1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Fix FireFox 1.0 spoofing issue

Discussion in 'Tech Tips and Reviews' started by betterpc, Feb 15, 2005.

Thread Status:
Not open for further replies.
Advertisement
  1. betterpc

    betterpc Thread Starter

    Joined:
    Dec 18, 2004
    Messages:
    54
    The problem is caused due to an unintended result of the IDN (International Domain Names) implementation, which allows using international characters in domain names.

    Visitors believe they are on a trusted site, but they are not.

    Read more...
     
  2. mach9

    mach9

    Joined:
    Jan 26, 2004
    Messages:
    6,309
    Thanks betterpc for the link and information. (y)
     
  3. dugq

    dugq

    Joined:
    Jul 16, 2004
    Messages:
    2,653
    This problem effects all non-IE browsers (arr, the irony)

    Safari users can look here

    http://forum.osnn.net/showthread.php?t=55474

    There doesnt seem to be a Opera fix yet but you can use Proxomitron, downloaded here (its a very good program which I would highly recommend even without this problem), install and setup instructions can be found in there too

    http://www.sankey.ws/proxomitron.html

    With the filter set here (install instructions are in the readme file)

    http://www.kye-u.com/proxo/forums/index.php?showtopic=131&st=225entry3846

    This should work on any other PC browser
     
  4. mach9

    mach9

    Joined:
    Jan 26, 2004
    Messages:
    6,309
    For more information: http://www.slashdot.org/ and http://www.mozillazine.org/talkback.html?article=6073. The filter addition is one way of approaching this. Another-temporary one is to type in your address bar about:config , hit enter. Scroll down to 'network.enableIDN'. Rt-click and go to toggle click to change value to false. Mozilla is working on better long term solutions. This entry is the default on all current builds. Checkout the above articles for a much fuller discussion.
     
  5. dugq

    dugq

    Joined:
    Jul 16, 2004
    Messages:
    2,653
    Unfortunately the "network.enableIDN" changes back when you restart Firefox.
     
  6. guitarman1

    guitarman1 Banned

    Joined:
    Nov 27, 2004
    Messages:
    717
    Isn't this why you download 'Spoofstick' extension ! I downloaded it a couple of months back ,it seems to work fine. Another excellent extension to FF is rightclick MS IE ,very handy for those occaisional sites that don't work properly in FF (MS sites, some bank sites and others) FF (y), IE (n) :eek: :D
     
  7. dugq

    dugq

    Joined:
    Jul 16, 2004
    Messages:
    2,653
    Yep, soopfstick was updated a few days ago to fix the problem
     
  8. mach9

    mach9

    Joined:
    Jan 26, 2004
    Messages:
    6,309
    dugg:

    I've started and restarted Firefox a number of times since the about:config, find network.enableIDN and toggle value to false fix. It's still there, same as I set it "false". Have used spoofstick for months and recently installed the new version. Also did the adblock filter thing. Three pronged attack on the issue. Hope all these work until the "final fix" is in. :D Probably "overkill". :D
     
  9. dugq

    dugq

    Joined:
    Jul 16, 2004
    Messages:
    2,653
    My bad, although the network.enableIDN is still set to false after a restart, it will no longer pass the spoof test (although yours will since you have installed the other fixes).
     
  10. mach9

    mach9

    Joined:
    Jan 26, 2004
    Messages:
    6,309
    dugg- (y)
     
  11. Kenny94

    Kenny94 Banned

    Joined:
    Dec 16, 2004
    Messages:
    2,026
    Here's a javascript code to check spoofed URLs. Right click your address bar and select delete, and copy and paste the code below to your address bar and press enter. Works with most browsers. Try it on this site. Enjoy........

    javascript:alert("Actual URL address: " + location.protocol + "//" + location.hostname + "/");
     
  12. Stoner

    Stoner Banned

    Joined:
    Oct 26, 2002
    Messages:
    44,931
    Thanks Kenny94 (y)......:)
     
  13. dugq

    dugq

    Joined:
    Jul 16, 2004
    Messages:
    2,653
  14. Stoner

    Stoner Banned

    Joined:
    Oct 26, 2002
    Messages:
    44,931
    Kenny?

    I tried dugq's paypal url and the script didn't work for me :eek:




    edit: now I see the difference. The first 'a' in paypal is of a smaller font, I didn't recognize the difference immediately.
     

    Attached Files:

    • test.jpg
      test.jpg
      File size:
      30.5 KB
      Views:
      329
  15. Kenny94

    Kenny94 Banned

    Joined:
    Dec 16, 2004
    Messages:
    2,026
    Bingo! Stoner you caught it. Again, enjoy......
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/330860

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice