Firefox 社群討論區

Hello

I would like to report an issue on Firefox If i work on my Private domain on my laptop my cursor is moving alone some time to time I have also sometimes intrusion after my CPU FAN run very high

I'm on Linux Mint last version but I have also the issue on Linux Mageia 10. (last version one month ago)

I have posted some question to mageia Team Post : viewtopic.php?p=92060#p92060 viewtopic.php?p=93642#p93642

My Suspicion so far from now : The problem is probably an HTTP Flood that permits access to User Security.

So I have two problems: • The problem of the cursor moving. • I also have my CPU fan increasing speed from time to time without reason after I change my User Password. ( Less noticed on Mint so far from now but it's doesn't mean it's better )

After reinstalling my laptop and not moving files, the issue generally occurs again. It's less occuring if I change my IP Address, meaning if my Internet Provider change IP everyday it's less occuring

I went to discuss it with an External IT Consultant (we tried to scan the laptop for viruses and found nothing with multiple antivirus programs, DocWeb, Kaspersky, … ISO Boot Scan). So the issue is probably only an intrusion without any virus, as a Security Leak Exploit on Firefox

(maybe an HTTP Flood Attack from my IP found when I connect to my Domain). Both issues generally occurred first if Firefox was open. It stops if I close Firefox.

It occurred after my work on my private domain. I strongly think, after experimenting with reinstalling, rebooting, etc.,

it’s a security bug or issue on Firefox that makes someone able to control “a little” the cursor when the cursor is moving on the page, which makes life very difficult when you work on your stuff. The cursor is able to go up and down, up and down, something like that. Sometimes it goes across or moves to the bottom of the screen suddenly. Only from the CursorPad. If I use the button mouse controller from my laptop keyboard, the cursor does not move in the same way, I believe. I didn’t try so much with an external mouse. I don’t want to hide the issue.

Trying to currently install a Gateway on my Personal Internet Broadband (but currently an issue because my new Gateway turned off and was not able to start anymore, so I sent it back to the Seller). So still waiting for this.

Issue on Mageia or Mint, so the problem does not come from the distribution, but ( I suspect ) it took time for the guy to come back to the same level. Of intrusion, They need to adapt to the new version of the Distrib. I suspect I'm not 100% sure I’m reporting it to Mozilla Firefox, Mint, and Mageia here.

Thanks for your help. ( I have lot of problem of Availability currently... I'm sorry if I'm not replying so much )

Demos95

---

NAME="Linux Mint" VERSION="22.3 (Zena)" ID=linuxmint ID_LIKE="ubuntu debian" PRETTY_NAME="Linux Mint 22.3" VERSION_ID="22.3" HOME_URL="https://www.linuxmint.com/" SUPPORT_URL="https://forums.linuxmint.com/" BUG_REPORT_URL="http://linuxmint-troubleshooting-guide.readthedocs.io/en/latest/" PRIVACY_POLICY_URL="https://www.linuxmint.com/" VERSION_CODENAME=zena UBUNTU_CODENAME=noble

Problem occured also on Mageia 9 and 10 last version

Hey

I'm genuinely curious about Firefox BTS in this scenario.

Example: I open website (http://homedevice:1000) and it requires me to log in. Then I log in at (http://192*:1000) and it requires me to login. "homedevice" is a domain name for 192*, yet I still have to log in twice for the same IP under the same port. Why is it treated seperately the homedevice:1000 and the 192.*:1000 address?

Greets

I am using a local library and it comes to me that I find some activities that occur whilst working on my daily tasks and wonder, I would really like to run a diagnosis in my tasks and activities and check if there are no spams running me dry.

chrome logs onto my email without me entering password, and facebook under firefox stays logged in even when i log out with no password. i neeed help forget the vfb but my [redacted] @gmail.com email is dangerously in jeprody

Firefox security features warning on Linux doesn't explain what kind of file to add to apparmor.d/firefox-local. Is it a .txt file, or something else?

How do I keep my online banking private when using Firefox as my browser? When using Google Chrome as my browser, I use incognito, but I'm changing to Firefox and need to know that my online banking is safe.

I run Firefox on a retro Linux system that is currently running a personal "Frankenbuntu". Basically, Kubuntu 14.04 LTS with lots of components updated either "in-tree" or via a pkgsrc-like collection of "ports" installed under /opt/local that includes GTk3, Mesa, VAAPI plugins etc. I use that tree with a combination of built-in rpath settings (for apps installed under /opt/local) and wrapper scripts setting LD_LIBRARY_PATH, so as to maintain the possibility to run system apps independently, in particular while booting. (Sounds complicated, but it's also a rewarding fun project for me, allowing me to keep using an old and familiar DE with modern features on 2017 hardware,)

I have never yet dared to update my glibc from the stock 2.19, so with every Firefox update I fear to run into problems with that. I do have a 2.27 build but that is installed in another parallel prefix (/opt/glibc/2) because one cannot simply use LD_LIBRARY_PATH to use a newer glibc (I think because the ELF interpreter, ld-linux.so, has to match).

I already use patchelf with success to change the ELF interpreter to the 2.27 one, for instance with Ferdium, a Node/Electron application. This works and as far as I can tell, it will load all Mesa and DRI components from my /opt/local tree so hw-accelerated video works as it should.

But when I try this with Firefox, I get what appears to be a sandboxing issue when attempts are made to load Mesa DRI libraries: ``` libva info: VA-API version 1.24.0 libva info: Trying to open /opt/local/lib/dri/iHD_drv_video.so libva info: Found init function __vaDriverInit_1_23 [GFX1-]: VideoBridgeParent receives IPC close with reason=AbnormalShutdown MESA-LOADER: failed to open iris: libsensors.so.4: cannot open shared object file: Permission denied (search paths /opt/local/lib/dri, suffix _dri) failed to load driver: iris MESA-LOADER: failed to open kms_swrast: libsensors.so.4: cannot open shared object file: Permission denied (search paths /opt/local/lib/dri, suffix _dri) failed to load driver: kms_swrast MESA-LOADER: failed to open swrast: libsensors.so.4: cannot open shared object file: Permission denied (search paths /opt/local/lib/dri, suffix _dri) failed to load swrast driver libva info: VA-API version 1.24.0 libva info: Trying to open /opt/local/lib/dri/iHD_drv_video.so libva info: Found init function __vaDriverInit_1_23 [GFX1-]: VideoBridgeParent receives IPC close with reason=AbnormalShutdown ``` Copying libsensors into /opt/local/lib turns the above error into the same one about the next library available in the system (/lib/x86_64-linux-gnu/libtinfo.so.5). The DRI module I actually need (iHD) does load but I still get the GFX abnormal shutdown error. I've tried the interpreter change in other applications using libva and don't see the issue.

I do see this in the syslog: ``` Aug 31 15:18:47 Bmbl kernel: [2043645.959690] MediaSu~isor #1[17692]: segfault at 290 ip 00007f2b0815b284 sp 00007f2ad913e990 e rror 4 in ld-2.29.so[7f2b0814f000+21000] Aug 31 15:18:47 Bmbl kernel: [2043645.959702] Code: 04 49 83 fc 06 44 0f 44 c8 81 e6 ff 7f 00 00 45 89 8f 08 04 00 00 48 8d 04 76 4d 89 b7 00 04 00 00 4c 8d 04 c7 4d 85 c0 74 0f <41> 8b 48 08 b8 00 00 00 00 85 c9 4c 0f 44 c0 41 8b 3e 6a 00 48 8d Aug 31 15:18:47 Bmbl kernel: [2043646.080407] MediaSu~isor #1[17732]: segfault at 290 ip 00007f2b0815b284 sp 00007f2ad913e990 e rror 4 in ld-2.29.so[7f2b0814f000+21000] ```

Any idea why this is, and what can be done to prevent this, beyond actually updating my system glibc? I'd have no problems disabling sandboxing.

A couple days ago when I opened Firefox, I immediately started getting pop up messages saying I had viruses. If I clicked on REMOVE VIRUS, it tried to get me to sign up with McAfee. I cannot see my full screen due to all the pop up screens. My MS Defender virus protection is not identifying any viruses.

Using the "re-open tab" function on a browser based discord instance changed a bunch of my settings, for one it turned on vertical tabs, added extra side bars to everything, and made every ui element animated. Ive figured out of how turn vertical tabs back off, and while I was writing this, I figured out where to turn off this stupid animated gizmo to select what I actually want, instead of directly bringing up my bookmarks/history. How do I stop a random website from overriding my settings in the future? If discord can do it through incompetence another website can surely do it maliciously and I really dont fancy this happening again. The "best" (and completely unrelated) I've found on how to undo this, let alone prevent it from happening again is pressing esc or f11 because of course everything these days has to drown in AI slop :/

Hi.

I'm having trouble with https://support.mozilla.org/en-US/kb/linux-security-warning?as=u&utm_source=inproduct#firefox:linux:fx140.

It assumes the installation is at "/home/<USER>/bin/firefox/{firefox,firefox-bin,updater}" but mine is "/home/<USER>/.local/share/torbrowser/tbb/x86_64/tor-browser/Browser/firefox.real".

How exactly do I edit the line?

(Latest Ubuntu. I also have Librewolf and Firefox, but didn't see the warning as on Tor.)

Samuel

How do I turn off all warning and redirects for unsecured web sites. I am an embedded developer and 90% of what I do is work on designs that can be configured via a localhost web page. I'm tired of the warnings and the constant attempt to turn http into https.

Hi all the people,

I was just surprised to see this in an Apache HTTP log: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/58.0.1"

This bugs me. My first guess would be that a Webkit based Firefox could not be qualified as really Firefox. Although that, I could imagine a Firefox for iOS or MacOS based on Webkit, may be, but it says it is on Windows, which makes less sense.

I suspect this is a user agent string spoofing, but I just need to be sure (I try to get ride of far too invasive bots, while I’m afraid to disrupt browsing from legitimate web users).

With thanks and my apologizes for such a question which may looks obvious or strange to people who know for sure.

After all of those years, am I witnessing now that FF literally failing?

How could it become mysterious by that it lets user's location leaked to github even though: - third-party HiFi company VPN is active and in OpenVPN UDP/TCP, Wireguard, IPv6 On/Off, etc... - No bookmark to corresponding website - Cache and website data were so-called cleaned, - Other browsers don't give that symptom, only FF - No related plugin, out of only 3

it's impossible to find out how it lends to the language and region query of this website every time after cleaning. Is FF getting closed app?

Is that a no-way-to-explain effect of language models' evolution is exponentially higher in every 4 months after two years?