Critical FireFox vulnerability could allow phishing scams

8 Jan, 2005 at 11:00am ET Article published in Tech

Comments

1. 
   8 Jan 2005 ~ 11:29am BlackHawk http://forums.mozillazine.org/viewtopic.php?t=196756 ?
2. 
   8 Jan 2005 ~ 3:26pm Camman

   Black Hawk wrote:

   http://forums.mozillazine.org/viewtopic.php?t=196756 ?

   that site you linked wrote:

   This may not be a "bug", because Firefox is doing its best with invalid HTML, but that doesn't change whether or not it's a security flaw. The issue is that it could be used by malicious sites to disguise the target of links, not that Firefox needs to clean up after lazy webmasters.
3. 
   9 Jan 2005 ~ 8:53pm Weedo I've been getting more and more popups in Firefox.
4. 
   7 Feb 2005 ~ 8:07am David Gaah! Mod, please delete two previous posts.
   
   A URL doesn't have to be long to be nicely spoofed. See http://www.boingboing.net/2005/02/06/shmoo_group_exploit_.html
   
   
   The proffered workaround does not seem to help.
   
   The only sure way to know will be to read the certificate. Yah right, who's gonna do that?