Firefox 社群討論區

Find that at each update, the Startpage search engine is re-installed WITHOUT my permission. I understand startpage can be defined as a PUP, and I don't trust it. The most aggravating thing is that installing add-ons and extentions without users' permission is unconscionable.

Would like to know if there is any way I can block the reinstallation of this at each update.

Thanks.

Hello everyone,

I’m reaching out because I have some concerns regarding Norton’s HTTPS scanning feature. Recently, I noticed that Norton scans HTTPS traffic, and I’m unsure about how this impacts my privacy and security. While I understand the feature is meant to detect threats, I’m particularly worried because it involves decrypting sensitive information. This raises concerns about whether my personal data, such as login credentials or payment details, could be exposed during the scanning process. Has anyone else experienced issues or found this feature problematic? I'd love to hear about your experiences and whether there are any steps I can take to ensure my online security without risking privacy.

I also have found a names of site that were blocked in the report generated from Norton

someting to read ---> https://zakird.com/papers/https_interception.pdf

Thanks in advance!

Ok, there are a couple things that seem related and are worrying me.

First, every time lately that I have signed in to something new (new online account, FEMA, etc), when the little window pops up to ask if I want to save the log in info, it doesn't have the password I entered, but instead an immense string of characters (I'd say several hundred) AND I just saw this last time as I was erasing the password, that it actually looks like it might be a web address (I just briefly saw http:// before it was erased)

The next thing that has just happened today (Is black Friday now like solar flare ID theft Friday or something?!?!) is that when I tried to sign in to...I think it only happened on Amazon...when I clicked on the email/user box it took me to my saved passwords page. Every time. I couldn't even enter the log in because it would just go to passwords. That's really really worrisome.

And, then, the last thing that I haven't had a problem with so far since getting a new computer is every now and then my computer would all of a sudden just start doing things on it's own. I was logged in to an online store once that had my card saved and my computer just ordered everything in my cart. Once I was browsing on the library and it cancelled all the books I had on hold. I have video where it would just start entering random stuff in fields.

I have changed my keyboard and the keyboard I have now is wired.

Any ideas on what this might be? Or do I really have some serious bad guys out there messing with me?

Good morning

after on option https://support.mozilla.org/en-US/kb/windows-sso

MFA does not work, does not ask for authentication, login to o365 why is this happening

Hello! Due to work reasons, we need to use Fiirefox 54.0.1 (64) and do not need to upgrade But When open the webpage https://www.alibaba.com/ , the login icon on the right cannot appear I searched carefully online but couldn't find a solution Please provide a solution Can you provide an email address? I can take a screenshot to illustrate the situation My email address bestfinder@foxmail.com thank you HALE

About once a week or more, a very small FF icon will appear on my desktop after startup. It will have a string of letters under it, like this one: hqWyUevN . I have never clicked on these things and always pitch them into the trash bin. But I do wonder what it is, what it means, and if it's a security issue of some sort.

Please speak slowly and use simple words. I'm not all that tech savvy.

Thanks!

Hello,

We are manufacturers of networking devices.

As most networking devices, ours can be configured by navigating to the default gateway IP address via the browser. With the rise of security awareness, various regulations are forbidding the usage of HTTP. This is bothersome to us, as connecting to our devices via HTTPS and our self-signed sertificates will always throw an error of an unsecure connection to the end user. We understand the technical reasoning for this and that users are able to ignore the message, but this does impact our user experience and it may even discourage users from using our devices.

As these regulations will be impacting networking devices globally, we want to ask you if there are any workarounds for the self-signed sertificate "unsecure connection" message. Perhaps there is an argument that can be set, or an ongoing effort from browser vendors to assist networking device manufacturers with this.

Any information or help is appreciated.

Thank you.

Hi all,

I have a question regarding the permission requests of the Simple Tab Groups extension by Drive4ik.

As I'm sure many of you know, this extension needs to: This add-on needs to:

• Download files and read and modify the browser’s download history
• Monitor extension usage and manage themes
• Display notifications to you
• Access recently closed tabs
• Hide and show browser tabs
• Access browser tabs
• Store unlimited amount of client-side data
• Access your data for all websites

This add-on may also ask to: Read and modify bookmarks

Theoretically, I find this extension useful but I am concerned about the "Access your data for all websites" requirement. I read through Mozilla's permission request messages for Firefox extensions documentation and it seems like granting this extension these permissions would be a huge risk for the work I do– investigative journalism. It seems like I'll trade organizational benefits for a wider attack surface.

Can anyone speak more about the risks involved with using this extension, the trustworthiness of the developer, and why it needs the "Access your data for all websites" capability?

Thank you.

I had my application running on the Firefox earlier version where the an insecure content loaded over http from my server was being displayed on my webpage which is on https.

But with the latest versions of firefox this solution is no more working. For example the below i have a pic loaded from my server path say http://10.16.15.2:9181/pic/Pic?id=41234 .Now i need this to be displayed on my secure web page application, but the firefox browser is automatically converting to a https path. See the output from the debugger console

" Mixed Content: Upgrading insecure display request ‘http://10.16.15.2:9181/pic/Pic?id=41234’ to use ‘https’ "

Kindly suggest a way to disable this auto conversion in the latest versions of firefox, as i have no option to update the front-end or back-end of my application.

Thanks for your help in advance

After watching this video https://www.youtube.com/watch?v=mAfY_bNJTBI i went to https://www.cloudflare.com/ssl/encrypted-sni/ and did the test. Result is 3/4. (See screenshot below) Secure DNS, check DNSSEC, check TLS 1.3 check Enrypted SNI, fail In Firefox i tried doing exactly what the person did in the video but i dont have the settings he is showing in about:config Why is that? (Below you can see the screenshot, those settings are missing from about:config)

So my question reamins simple, how can i enable Enrypted SNI in Firefox?

I do not want companies to hold my hand and secretly micro mange my browsing. How do I turn off Total Cookie Protection completely. I am blocked on some sites even if click on the Shield and turn off Total Cookie Protection.

For a while now i click on a username box and the drop down menu is full of links relating to the site e.g when i use reddit, the username drop down menu is full of links i have copied in the past and usernames from other sites.

Page seems to freeze, and mail/google-acces denied out of nowhere. Same message when trying to log in to MyHeritage. Message someone changed phonenumber recently. I didn´t. I am accessing internet via cable to Iphone. No wifi or bluetooth. I suspect someone is trying to get illegitimate access.