Hello to all,
I was searching on Google how to block file:///C:/ or file:///D:/ because this is dangerous to allow!!! Shocking!
And this is still not fixed after years… (funda kabanzi)
Hello to all,
I was searching on Google how to block file:///C:/ or file:///D:/ because this is dangerous to allow!!! Shocking!
And this is still not fixed after years of developments... Why? To keep this allowed makes it too easy for hackers, especially with multiple screens and a shadow/background screens available which can be running in the background, not seen, when hackers do that.. Kind of the way TeamViewer allows help to be provided remotely. Kind of screen sharing. Oh well...
Maybe need lots of complaints from you all to get this changed?..
Try yourselves to use file://C:/ with 2 // and file:///C:/ with 3 // and both are allowing access to the whole file system and any data file. BONKERS??? But why to use 3 /// if 2 // still works? Insider's job or programming conflict? Why would Firefox programmers allow that? I do not understand...
I tried to use selective website blocker, but for file:/// that addon says that the page is not supported... Maybe another type of addon could be developed for this to be blocked and secured once and for all, but not sure if Firefox would allow such an access or such a blocking. May cause issues with Downloads and accessing download folder from within Firefox. HOWEVER, they could block any system or file access from the ADDRESS BAR and SEARCH BAR and then do a work-around solution by developing a special warning 'dialog message' each time when any user (owner or remote user) tries to access forlder to see or use any file. That would be a lot like a guest account requiring password to access special folder or file, or wants to perform an action usually not allowed for a guest user. Password is required for that each time, or at leats a visual confirmation. That would help, I hope...
Would need to re-educate users after this! TOO DANGEROUS TO KEEP THIS IN SUCH A WAY AS IT IS NOW!!!!
DOES FIREFOX TEAM UNDERSTAND THIS? Maybe they forgot about this, maybe they did not figure out how to solve this, or maybe someone from an inside is helping hackers to have a very easy access? Not sure, but this "open doors to all system and data files for anyone" is shocking!
What about business or government people? What about online bullying and harrassment? What about privacy about which Firefox writes so much? Need more complaints to make this a serious issue. So, everyone, please write your own comments or complaints to Firefox and Chrome directly and maybe they will listen. This may take more work than we think, but my ideas may help. What about your ideas? Express them below and maybe they will help as well.
You all can ask them for this to be blocked or solved, so ask. Maybe my ideas will help to get this moving. Write your own to them as well. And Microsoft may need to get involved as well because Firefox, and from what I read, Chrome allows this too... Other browsers may be doing that as well...!!!!!! There are loads of various browsers available!!!! I read something about Windows Policies, but I do not understand what that is...
(( !!! )) If any of you will try any system changes in an attempt to try solving this issue, make sure you are okay to risk with crashed system requiring reinstall or recovery to be used, and then, write down all the changes you do in detail before carrying any further and applying them because that may ruin the system without a way to recover it.
Thank you in advance.
