Firefox Extension: Firefox IDN Info

Firefox Extension: Firefox IDN Info
http://4t2.cc/mozilla/idn/

(I didn't install so I cannot comment further)

followup to grc.security

-- 
Kayode Okeyode
http://del.icio.us/kayodeok
0
kayodeok
2/20/2005 12:15:11 PM
grc.linkfarm 6478 articles. 0 followers. Follow

14 Replies
337 Views

Similar Articles

[PageSpeed] 49

In article <cv9v1n$1us4$2@news.grc.com>, kayodeok writes
>Firefox Extension: Firefox IDN Info
>http://4t2.cc/mozilla/idn/

Looks interesting.

>(I didn't install so I cannot comment further)

I think I'll hold off too. I have no idea who 4t2.cc is, and the issue 
isn't important enough to me research whether the site is legit or not. 
:-) Spoofstick will give me enough warning I think. I'm not likely to 
end up on an IDN site and input critical data anyway.

-- 
GRC Newsgroups/Guidelines/No Regrets:
http://www.imilly.com/noregrets.htm
 From invalid, Reply To works.
Kevin A.
0
Kevin
2/20/2005 10:27:12 PM
I tried to install and know I am being redirected at sites I know about.  I 
would guess this site is not legit but that is just a guess.  As one thing I 
noticed I am researching digital cameras and then a buyers agent showed up 
and tried to send me to certain retailers.  I know the link I was clicking 
on and to show up somewhere else was a little disturbing.

Anyone else have information about this.  I uninstalled the plug because it 
seems to do the opposite that it says.

cb


"Kevin A." <klex49@blackhole.2kevin.net> wrote in message 
news:GEo3EECA7QGCFATd@blackhole.2kevin.net...
> In article <cv9v1n$1us4$2@news.grc.com>, kayodeok writes
>>Firefox Extension: Firefox IDN Info
>>http://4t2.cc/mozilla/idn/
>
> Looks interesting.
>
>>(I didn't install so I cannot comment further)
>
> I think I'll hold off too. I have no idea who 4t2.cc is, and the issue 
> isn't important enough to me research whether the site is legit or not. 
> :-) Spoofstick will give me enough warning I think. I'm not likely to end 
> up on an IDN site and input critical data anyway.
>
> -- 
> GRC Newsgroups/Guidelines/No Regrets:
> http://www.imilly.com/noregrets.htm
> From invalid, Reply To works.
> Kevin A. 
0
C
2/21/2005 2:36:46 AM
"C B" <logjam@comcast.net> wrote in news:cvbhft$30v8$1@news.grc.com...
> I tried to install and know I am being redirected at sites I know about.
I
> would guess this site is not legit but that is just a guess.  As one thing
I
> noticed I am researching digital cameras and then a buyers agent showed up
> and tried to send me to certain retailers.  I know the link I was clicking
> on and to show up somewhere else was a little disturbing.
>
> Anyone else have information about this.  I uninstalled the plug because
it
> seems to do the opposite that it says.
>
> cb

Could be that Blazingtools Perfect Keylogger is installed.
Thats what MS Antispyware found 15 minutes after installing this so-called
extention.
Funny thing is 1 hour earlier the same program didn't find anything on my
system.
But it could have updated the defs in the meantime, so I am not entirely
sure about this. But for the first time in my life I am grateful to MS.
I did uninstall the extention 5 minutes after installing it, because of what
Milly said earlier in this thread, it was 10 minutes later MS antispyware
found seven (7) registry entries of Blazingtools Perfect Keylogger on my
system.
Nasty, very nasty. Google for it and you can even visit their homepage.

Regards,
Jemand
0
jemand
2/21/2005 1:22:24 PM
Sorry I meant Kevin, not Milly.
Confused because of this:

GRC Newsgroups/Guidelines/No Regrets:
http://www.imilly.com/noregrets.htm
 From invalid, Reply To works.
0
jemand
2/21/2005 1:26:18 PM
----21CA682577D7A0BD_message_boundary--
Content-type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Wandering aimlessly about grc.security, I heard jemand say:

> "C B" <logjam@comcast.net> wrote in news:cvbhft$30v8$1@news.grc.com...
>> I tried to install and know I am being redirected at sites I know about. I
>> would guess this site is not legit but that is just a guess.  As one thing I
>> noticed I am researching digital cameras and then a buyers agent showed up
>> and tried to send me to certain retailers.  I know the link I was clicking
>> on and to show up somewhere else was a little disturbing.
>>
>> Anyone else have information about this.  I uninstalled the plug because it
>> seems to do the opposite that it says.
<> 
> Could be that Blazingtools Perfect Keylogger is installed.
> Thats what MS Antispyware found 15 minutes after installing this so-called
> extention.
> Funny thing is 1 hour earlier the same program didn't find anything on my
> system.
> But it could have updated the defs in the meantime, so I am not entirely
> sure about this. But for the first time in my life I am grateful to MS.
> I did uninstall the extention 5 minutes after installing it, because of what
> Milly said earlier in this thread, it was 10 minutes later MS antispyware
> found seven (7) registry entries of Blazingtools Perfect Keylogger on my
> system.
> Nasty, very nasty. Google for it and you can even visit their homepage.

MS Anti-Spyware, Spybot S&D, and Ad-Aware, all ran clean here, both
before and after installing the IDN Info Extension. That wasn't at all
surprising though, since I had opened the .XPI file first, and examined
the "idninfoOverlay.js" script that is the actual "working" part of the
extension. The other files were examined also, and simply support the
installation, display, and reporting mechanisms. I've attached a text
file containing the complete Java script. As you can see, it does
nothing beyond what it claims to do. There is no way for it to have
installed a keylogger on your machine that I can see.

As far as the previous poster's site redirection problems, I also saw
no way the IDN extension could cause that effect. FF extension ".xpi"
files can easily be extracted into their component files by extracting
them with a .zip program. I use "FilZIP", but others should work as
well. One of the extracted files will be a ".jar" file that can also be
extracted into its component folders/files, revealing the underlying
".js" script file located in the "content" folder.

I don't know what caused your individual problems, but I do not believe
they were caused by the Firefox IDN Info Extension or its installation.
The extension is working fine here, doing exactly what it purports to do
by displaying a yellow warning banner when an IDN site is accessed.

There is another IDN detection extension available at
http://lingvo.org/idnd that uses green and blue status bar "flags" to
alert you. My personal preference is the more obvious "yellow banner".
 
-- 
Dutch

GRC Newsgroups/Guidelines/No Regrets
http://news.grc.com/news.exe?cmd=article&group=grc.techtalk&item=116183
----21CA682577D7A0BD_message_boundary--
Content-type: application/octet-string; name=idninfoOverlay.txt
Content-Transfer-Encoding: Base64
Content-Disposition: attachment; filename=idninfoOverlay.txt
Content-Description: Attached file: idninfoOverlay.txt
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----21CA682577D7A0BD_message_boundary----
0
Dutch
2/21/2005 3:51:18 PM
Ok, Dutch. Thanks for informing us.
Glad I stated I wasn't entirely sure about this.
Haven't got a clue where this was picked up.
There are a few possibilities, but none of them are really
making me feel any better.
Thanks again,
Jemand
0
jemand
2/21/2005 6:48:08 PM
Wandering aimlessly about grc.security, I heard jemand say:

> Ok, Dutch. Thanks for informing us.
> Glad I stated I wasn't entirely sure about this.
> Haven't got a clue where this was picked up.
> There are a few possibilities, but none of them are really
> making me feel any better.

Ok, happy to help. Overall, FF extensions are pretty difficult to
compromise because for the most part, they're about as "open source" as
it gets... :-)  

-- 
Dutch

GRC Newsgroups/Guidelines/No Regrets
http://news.grc.com/news.exe?cmd=article&group=grc.techtalk&item=116183
0
Dutch
2/21/2005 7:11:31 PM
Dutch wrote:

> Wandering aimlessly about grc.security, I heard jemand say:
> 
>> "C B" <logjam@comcast.net> wrote in news:cvbhft$30v8$1@news.grc.com...
>>> I tried to install and know I am being redirected at sites I know about.
>>> []

>> Could be that Blazingtools Perfect Keylogger is installed.
>> []
> 
> MS Anti-Spyware, Spybot S&D, and Ad-Aware, all ran clean here, both
> before and after installing the IDN Info Extension. That wasn't at all
> surprising though, since I had opened the .XPI file first, and examined
> the "idninfoOverlay.js" script that is the actual "working" part of the
> extension. The other files were examined also, and simply support the
> installation, display, and reporting mechanisms. I've attached a text
> file containing the complete Java script. As you can see, it does
> nothing beyond what it claims to do. There is no way for it to have
> installed a keylogger on your machine that I can see.

[]

> As far as the previous poster's site redirection problems, I also saw
> no way the IDN extension could cause that effect. FF extension ".xpi"
> files can easily be extracted into their component files by extracting
> them with a .zip program. I use "FilZIP", but others should work as
> well. One of the extracted files will be a ".jar" file that can also be
> extracted into its component folders/files, revealing the underlying
> ".js" script file located in the "content" folder.

[]

> I don't know what caused your individual problems, but I do not believe
> they were caused by the Firefox IDN Info Extension or its installation.
> The extension is working fine here, doing exactly what it purports to do
> by displaying a yellow warning banner when an IDN site is accessed.

Thanks Dutch, for looking into this

Regards

-- 
Kayode Okeyode
http://del.icio.us/kayodeok
0
kayodeok
2/21/2005 9:39:18 PM
Wandering aimlessly about grc.security, I heard kayodeok say:

[...]
>> I don't know what caused your individual problems, but I do not believe
>> they were caused by the Firefox IDN Info Extension or its installation.
>> The extension is working fine here, doing exactly what it purports to do
>> by displaying a yellow warning banner when an IDN site is accessed.
> 
> Thanks Dutch, for looking into this

Glad to help, Kayode. I should have mentioned though, that the one
"live" link in the script file just goes to a blog entry with
information about the IDN exploit. The link is shown in the warning
banner when an IDN site is accessed...

-- 
Dutch

GRC Newsgroups/Guidelines/No Regrets
http://news.grc.com/news.exe?cmd=article&group=grc.techtalk&item=116183
0
Dutch
2/21/2005 10:06:39 PM
On Sun, 20 Feb 2005 12:15:11 +0000, kayodeok wrote:

> Firefox Extension: Firefox IDN Info
> http://4t2.cc/mozilla/idn/
> 
> (I didn't install so I cannot comment further)
> 
> followup to grc.security

Presumably only works for FF 0.9 upwards ?
Won't install on my FF 0.8 (yes, I know, I'll get round to upgrading soon -
probably in time for FF 2.0 arriving).
-- 
Parker Molin
0
Parker
2/22/2005 1:42:14 PM
Deep within the forest, you hear *Dutch* whisper: 

>>> http://4t2.cc/mozilla/idn/



> The extension is working fine here, doing exactly what it purports to do
> by displaying a yellow warning banner when an IDN site is accessed.


Is there an easy way for me to tell it's both working/running and/or 
installed on my FF 1.0 ??

I visited the aforementiooned site and clicked the 'install' --- noted in 
CommView that there was activity but can't see the obvious in the FF 
Options or Extensions area.

-- 
Frobozz GUE245
0
Frobozz
2/23/2005 11:35:53 AM
Wandering aimlessly about grc.security, I heard Frobozz say:

> Deep within the forest, you hear *Dutch* whisper: 
> 
>>>> http://4t2.cc/mozilla/idn/
> 
>> The extension is working fine here, doing exactly what it purports to do
>> by displaying a yellow warning banner when an IDN site is accessed.
> 
> Is there an easy way for me to tell it's both working/running and/or 
> installed on my FF 1.0 ??
> 
> I visited the aforementiooned site and clicked the 'install' --- noted in 
> CommView that there was activity but can't see the obvious in the FF 
> Options or Extensions area.

You should see it in your "Extensions" window listed as "IDN Info", and
there should be a small "IDN" flag in the lower right corner of your
status bar. Did you close and reopen FF after the install?

-- 
Dutch

GRC Newsgroups/Guidelines/No Regrets
http://news.grc.com/news.exe?cmd=article&group=grc.techtalk&item=116183
0
Dutch
2/23/2005 1:01:02 PM
Deep within the forest, you hear *Dutch* whisper: 

> 
> ...and
> there should be a small "IDN" flag in the lower right corner of your
> status bar.

Thanks ... I was reading your reply. then thried that link again and 
selected the web-page link for install. I noticed though that I was using 
Proxo, via seeing the reading from 'Switchproxy' FF extension. So I 
switched to no=proxy and then the actual 'do ya wanna install it now' 
dialogue showed up ==== it's running now and I see the IDN down there. 
thanks again.


-- 
Frobozz GUE245
0
Frobozz
2/23/2005 4:42:22 PM
Wandering aimlessly about grc.security, I heard Frobozz say:

> Deep within the forest, you hear *Dutch* whisper: 
> 
>> 
>> ...and
>> there should be a small "IDN" flag in the lower right corner of your
>> status bar.
> 
> Thanks ... I was reading your reply. then thried that link again and 
> selected the web-page link for install. I noticed though that I was using 
> Proxo, via seeing the reading from 'Switchproxy' FF extension. So I 
> switched to no=proxy and then the actual 'do ya wanna install it now' 
> dialogue showed up ==== it's running now and I see the IDN down there. 
> thanks again.

Ah! Yep, that would do it... :-)

A note to anyone that has legitimate IDN sites they regularly visit. The
latest version of IDN Info, 0.5.4, now has a "whitelist" feature where
you can eliminate the warning banner for listed sites. Another new
option will display the "punycode" url if you want it to...

-- 
Dutch

GRC Newsgroups/Guidelines/No Regrets
http://news.grc.com/news.exe?cmd=article&group=grc.techtalk&item=116183
0
Dutch
2/23/2005 7:25:54 PM
Reply:

Similar Artilces:

Firefox or not Firefox
Name: M B Fletcher Email: mf38794atntlworlddotcom Product: Firefox Summary: Firefox or not Firefox Comments: You asked why I took it off but did not ask more than the basics. I put security but in fact I put on Fire fox today and found a GOOGLE front page for searching when I had nothing there before. I wondered if I had been hijacked or you had done a very stupid update. I still do not know for sure. I do not ever use Google that I know of. The biggest spy on computers in the world and you should know better. If I find it is correct on Firefox I will go back to IE. At...

Firefox,Mozilla Firefox,Firefox download,Mozilla Firefox download
Download Firefox Firefox,Mozilla Firefox,Firefox download,Mozilla Firefox download http://soft.topcities.com/Firefox.htm On 2006-11-28 20:04 (-0700 UTC), idownweb.com wrote: > Download Firefox > > Firefox,Mozilla Firefox,Firefox download,Mozilla Firefox download > > http://soft.topcities.com/Firefox.htm Mebbe it's just me, but isn't this kind of a silly place to spam with something like this? /b. -- 'There is caution, and there is irrational paranoia.' -- Ron Hunter Wow, now thats totally random. On 28 Nov 2006 19:04:38 -0800, ...

Firefox 1.5 and Flashblock
When I try to install Flashblock - Firefox Extension in Firefox 1.5 it says to unbox software installations so I click on edit option and can find nothing about "software installations". The closest I can find is about installing extensions and themes which is unchecked!! HELP !!! Where can I find it ?? Am fairly new to Firefox so please be specific. Where under options ?? TIA whayface wrote: > > When I try to install Flashblock - Firefox Extension in Firefox 1.5 it says to unbox > software installations so I click on edit option and can find no...

Firefox within Firefox
For a short time now (likely since upgrading to FF 1.5.02) I've noticed that when running a Firefox session, ZA will popup a notice that Firefox -- verified the same exe as the running one -- is "trying to access the internet." This is confusing because it's already accessing the internet, thanks much. However, the destination IP is always along the lines of 206.141.192.60:DNS, which translates to dns1.chcgil.sbcglobal.net, part of my ISP. So I've been saying yes. But I'm wondering why of a sudden this access is taking place, or being questioned, or what...

firefox companion for firefox
Name: william faulks Email: wf010a4342atblueyonderdotcodotuk Product: eBay Companion Summary: firefox companion for firefox Comments: great program, been looking for something like this for ages Browser Details: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3 ...

When quit firefox, it keeps firefox-bin and firefox running!
When I quit firefox (closing the window) and I run "ps -C firefox" and "ps -C firefox-bin" both are shown as still running even a minute later! How do I get firefox to actually close? -- 6tr6tr ------------------------------------------------------------------------ It could be killall firefox.bin -- joerione ------------------------------------------------------------------------ joerione's Profile: http://forums.opensuse.org/member.php?userid=38077 View this thread: http://forums.opensuse.org/showthread.php?t=431275 On Wed, 20 Jan 201...

Someone to update a Firefox 2 extension to Firefox 3
I'm interested in finding a Firefox extension developer who is interested in taking on the challenge of updating a Firefox 2.0 extension to work with Firefox 3.0. I can pay some $$ but am more interested in someone who wants to be involved more as a hobby and have more interest in it than just money. Where is the best place to try to find someone like the above? More information about the extension: http://www.htmlvalidator.com/firefoxext.php Thank you. -- Albert Wiersch Fix your website: http://onlinewebcheck.com ----- Original Message ---- > From...

Firefox uses Firefox.
http://icanhascheezburger.com/2007/07/07/please-i-can-has-firefox/ :P -- "It's like stepping on ants... I don't step on ants, Major." --Odo and Kira from Star Trek: Deep Space Nine /\___/\ / /\ /\ \ Phillip (Ant) @ http://antfarm.ma.cx (Personal Web Site) | |o o| | Ant's Quality Foraged Links (AQFL): http://aqfl.net \ _ / Remove ANT from e-mail address: philpi@earthlink.netANT ( ) or ANTant@zimage.com Ant is currently not listening to any songs on his home computer. Ant wrote: ...

Firefox, and Firefox Portable
Name: Brian Email: silverdragona1ataol Product: Firefox Summary: Firefox, and Firefox Portable Comments: Feedback. After several hefty fallouts with AOL, and the complete dogs dinner we are presented with that they claim is worthy of using, be it the AOL9 browser, I decided to try Firefox.... I am very annoyed. Why?... because stupidly, I had not tried Firefox EARLIER.... I have now replaced AOL9 completely on all the family computers with Firefox... I am also TOTALLY bewildered as to how you can get a fully functioning Firefox to run on a USB Flash Drive......... I...

Firefox, meet the Firefox
Name: brooks Email: brooksonleyatyahoodotcom Product: Firefox Summary: Firefox, meet the Firefox Comments: I don't know if this will go anywhere, but as both a die-hard Firefox user and an advocate for wildlife, I think it should be said.... As you may or may not know, "firefox" is the literal translation of the Chinese name for the Red Panda. Yes, the OTHER panda -- the cute, orange, raccoon-like one, not the big, black-and-white, bear-like one. Here is a link to an article at the National Wildlife Foundation [http://poprl.com/EIb], "Fighting for the Fi...

Can anyone tell me how to create firefox extension using code on this link: http://kailaspatil.blogspot.in/2010/12/firefox-extension.html please.....
please tell me if you know about this..... eagerly waiting for reply... Thanks in advance. ...

Can anyone tell me how to create firefox extension using code on this link: http://kailaspatil.blogspot.in/2010/12/firefox-extension.html please.....
please tell me if you know about this..... eagerly waiting for reply... Thanks in advance. ...

Google Toolbar For Firefox & Google Extensions for Firefox
followup to grc.techtalk Google Toolbar For Firefox http://toolbar.google.com/firefox/ Take the power of Google with you anywhere on the Web Google Extensions for Firefox http://toolbar.google.com/firefox/extensions/ ----------------------------------------------------------- Quote ----------------------------------------------------------- Welcome to the Google Extensions for Firefox page. Extensions are small applications that you download and install into your Firefox browser to add new functionality. We hope you enjoy these extensions! --------------------------------...

Firefox extensions are degrading performance of Firefox 3 RC2
Name: Rossier Product: Firefox Release Candidate Summary: Firefox extensions are degrading performance of Firefox 3 RC2 Comments: Web pages didn't load fully, waiting endless the page load completion. I ran in secure mode, and all was OK. So... Extensions are only good as they integrate nicely in the browser. Now, I have only keep NoScript and WebDeveloper as they work well with F3RC2. I suggest that a "star-meter" for the quality of integration be included in the description of the extension module (typically : memory resource impact, browser reactiveness im...

Web resources about - Firefox Extension: Firefox IDN Info - grc.linkfarm

Resources last updated: 12/2/2015 11:42:59 AM