Why you can't just disable JavaScript

Conclusion

Sometimes it's easier to avoid problems rather than try and elegantly solve them. Linux offers a lot of flexibility; for example, multiple users can use the same system – indeed, even the same screen, keyboard, and mouse. For the long term, placing individual applications within containers that can be restored easily is the way to go. Certainly you can't rely on your software to be free of bugs.

Infos

  1. Firefox 3.0.5 Status Bar Obfuscation/Clickjacking: http://www.milw0rm.com/exploits/7842
  2. NoScript add-on for Firefox: https://addons.mozilla.org/en-US/firefox/addon/722
  3. Content Security Policy: http://people.mozilla.org/~bsterne/content-security-policy/
  4. Xhost manual page: http://www.x.org/archive/X11R6.9.0/doc/html/xhost.1.html

The Author

Kurt Seifried is an Information Security Consultant specializing in Linux and networks since 1996. He often wonders how it is that technology works on a large scale but often fails on a small scale.

Read full article as PDF:

064-065_kurt.pdf (227.09 kB)

Related content

comments powered by Disqus

Direct Download

Read full article as PDF:

064-065_kurt.pdf (227.09 kB)

News