Comments on: Security Alert: How To Stop Firefox Clickjacking Exploit Attack

By: Gil

Gil — Thu, 09 Oct 2008 23:19:07 +0000

Ha! Lynx is still my favorite browser. Works so well, and even when you abort Quit, it happily says “Excellent!!”. Now, what other browser does that??

By: jimbob

jimbob — Thu, 09 Oct 2008 20:36:05 +0000

Here’s a better way: Take a sledgehammer and smash your computer. That way you are guaranteed not to be a victim.

By: vivek

vivek — Fri, 26 Sep 2008 21:07:58 +0000

Is this april fools? Noop, the quote is taken from the last link.

By: Jaroslav Smid

Jaroslav Smid — Fri, 26 Sep 2008 19:57:23 +0000

They can gain links you visited even if you use NoScript or disable all plugins unless you don’t disable CSS! There is :visited selector in CSS that can eventually contain URI e.g. for background to php script, that browser will made request for when URI has been visited.
And who cares … they can only get links: they can’t get any password or private data as the link must be exact one. They can know, that I visited paypal.com a few minutes ago, but they don’t know enything else.

By: Greg

Greg — Fri, 26 Sep 2008 16:43:16 +0000

Is this april fools?
Where does the quoted text come from?
And where is the link to the mozilla bugzilla?

By: Tim

Tim — Fri, 26 Sep 2008 14:50:32 +0000

This “fix” is heavy handed, an the fix will not work for most users. It takes away some of the most useful features of a modern web browser. The open source community of programmers should address this browser vulnerability ASAP.

Lynx and Links will not suffice.