site Search:


 
    All Forums Hot Topics Gallery






how-to block ads


 
Search Topic:
Share Topic
Posting?
Post a:
Post a:
Links: ·Test Media Player Plugins ·Reducing memory usage - Firefox ·Tweaking for Fun/Speed Firefox Fx v4/5 Series
AuthorAll Replies


Grail Knight
Qui audet adipiscitur
Premium
join:2003-05-31
Valhalla
kudos:6
Reviews:
·Time Warner Cable

reply to bcool

Re: [Extension] IE Tab, replaces IE View

Are you referring to IE Tab allowing a potential exploit in an opened IE tab in Fx? I could see someone eploiting Fx through an IE tab opened like a normal tab in Fx.

IE View just tells IE to open a link or page but does not allow any part of IE in Fx.

I think that is what you are talking about..
--
Fx Official Aviary v1.0.7 (20051022)__Tb Official Aviary v1.0.7 (20051022)


hpguru
Curb Your Dogma
Premium
join:2002-04-12

1 edit

said by Grail Knight:
IE View just tells IE to open a link or page but does not allow any part of IE in Fx.
Well I hate to burst your bubble but I noticed this while working with some pages I am developing, one of which contains an ActiveX control which can access the local file system. It worked flawlessly in that Firefox tab.

Edit: spelling.
--
Get hpHOSTS! Member ASAP
The Bush Era is over. The Bush Error is not.


Grail Knight
Qui audet adipiscitur
Premium
join:2003-05-31
Valhalla
kudos:6

You are talking about IE Tab correct?

IE View does not open tabs.



bcool
Premium
join:2000-08-25
The Ozarks

2 edits

reply to hpguru

said by hpguru:

said by Grail Knight:
IE View just tells IE to open a link or page but does not allow any part of IE in Fx.
Well I hate to burst your bubble but I noticed this while working with some pages I am developing, one of which contains an ActiveX control which can access the local file system. It worked flawlessly in that Firefox tab.

Edit: spelling.
Well, until this is sorted out, I'll continue to keep IE locked down so that Activex controls should NOT pose a threat. Thanks for the heads up. Maybe I can draw developer's attention here to follow up on discussion...
--
"in flagrante delicto"


hpguru
Curb Your Dogma
Premium
join:2002-04-12

said by bcool:

Well, until this is sorted out, I'll continue to keep IE locked down so that Activex controls should NOT pose a threat. Thanks for the heads up. Maybe I can draw developer's attention here to follow up on discussion...
There is little to no threat on the IE side if IE is up to date and reasonably secured. Even so the vulnerability could send you off unawares to another url making you vulnerable to all that that entails.
--
Get hpHOSTS! Member ASAP
The Bush Era is over. The Bush Error is not.


Grail Knight
Qui audet adipiscitur
Premium
join:2003-05-31
Valhalla
kudos:6
Reviews:
·Time Warner Cable

Thanks for clearing that up hpguru. I figured you were referring to IE Tab and just wanted it to be clear for everyone.

My IE is locked down nice and tight (still do not trust it) and I rarely use it myself.

Good night all.
--
Fx Official Aviary v1.0.7 (20051022)__Tb Official Aviary v1.0.7 (20051022)



Grail Knight
Qui audet adipiscitur
Premium
join:2003-05-31
Valhalla
kudos:6
Reviews:
·Time Warner Cable

1 edit

reply to hpguru
Before I leave here is a link to the thread by the IE Tab dev so yo ucan let hime know about the flaw.

»www.extensionsmirror.nl/index.ph···try17860

I do not believe you need to register to post.
Pretty informal place.

Edit* Spelling repair.

Goodnight again.
--
Fx Official Aviary v1.0.7 (20051022)__Tb Official Aviary v1.0.7 (20051022)



bcool
Premium
join:2000-08-25
The Ozarks

1 edit

And for a night cap, here is an update, version 1.3.6.7
»www.extensionsmirror.nl/index.ph···try17784

Incidentally the developer responded philosophically to the news of a potential phishing exploit:

"Not much I can do about that. Once the embedded IE page is loaded, it can't actually do anything to Firefox outside of that little area besides the usual sending links to it just like any other program does. There's really no good way to get the proper URL to show in the Firefox location bar over multiple page moves in an IE Tab, since, well, it's IE, not Firefox. You can at least right click a link and click properties to see the URL it points to still. And right-clicking the page itself and clicking properties will show its URL. The same disclaimer still applies here as is applied to IE View (IE View does give this disclaimer [though of course not worded as I'm stating]). Opening pages in IE will have security issues, basically no matter what. Only use this with sites you trust. Would a trustworthy site give a phishing link to begin with?"
»forums.mozillazine.org/viewtopic···#1826768
Edit: IE Tab 1.3.6.7 installed nicely right over the top of 1.3.6.6


Grail Knight
Qui audet adipiscitur
Premium
join:2003-05-31
Valhalla
kudos:6
Reviews:
·Time Warner Cable

I think it comes down to common sense when using any browser including opening an IE Window in a Fx tab. I do agree with that sttement about keeping IE locked down. I have ActiveX disabled in IE and use trusted sites in the security settings.

I do not think it would matter how secure either browser is for some users that would click on anything anyway without regard for security.

bcool are you using Fx 1.5 PR or v1.0.7?
I think this IE Tab extension is working with v1.5 PR better then v1.0.7.
--
Fx Official Aviary v1.0.7 (20051022)__Tb Official Aviary v1.0.7 (20051022)



bcool
Premium
join:2000-08-25
The Ozarks

1 edit

dup post



bcool
Premium
join:2000-08-25
The Ozarks

reply to Grail Knight
Top of the morning to you there, GK! Yes, I'm on
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b5) Gecko/20051020 Firefox/1.5 (stipe)

If IE Tab is iffy on 1.07, I'll not rush to recommend it to my brother who's on 1.07. I have to tell you that I can't find anything outwardly wrong with the extension on 1.8b5 - apart from I haven't figured out how to make IE open up in a focused tab instead of in the background...
--
"in flagrante delicto"



Grail Knight
Qui audet adipiscitur
Premium
join:2003-05-31
Valhalla
kudos:6
Reviews:
·Time Warner Cable

Good Morning bcool,

I grabbed the Official 1.5 .zip Pacifica this morning and it is running as expected. Lost 10 extensions even using the NightlyTesterTool ext. Not a real issue as the big three(TBE, Ad-block, NoScript) are working fine.

I gave up on that IE Tab for now. My use of IE like I said yesterday is few and far between. MoFo finally fixed the download bug for items smaller than 100k failure to close Fx. I think it was more extensive then that and caused so many download failures I had to use IE for most downloading until v1.0.6.

For now v1.0.7 is my standby and 1.5 PR is testing.

Have a good day.

-Greg
--
Fx Official Aviary v1.0.7 (20051022)__Tb Official Aviary v1.0.7 (20051022)



bcool
Premium
join:2000-08-25
The Ozarks

No worries mate. With pith helmet on, I'll forge ahead with IE Tab. I'll let you know where we end up.
--
"in flagrante delicto"



Grail Knight
Qui audet adipiscitur
Premium
join:2003-05-31
Valhalla
kudos:6
Reviews:
·Time Warner Cable

Excellent!

I will explore IE Tab later with v1.0.7 to see if I can isolate the issue. With 59 extensions it can get tricky but that is half the fun.

Have a good afternoon.

-Greg
--
Fx Official Aviary v1.0.7 (20051022)__Tb Official Aviary v1.0.7 (20051022)


Sunday, 03-Jun 23:59:27 Terms of Use & Privacy | feedback | contact | Hosting by nac.net - DSL,Hosting & Co-lo
over 12.5 years online © 1999-2012 dslreports.com.
Most commented news this week
Hot Topics