on per container, instead of per website, than would work well too.

People have different activities, and some requires useful plugins, that are very specific. I mean Keepass's add-on (for example) is useful everywhere, but many add-ons are related to one activity at a time.

For example, if I'm a marketer and want to analyze website, I'll use add-ons for having stats on metadata or keywords or even real time reports from Alexa or from AliExpress, etc...

But when I'm reading my email, I'm not happy those add-ons can see my data.

That would be tedious to disable all those plugins every time I change activity, especially since we are productive humans so obviously we need to alternate those activities doing multitask all the time.

And the private window option is not flexible enough for that kind of multitasking, when containers are.

I hope this helps everyone understand clearly why I think my request is not only a real user need, but also currently a flaw in users privacy since most people will not trade the comfort of their add-ons for some privacy concern they don't always understand...

I know this is some kind of feature request more than ask for help, but https://qsurvey.mozilla.com/s3/FirefoxInput/ is out of service so I don't know where to address my concern here.

Thanks for helping me pushing this idea forward.

When I open the Security page, it shows 'about:preferences#security' in the address bar, but when I paste the same string 'about:preferences#security' into the address bar, it does not open Security, but instead a Google Search Result page. Is there a text string that will open Security ?