Slashdot Mirror
Firefox Greasemonkey Extension Security Problem
Mr2001 writes "A recent thread on the Greasemonkey mailing list suggests that the popular Firefox extension is fatally insecure. It seems rogue pages can read any file from your disk and send it to any site, using an XmlHttpRequest. Time to uninstall GM?"
It's about time people start writing some exploits for firefox!
http://www.dreamsyssoft.com
Quick, lets band together with a magician and a warrior and stomp those bow&arrow shootin mofos before they take over the internet!
We can blame God for all kinds of things like hurricanes and Godzilla but it's a safe bet that we brought THAT scourge upon ourselves.
EvilCON - Made Famous by
They can say "Come back to windows , no need for third party extensions for these types of flaws .They are built into MSIE/windows , It just works"
The only things certain in war are Propaganda and Death. You can never be sure which is which though
Personally, someone could read my entire hard drive and it wouldn't bother me much. I don't keep sensitive information on my computer, because any computer connected to the internet should be considered insecure.
Nice try Bill, we know it's you.
Mod me down with all of your hatred and your journey towards the dark side will be complete!
Firefox burns greasemonkey cuz it's made of fat But Seamonkey beats firefox because it extinguishes the fire. Then Greasemonkey beats seamonkey because it can float in water AND walk on land. my 2.56 cents
\u262D = \u5350
Okay, how's this: Since Microsoft Internet Explorer has a dominant market share, people make pages that work on IE. Some of the pages do not work on Firefox since they use some functionality found only in IE. Greasemonkey can be used to alter some of those pages so that they work on Firefox again.
It's Microsoft's fault that people have to install insecure extensions to make web work like it should have worked in the first place.