Critical Firefox flaw, take note and beware!

• ndmmxiaomayi

  9 Feb 07, 09:50

  This flaw is very critical. Please be careful and take note of the website URL when submitting data!
  
  The first flaw relates to phishing. Firefox anti-phishing feature will actually tell you that the website is legitimate when in fact, it's a fake site.
  
  Don't believe? Try this:
  
  http://chassart.com//.support/www.amazon.com/flex/sign-out.html/2Fhomepage=protocol=httpsaction=sign-out/exec.php?cmd=sign-in
  
  Who can tell me what's wrong with this website? (Other than the obvious name change)
  
  Those who can, good for you. Those who can't, wait for answers.
  
  The next flaw is related to blocking popups. This flaw will allow attackers to read sensitive information on your computer. How it works, I don't know. Perhaps need to click on some link to open a new window, which Firefox will block and leads to a compromise of your data.
• ditzy

  9 Feb 07, 09:52

  See, I always knew IE7 was the bestest of the bestest.
• hisoka

  9 Feb 07, 09:54

  hmmz so should change to opera?
• ndmmxiaomayi

  9 Feb 07, 09:55

  Originally posted by ditzy:

  See, I always knew IE7 was the bestest of the bestest.

  LOL... it still has its flaws. Luckily, IE got warn.
• ndmmxiaomayi

  9 Feb 07, 09:56

  Originally posted by hisoka:

  hmmz so should change to opera?

  Not sure. I don't really use Opera.
• ndmmxiaomayi

  9 Feb 07, 10:01

  Some screenshots:
  
  First one: Firefox did not warn about phished site
  
  
  
  Second one: What actually should happen
  
  
  
  Third one: IE7 warning
  
  
• bladez87

  9 Feb 07, 10:32

  why the link got sign out and sign in on the same title?
• ndmmxiaomayi

  9 Feb 07, 10:34

  Originally posted by bladez87:

  why the link got sign out and sign in on the same title?

  This means you've signed out and is required to sign in.
  
  Sorry, but that's not the error.
• Ito_^

  9 Feb 07, 10:47

  http://chassart.com/ <-- real phised sai ar?
• ndmmxiaomayi

  9 Feb 07, 10:50

  Originally posted by Ito_^:

  http://chassart.com/ <-- real phised sai ar?

  Yup.
• ndmmxiaomayi

  9 Feb 07, 10:53

  Me be kinder to you guys, I've added an extra forward slash ( / ) to the URL.
  
  After chassart.com
  
  Note that it is chassart.com// not chassart.com/
  
  If you try the address I've given without the extra slash, Firefox will warn you.
• bladez87

  9 Feb 07, 10:55

  u mean that since there is another website link infront of amazon so it is a plishing website?
• ndmmxiaomayi

  9 Feb 07, 11:03

  Originally posted by bladez87:

  u mean that since there is another website link infront of amazon so it is a plishing website?

  Yes. The website is purposely crafted to redirect... so it will look like Amazon's sign in page...
  
  But that has nothing to do with Firefox's flaw...
• M©+square

  9 Feb 07, 11:56

  So far, Opera hasn't given me any problem. User for 2 years.