July 9th, 2007

Securing Firefox: How to avoid hacker attacks on Mozilla's browser

Posted by Ryan Naraine @ 12:21 pm

Categories: Apple, Botnets, Browsers, Data theft, Exploit code, Firefox, Google, Hackers, Metasploit, Microsoft, Mozilla, Open source, Passwords, Patch Watch, Pen testing, Privacy, Responsible disclosure, Rootkits, Spam and Phishing, Spyware and Adware, Viruses and Worms, Vulnerability research, Zero-day attacks

Tags: Security, Hacker Attack, Mozilla Firefox, CERT Coordination Center, Microsoft Internet Explorer, Web Browser, Ryan Naraine

Security problems with Microsoft’s dominant Internet Explorer browser helped pave the way for Mozilla Firefox to emerge as a perfect alternative for Web surfers.

However, Firefox users should be aware that hackers can exploit software flaws and design features to launch drive-by attacks.

The following configuration changes, recommended by CERT/CC, can disable various features and set up the browser to run in a secure state, limiting the damage from malware attacks.

Click here to see our extended gallery with tips/tricks to configure Firefox to run securely.

For more on browser security, see this CERT/CC document.

ALSO SEE:

* How to run Internet Explorer securely.

* How to run Apple Safari browser securely.

[UPDATE: July 10,2007 @ 9:25 AM] As a few readers have pointed out, these CERT/CC recommendations came from an older version of Firefox.  On newer versions, the display screens will vary  slightly but the advice/recommendations still apply.  I was aware of this and spoke to Will Dorman of CERT/CC before this posting.  He is updating the document to reflect the latest browser versions but, as noted before, these tips still apply, even on fully updated browsers.