[LINK] Firefox security issue

[David Lochrin]

On Wednesday 31 October 2007 17:51, you wrote:
> My Firefox setup has "Check for Updates" greyed out and disabled --
> I get firefox updates through the Fedora update system -- but Firefox
> still checks for extension updates (which aren't packaged by Fedora).

   Interesting...  I'm using Firefox 2.0.0.5 and those "preferences" options in this version are handled a little differently but are probably equivalent.  However the <about:config> listing shows a number relating to extensions (see the 'extensions.*' variables) and 'extensions.update.enabled' is set false.

   However under the "security" tab I see "warn me when sites try to install add-ons" and an "exceptions" button.  Unfortunately I deleted the sole exception shown before writing this, and I suspect I've deleted it before, but I'm sure it was something like "scheme:http" which could mean anything.

   Another option on the same page asks "tell me if the site I'm visiting is a suspected forgery" and this has two sub-options: "check using a downloaded list of suspected sites" and "check by asking <dropdown option: Google> about each site I visit".  I'll make sure this is disabled.

   Managing the all-too-eager managers is getting to be a bit tiresome, but I suppose it was ever thus... (:-)

David