If you think you're safe with Firefox, think again...

[LizzieW]

I have ZoneAlarm Security Suite, which picked up a Trojan (called Trojan-Spy.HTML.Bankfraud.hs) a few days ago, which was something to do with banking.  Don't know what because it quarantined it and then deleted it.  Strange thing is, although we do use internet banking, I have never used it on my laptop, nor do I have any passwords stored anywhere, in any case they have to be changed each time we log on.  I have no idea what the Trojan intended to do, but it didn't do it.

I have a feeling it might have been connected to IE, as it seems to have tried to access the laptop the day I was using IE and not Mozilla.

Lizzie

[stevieuk]

Downside

Very nice reply...one of the very best I`ve read on most forums.

Does phising come under anti-virus programs?

Good question....No I believe it falls into using common sense, but if it contains a Virus/Trojan then an A/V may catch it.

You don`t sound too disimilar to me, I run a scan once in a blue moon, with approx 8Tb of HDDs to scan (on the PC I use) it takes a while, I did 1 HDD & it took IIRC 9hrs the other day.

You mention Norton and McAfee, I believe McAfee has a safe site thingy which seems to flag up sites that aren`t any threat, so if it can`t distinguish sites that aren`t a threat how can anyone trust it to flag up sites that are a threat, I`ve never really liked Norton...Had a few probs in the past.

As you say NO A/V software is 100% & it does come down to user knowledge.

But I`d still recommend that ALL Windows users use an A/V unless they have a lot of experience & knowledge.

There are Free A/V & F/W software available, but ultimately it comes down to a user to recognise a risk or something odd happening on their PC.

Steve

[Nick29]

Nick29

If thats the best security breech you can find, then People should rush to install Firefox...Its far more secure & their at far less risk using Firefox than IE....

Steve

You make it sound as if I was actively looking - I found this when viewing The Register (which I do on a regular basis), so don't shoot the messenger ! 

I don't know why you have to be so on the defensive ?

As for "Its far more secure & their at far less risk using Firefox than IE" - that's a very rash statement to make, IMHO.

[Nick29]

I'm guilty of not using an anti-virus program and guess what, I have not been infected once since I stopped using one back in April-2009.  As I suspected most talk of viruses is paranoid hysteria used by software companies to sell products.

I don't normally recommend software and if people get 'peace of mind' through buying an expensive security program then I don't criticise them.

Ultimately if I do get infected then I know I can rely of sites like Bleeping Computer for help and guidance.  Malware is just a set of files and all you have to do is remove them.

How do you know when your computer is infected ?

[stevieuk]

Nick29

If thats the best security breech you can find, then People should rush to install Firefox...Its far more secure & their at far less risk using Firefox than IE....

Steve

You make it sound as if I was actively looking - I found this when viewing The Register (which I do on a regular basis), so don't shoot the messenger ! 

I don't know why you have to be so on the defensive ?

As for "Its far more secure & their at far less risk using Firefox than IE" - that's a very rash statement to make, IMHO.

Ok.

I`ll admit, I posted a few links regards IE, which likely would affect almost 1 Billion PC owners.

The Firefox exploit may have affected........lets see ...Hummm........Hummmmmmmmmmmmmmmmmmmmmm
4,600 users, so my statement is Rash??

I don`t shoot any messengers, this really is a scare mongering tactic, theres little or no threat to anyone... if the threat to IE was of a similar level I wouldn`t have bothered posting.

Steve

[Nick29]

Steve, I was reporting something from a very well respected IT-related website.  I don't think it was their intention to scare-monger, and it certainly wasn't mine.

The reason I said that your advice was rash because I would not want to make presumptions on the security of any software without knowing all the facts, and since I don't work for either Mozilla or Microsoft, then I don't.

[stevieuk]

Nick

Facts as far as I can acertain.

There are 1 Billion PCs in the world. 2008 figures, likely a lot more now.

http://www.gartner.com/it/page.jsp?id=703807

IE has approx 55% & Firefox has 30% of the userbase Worldwide, approximately.

http://gs.statcounter.com/#browser-ww-monthly-200812-201001

So I`ll guess that there are 1 Billion Windows users, thats a guess/estimate.

So FF is based on a userbase of 30million approx.

So 0.0001533% of Firefox users are affected.

Given that 100% of IE users are affected by the exploits that have been widely published that would equal 55million users. Don`t forget the exploits haven`t been fixed yet. Fact.

You say don`t shoot the messenger, but you started the thread "  If you think you're safe with Firefox, think again... "

I`m just pointing out that you are wrong!

If I started a thread titled as your`s is I`d be able to back the title up, as I did in the IE thread!

I`m not & never would try & take away someones opinion, but if you post a thread like yours expect someone to take it up & post some opinions against it.

I`m sure you have some links/threads on other forums to back up your opinions as to how insecure & rubbish FF is?

I wouldn`t start a thread without a few links & you also mentioned Linux....not to sure you`d find much if anything there.

Steve

[Nick29]

You say don`t shoot the messenger, but you started the thread "  If you think you're safe with Firefox, think again... "

I`m just pointing out that you are wrong!

No, I'm not, because (even by your convoluted maths) there is a danger to some Firefox users.  So it isn't safe, which is what the title said.

I also said that I had suspected for some time that plug-ins were the weak part of Firefox, and this was also proved.

I'm locking the thread now, because this thread was started by me to warn the unwary, not an invitation to start an adolescent fanboy war, because I'm 45 years too late for all that 

[ignz]

Just in case anyone was concerned by another member's post, here's the reality:

http://www.scmagazineus.com/mozilla-recants-assertion-that-firefox-add-on-has-trojan/article/163611/


I'd rather see a software publisher be over-cautious and publicise a potential threat, even if it turns out to be a false alarm than spend months or years trying to brush it under the carpet... 




Moderator Comment: topics merged