BleepingComputer.com: Firefox add-on, lets surfers tweak sites.

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Firefox add-on, lets surfers tweak sites. But is it safe?

#1 User is offline   Scarlett 

  • Bleeping Diva
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 7,479
  • Joined: 25-April 04
  • Gender:Female
  • Location:As always I'm beside myself ;)

Posted 02 April 2005 - 03:31 PM

<img src='/images/misc/rediscover.gif' style='float:right' vspace='8' hspace='8'> <b>That's one cautionary note making the rounds along with a popular new extension for Firefox that lets people customize Web pages they visit without the knowledge or cooperation of Web publishers. The extension, dubbed Greasemonkey, lets people run what's known as a "user script," which alters a Web page as the page is downloaded.<br /> <br /> </b><br /><br />By Paul Festa, CNET News.com <br /> Published on ZDNet News: March 23, 2005, 1:50 PM PT<br /> <br /> That capability has gained the extension an avid following of Web surfers who want to customize the sites they visit, removing design glitches and stripping sites of ads. But the extension comes with substantial security risks and could stir trouble among site owners who object to individual, custom redesigns of their pages.<br /> <br /> <br /><br /> <div class='newslinks'><img src='http://www.bleepingcomputer.com/forums/public/style_images/1/cs_page.gif'>&nbsp;<b>Link: <a href='http://news.zdnet.com/2100-1009_22-5631009.html' target='_blank'><font color='red'>Full ZDNet Story</font></a><br />
Posted Image

#2 User is offline   raw 

  • Bleeping Hacker
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 2,299
  • Joined: 14-April 04
  • Gender:Male
  • Location:Texas

Posted 02 April 2005 - 03:44 PM

Although this add-on is growing in popularity it seems to have a serious security issue.

This paper may be above some of the user level here,but it's good to know
that this script can be potentionally dangerous.
Have a look here:
http://pb.specialised.info/all/articles/monkey.txt

Quote

"All I can say is that just like any other software, you should think a tiny bit before
installing a user script... Make sure the author is someone you trust, or
at least in a social network you trust."

Aaron Boodman (author of Greasemonkey)

Posted Image
Posted ImageHOSTFix only works on XP,no longer maintained

#3 User is offline   ColdinCbus 

  • Forum Regular
  • PipPipPip
  • Find Topics
  • Group: Members
  • Posts: 312
  • Joined: 30-June 04

Posted 02 April 2005 - 05:54 PM

I am not too sure it is really a security issue with Greasemonkey. The security issue is with what plug-ins you install into Greasemonkey. Ummmmmmm - guys, if I remember correctly, that is a security issue with any plug-in you install on any browser.

#4 User is offline   raw 

  • Bleeping Hacker
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 2,299
  • Joined: 14-April 04
  • Gender:Male
  • Location:Texas

Posted 02 April 2005 - 11:00 PM

Yes sir you are correct in that the flaw is not GreaseMonkey itself,but in its ability to run potentially harmful scripts. I can see where that could cause some confusion.Thanks.
Posted Image
Posted ImageHOSTFix only works on XP,no longer maintained

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users