I-Firefox Isithangami Sokwesekwa

Hi, I planned to block my users from installing extensions/add-ons. I found an article that might be the answer (https://support.mozilla.org/en-US/questions/1308646). I tried to create a simple policy (below), but somehow it does not work (I can still install any add-on/extension). What is wrong with my script? I'm using Firefox ESR 78.11.0 (64-bit) by the way.

My "policies.json" looks like this:

{

"policies": {
  "ExtensionSettings": {
    "*": {
      "blocked_install_message": "Blocked!",
      "install_sources": ["https://addons.mozilla.org/"],
      "installation_mode": "blocked"
    }
  }
}

Sincerely, Jonathan

I asked this question some time back here: https://support.mozilla.org/en-US/questions/1362859 I'm asking again to reframe the question. The problem is - if my experience is a guide to the rest of the world - VTT files (which are used to caption HTML video) are no longer read/loaded by Firefox when it is viewing the HTML file locally (i.e. file://). On the web they are loaded as expected. Presumably there's a security setting somewhere in Firefox that now refuses to load the VTTs locally. Maybe under Help > More troubleshooting information there is a setting to change to fix that?

Hi all :)

From a fresh Linux Debian Bullseye I try to connect to a local machine with Firefox (v97 64-bits) by its hostname (avahi server with default domain "local") with the port 6180 bound to a remote web service port (61 is the distant machine IP and 80 is the forwarded port).

When I want to open this URL : http://bionic.local:6180/ FF displays "We can't find this site ... Unable to connect to server at bionic.local ... check your network connection and firewall"

BUT ping bionic.local works perfectly and resolve the good IP address from the Chromium navigator the same URL works without a problem, I can open the distant web site.

This workaround works : add a static resolution in the /etc/hosts file : 192.168.0.71 bionic bionic.local => so FF works in the expected way for now ! But as I said this a workaround and a bad solution.

I supposed too the port was blocked because I accessed an unusual port. So I tried this without success.

How the hell make that FF v97 allows me to use an unusual port ? Or is it bound to the domain "local" which is no more accepted by FF ?

Thank you in advance for your help. With adelphity, lnj

How to do

I had a personal certificate installed in Firefox and it was working well. It expired, so I got a new one from the same provider. Both appear in Firefox under "Privacy & Security" -> Certificates -> View Certificates... The previous one is not valid any more, and every time I try to access some page with a certificate, it uses the old one. So I tried to delete the old one. Nothing has worked so far. Doing the straightforward way of selecting it in the Certificate Manager and deleting it makes the certificate disappear from the manager menu, but if I enter the certificate manager again, it is there again. I tried to delete both certificates, same issue, both reaper in the manager. I tried to delete them, close firefox, delete cert9.db, cert8.db and key4.db and nothing. Only thing left is delete my current firefox profile and start again... Any other idea or something that I might delete before to solve this?

Hello, Microsoft Defender did a scan tonight and apparently detected a trojan script, located in the folders for Firefox extensions for both profiles I use on my computer

Trojan description: Trojan:Script/Wacatac.B!ml

Files: C:\Users\[user]\AppData\Roaming\Mozilla\Firefox\Profiles\[default profile]\extensions\langpack-fr@firefox.mozilla.org.xpi C:\Users\[user]\AppData\Roaming\Mozilla\Firefox\Profiles\[second profile]\extensions\langpack-fr@firefox.mozilla.org.xpi

This scan happened at 9pm, and a previous scan at 6pm didn't show anything. When it detected the script, MS Defender contained it and apparently deleted it when it asked me to restart the computer, I then did a full offline scan and nothing else showed up, same with a full scan with the free version of Malwarebytes. I didn't do anything unusual between 6pm and 9pm, so I'd like to know if there's a way to determine whether that script was an actual threat (instead of a false alarm)? If so, any way to know how long it has been on my computer? Any further risks to take into consideration? Other steps to follow? Thanks for the help

Hello I'm referencing the topic where TLS 1.0 and 1.1 support was removed but rolled back to accommodate some government agencies / sites and support for COVID-19 data

https://support.mozilla.org/en-US/questions/1290040#:~:text=Mozilla%20and%20other%20browser%20makers,and%20performance%20of%20Internet%20connections.

Quoted answer "Right, support for TLS 1.0 and TLS 1.1 has been removed few months ago, but we reverted the change for an undetermined amount of time to better enable access to critical government sites sharing COVID19 information."

Since it was referenced as "undermined amount of time", is there anything currently on your roadmap/release schedule in regards to removing support again? I have some cutover decisions I need to make and knowing if ESR for example will remove this support in 2 months may effect the direction of those. If you have anything to share, i'd really appreciate it.

Regards,

-Chad

Scroll down until you find "PERMISSIONS" and find for "Camera". Click on "Settings" that is parallel to "Camera". Now, select/type all websites, that you want to give permission/access to your camera.

Never used a webcam before, but i did that... the site is there, it says allow... i'm on the website now, says webcam not found... am i forgetting something? do i even have one? i'm at the library...

Tim

Hi.

I need to print out my saved passwords. I have no cellphone to access, just my laptop and printer. I only use Firefox and no other browser. If my laptop gets hacked or breaks down, then I need to use someone else's computer to access my passwords in an emergency, and can't access my passwords to do so...so printing them out periodically is the smartest thing I can think of.

Help, anyone? This is pretty important to me. Thank you!

The rumble video interview of Jonathan Cahn by Greg Hunter is NOT visible in my linux version 91.12.0esr(64-bit) of Mozilla Firefox, straight from an openSuse software repository and directly installable under yast, which is their administrator program over the linux software including the software manager

The web page in question is https://usawatchdog.com/only-way-to-save-america-is-turn-back-to-god-jonathan-cahn/ but the java script code is grayed out on this page

!function(r,u,m,b,l,e){r._Rumble=b,r[b]||(r[b]=function(){(r[b]._=r[b]._||[]).push(arguments);if(r[b]._.length==1){l=u.createElement(m),e=u.getElementsByTagName(m)[0],l.async=1,l.src="https://rumble.com/embedJS/ugdmvn"+(arguments[1].video?'.'+arguments[1].video:)+"/?url="+encodeURIComponent(location.href)+"&args="+encodeURIComponent(JSON.stringify([].slice.apply(arguments))),e.parentNode.insertBefore(l,e)}})}(window, document, "script", "Rumble");

I have used other browsers, such as Opera, Brave, Google Chrome and the rumble video is clearly visible and playable.

What do I have to change in Firefox so that this video becomes visible on the page?

Randall

p.s. Greg Hunter is interested in this reply too

Zoom.us renewed their DigiCert Global G2 TLS RSA SHA256 2020 CA1 certificate on 03/31/2023 and I now get a persistent error message (Error Code 6: ... certificate is not trusted.

Since then Zoom has not worked for me and their Artificial Intelligence says to open my browser and check my internet connection, time settings, updates, reinstall everything etc. - the usual responses ...

Zoom responds with "Error code: 6" and/or "Error code: 100068000"

 but do not stipulate whether these are Zoom Error codes or certificate error codes.

The Artificial Intelligence insinuation is that FireFox is not trusting this certificate.

Is this something FireFox can help me with? Perhaps, how to make this certificate "trusted"?

Thanks, I hope, Dave Henry (Dan is my Facebook pseudonym) ( DavidJHenry@telus.net )

I have 2-Step verification on Gmail. When I go to log in I get this: Insert your security Key into the USB. I cancel out of it and get this: Your phone can’t locate your device. Move your phone closer to the device where you’re signing in, and then try again. I "Try another way" and I try to get a "one-time security code" and it forwards me to a website where the cycle begins again. If I try "Auto-recovery" it sends me to google. I can access Gmail on the same machine via Chrome, but would rather not. I can also get it on Firefox on my phone.

I did recently turn on two-step and it asked if I wanted a key, and I thought it might mean Google Authentication, I think it meant a USB key.

Any thoughts? I rather not give up Firefox.

How do I shut off "Firefox prevented this page from automatically redirecting to another page"? I have pages that need to refresh automatically and this function is preventing these pages from automatically updating. I have searched settings multiple times and have not been able to fix this. This just started after a Firefox update a month or so ago. PLEASE HELP!

On my laptop, I run FDE as my daily driver, with the release version to handle my webmail. I also use portable firefox (from portableapps.com) as a browser to use while at work, from a thumb drive. While using that portable verison, I usually just go to google image search, and a work site that would definitely be secure.

My question: I don't like to update the installation on my thumb drive very often, and occasionally work computers are very slow anyways. So if I were to update it no more often than once a month, which version of firefox would be most secure: Release, Beta, or Nightly?

If doing this is just dumb, then which version gets updated less often--it would be Release, correct?

Hello!

I always use private browsing so I thought that my history was totally not being saved, but discovered recently that when I started to type within the search field, that many of my past searches were listed in the search field with the type highlighted in purple. I had to manually go in and delete all of these past searches. I don't want any search history to be saved. Is there a setting in preferences that I'm somehow missing? Why is Firefox saving these past searches if I have it set to Always Use Private Browsing?

Thank you!

After upgrading to v101, Firefox no longer recognizes my Self-signed wildcard SSL for *.local.dev.

Before you tell me not to use the .dev domain, I am aware that Google owns it and we're technically not supposed to do local development with the *.local.dev domain.

I have already tried the following: 1. Set network.stricttransportsecurity.preloadlist to FALSE, and everything was working perfectly fine before v101 2. imported the server.crt into Trusted Root Authorities in Windows, and also imported it in the Certificate manager in Firefox. 3. Tried other wildcard local domains like *.test.site, *.local.ddev and these don't work either.

I even tried following recent guides to issue a new certificate with openssl and SAN, and it still doesn't work.

Screenshot of wildcard SSL attached.

I've looked into this situation, and none of the solutions submitted online work.

I went to about:preferences, and set "security.certerrors.mitm.auto_enable_enterprise_roots" to false, but "security.enterprise_roots.enabled" is set to true and locked; I can't change it.

First of all, I am not using Avast, AVG, Kapersky, etc. antivirus; I'm using Win 10's built-in security suite, so it's not my antivirus causing it.

To double check that, I opened the Registry and went to " HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Mozilla\Firefox\" and "HKEY_CURRENT_USER\SOFTWARE\Policies\Mozilla\Firefox\", looking for a Mozilla\Firefox\Polices key, and neither one had any Mozilla keys.

I even checked the Autoconfig settings, and found no settings in the JS file that had anything to do with Enterpise Roots (I renamed the file temporarily to disable it), but I still can't disable security.enterprise_roots.enabled

I have no "Organization"; I'm an independent home user, so needless to say I'm concerned that Firefox is suddenly saying some organization is controlling my Firefox.

Win 10 Home Ver. 22H2 OS Build: 19045.3086 Windows Feature Experience Pack 1000.19041.1000.0

Antivirus/Firewall: Windows 10 Security

Firefox: 114.0.2 (64 bit)

I haven't had to sign in for a while, so tonight when I tried and I typed the password in correctly the box just immediately closes and reopens like its incorrect. I have tried locating the key3.db and key4.db which I can't find on my system, nor can I find the login.json that is supposed to have the log of passwords to back them up. I don't have any 3rd party password managers and I've tried with my VPN disconnected. I've used the password generator to secure some of my websites so I don't even know was some of my passwords are, so resetting the primary password would be a huge hassle. If someone could please help me out I would be very appreciative. Thanks!

I've saved and can use the log-in details for a particular site, but they doesn't show up in the password list, so I cannot edit/delete them. Whilst it may not be relevant and may confuse the issue more, the reason I want to delete log-in + password is because I have to create a new account every 2-3 months, which I then save. So when loading the home page, the current and all previously saved log-ins get listed. I've tried to manually delete one when on the home page, but unlike keystroke searches which do get deleted, this one remains in the list. I suppose I could clear everything and save all the log-in details for each site again, but why are the log-ins for one particular site not showing up ?

Thanks