'firefox'에 해당되는 글 3건

  1. 2009.04.21 Top 10 Firefox Add-ons for Linux Users by CEOinIRVINE
  2. 2009.03.24 Five Best Web Browsers by CEOinIRVINE
  3. 2008.12.18 Mozilla Firefox 2 Multiple Vulnerabilities by CEOinIRVINE

Somewhere along the line, the browser stopped being an application to view Web pages and the occasional bit of multimedia, and became a vital part of the daily workflow for millions of users. Since you’re probably already spending much of your workday using Firefox, why not add to its functionality and increase your productivity even more?

Firefox supports extensions, plugins, and themes — which are collectively called “add-ons.” This probably isn’t news to anyone who’s been using Firefox for more than a few days, but what might not be obvious is which extensions would be most useful. It’s a bit subjective, but I’ve tried to highlight ten of the most useful extensions for professional Linux users. This means I’ve slanted the choice of extensions to ones that extend productivity rather than social media extensions like Power Twitter.

Though other browsers do support extensions, widgets, etc., Firefox has by far the largest selection of bolt-on features of any Web browser. The Mozilla folks have done a really good job of creating a platform for development that has made the browser far more than an application for displaying Web pages. Let’s take a look at what Firefox has to offer.

Mix and Match Extensions

Before we get started on our tour of useful extensions, let me step back and give a few words of caution. Firefox itself is usually a stable beast, but when you start adding extensions, things can get unstable in a hurry. Especially when you start installing a bunch of extensions.

While I’ve tried and enjoyed all of the add-ons here, I don’t run them all at the same time. Keeping the number of add-ons that are installed and active at any given time has kept my browser reasonably stable. (Conversely, I’ve found that when Firefox crashes frequently, it’s usually solved by turning off or unininstalling one or more extensions.)

But what if you want to try out a new extension or have different sets of extensions for different tasks? Managing extensions by turning them off and on can be a major hassle, especially since it requires a restart of the browser — but there is a solution.

Firefox allows you to have one or more profiles, and each profile can have its own set of add-ons. Not only can you run separate profiles, with each having its own set of extensions, you can run multiple instances of Firefox using different profiles.

Here’s how it works. Shut down Firefox and run the following:

firefox -ProfileManager -no-remote

This will pop up the Firefox Profile Manager, and you can configure new profiles or choose existing ones to run.

The default profile will be started automatically when you load Firefox if you don’t issue the -ProfileManager or -P ProfileName argument. If you’d like to bypass the Profile Manager and just start a different profile, just run firefox -P ProfileName argument.

Nightly Tester Tools

If you’re reading this article, odds are you like to have the latest and greatest features. With Firefox, that means running alphas, betas, release candidates, and even nightly builds rather than the stable releases.

I’ve found that stability usually isn’t a problem in this scenario, but you’ll often run into extensions that “aren’t compatible” with the latest version of Firefox. Sometimes this is due to genuine incompatibility, other times it’s because the extension author hasn’t verified the extension against the latest releases and the extension hasn’t been marked compatible with the version number in use.

If it’s just a matter of version numbers, you can use the Nightly Tester Tools to override this and run the extension anyway.

That’s not the only advantage to the Nightly Tester Tools, of course. In addition to making it easy to use “incompatible” extensions, the tools are useful to developers who want to work on Firefox and extensions.

You can view previous crash reports, copy a list of installed extensions to the clipboard, display build information in the titlebar, take screenshots of Firefox, and more.

Greasemonkey

All Web pages are not created equal. In fact, some sites could use a little help, or a lot. You could lobby the site owners to make improvements, or you could use Greasemonkey to make the improvements yourself.

Greasemonkey stores and runs scripts for specific Web sites. You can either create your own script and use it, or grab scripts from Userscripts.org.

Once you’ve installed Greasemonkey, you can install scripts in much the same way you install extensions to Firefox.

You can employ Greasemonkey scripts to make your Bugzilla more useful, add features to Twitter, open GMail for mailto links, and many other hacks.

Platypus

Greasemonkey is nice, but wouldn’t it be nice to be able to create your own scripts quickly without having to fuss with JavaScript? Good news is, you can. The Platypus extension makes it easy to create simple Greasemonkey scripts to modify Web pages.

The Platypus extension provides a toolbar with several tools that allow you to manipulate objects on a site. For example, you can use Platypus to isolate a piece of a Web page so you don’t have to put up with ads and unnecessary cruft around the content you want to view.

You can also modify HTML on a page, view the source for a specific area of the page, and make all kinds of modifications without having to write any JavaScript whatsoever.

Platypus isn’t perfect. I’ve had mixed success creating Platypus scripts for various pages — for example, I didn’t have a lot of luck creating a script to display only the results column of a custom Google News search failed to do anything after I saved the script. However, more often than not, the scripts work perfectly — though you may need to edit the URL for affected pages by adding a wildcard.


Xmarks

If you use more than one computer, keeping bookmarks and passwords synched between the machines can be a bit of a hassle. Actually, it can be a major hassle, unless you’ve got something like Xmarks at your fingertips.

Xmarks is an extension that provides the ability to sync bookmarks and passwords, backup and restore bookmarks, and provide access to your bookmarks from the Xmarks Web site. In addition, you have the ability to set up profiles, so you can separate your personal and work bookmarks if you want to.

As an added bonus, the Xmarks service should work with IE and Safari in the near future. If you use more than one browser for work or fun, you should be able to sync your bookmarks across all three browsers in the near future.

Nervous about saving your bookmarks and passwords with a third party? It’s possible to use Xmarks with your own server instead.

Evernote

The Internet puts tons of information at your fingertips, but organizing it — that gets a bit tricky. Even though bookmarks can be useful for some info you find online, sometimes you need more than a pointer back to a Web page. For that, you can use Evernote. Evernote can help you manage all the information you find online, plus personal files, notes, and much more.

The Evernote extension works in conjunction with the Evernote service. Basic accounts are free, so you won’t break the bank by signing up. (Though you’ll be limited to 40MB and have to put up with ads for the basic service.)

Use is simple. The extension comes with a toolbar button and adds an “Add to Evernote” item to the context menu.

The extension allows you to clip Web pages, or even just parts of Web pages. This is particularly useful when you stumble onto a site that has useful instructions for troubleshooing a problem or solving a thorny programming problem. Find a forum post that has just the solution you need? Highlight the part of the page you want to save and click the “Evernote” button or use the context menu.

In addition to saving the material from the Web site, you can add notes and tags to the raw text, so you can put material in context and save your thoughts on Web pages for later. (It’s handy feature for writers, too…)

Vimperator

The world is made up of two kinds of people: Those who’ve accepted Vim as the one true text editor, and those who have settled for inferior methods of editing text. While Vim users can enjoy perfection when working on code, config files, and the like, they have to settle for inferior shortcuts when using other programs — including Web browsers.

But it doesn’t have to be that way, at least not entirely. While plain vanilla Firefox doesn’t include Vim support, the Vimperator add-on allows you to bring the modal editing greatness of Vim to Firefox. This means you can add Vi-like keybindings to Vim and control the browser entirely, or very nearly entirely, from the keyboard.

What does that mean, exactly? Vimperator gives Firefox Vim-like keybindings, Ex-type commands, a more minimal GUI, count support for commands, marks for Web pages, and even the ability to set up Macros. Vimperator can be extended with scripts, too.

Vimperator initially hides the toolbar and navigation bar. If you prefer to have these available, you can re-enable them with :set go+=mTB. See the wiki and access Vimperator’s tutorial using :help.

Even for experienced Vim users, it can take a while to get used to Vimperator. This is one of the extensions that works best in a separate profile until you get fully used to it. Also, note that Vimperator’s keybindings may conflict with the keybindings for some Web sites, like GMail or Google Reader.

Prism

Most of us have one or more Web applications we use extensively throughout the day. It can be useful to split these out of the regular browsing experience into their own “application,” using Prism.

Formerly known as Webrunner, Prism is an extension from Mozilla Labs that let’s you create a single use instance of Firefox as a desktop application. Just grab the extension and browse to the site that you’d like to run separately. Go to Tools -> Convert Website to Application and you’ll get a dialog to choose the URL, name of the application, icon, and the location of the shortcut.

After you’ve created the Prism application, you can launch it separately and run one or more instances of Prism while still using Firefox normally. If you restart Firefox (or it crashes) for some reason, the Prism instances will be unaffected. Likewise, if you end your Prism session, it won’t have any effect on the running Firefox session.

Launchy

As nice as Firefox is, sometimes it’s not the right application for the job. To augment Firefox’s features, you can use Launchy to configure Firefox to open Web pages in new applications, use external apps for FTP and download, external editors, and view media in external players.

The only letdown with Launchy for Linux users is the lack of application autodetection. If you want to use Launchy, you have to edit the launchy.xml file and tell it where to find the applications you want to use.

Google Gears

Web-based applications are great, but typically not so useful when you’re offline. If you depend on Web-based apps, it can be somewhat inconvenient trying to get work done on those cross-country flights.

For a small subset of applications, though, you can use Google Gears — a framework that allows Web application developers to enable offline use as well as the usual online use.

Despite the name, Google Gears can be used with non-Google applications — so, even if you’re not using any Google services, you may still find use for Gears. Sites like Remember the Milk and WordPress.com work with Gears, in addition to Google’s GMail, Reader, Google Docs, and others.

When you load a Web application that supports Gears, it may ask permission to use Gears, or you may have to enable Gears manually. You can choose to enable or deny Gears, or to never allow the site if you don’t want to see the dialog again. After enabling Gears, it will download some data to enable the application to work offline, and then you’re off to the races. You’ll be able to work offline and synchronize data when you’re online again.

Ubiquity

Last, but definitely not least, is Ubiquity. Ubiquity is a Mozilla Labs project to allow “on-demand, user-generated mashups,” a command-line browser tool that gives fast and easy access to a number of tools and sites.

After Ubiquity is installed, you’ll have a hotkey to display the Ubiquity interface. This is usually Alt-Space, but can be modified. Go to about:ubiquity to change the shortcut to invoke Ubiquity and then take the Ubiquity tutorial to get the basics.

A couple of quick examples. If you want to search Wikipedia for a term, just hit Alt+Space and enter the search term. To translate a section of text, highlight the text you want to translate and then type “translate” and then the language you want to translate it to.

From Ubiquity, you can quickly compose emails using Gmail, look up strings in Google, Wikipedia, IMDB, and many others, map addresses, create bookmarks, and a lot more.

Ubiquity isn’t limited to the commands that come pre-installed. You can create your own, or search for new commands created by “The Ubiquity Herd.” Note that these scripts are not vetted officially by Mozilla, so you’re taking some risk in installing them to run in your browser.

About:End

Of course, Firefox has hundreds of useful extensions, but these are the ones I’ve found to be most useful over time. New ones, however, are being created every day. It’s well worth checking out the Firefox Add-Ons site on a regular basis, or just browsing the recommended add-ons displayed when you go to Tools -> Add-ons. You’ll find plenty of new and interesting extensions to improve Firefox.

Joe 'Zonker' Brockmeier is Managing Editor for Linux Magazine and the openSUSE Community Manager for Novell. His blog is at zonker.opensuse.org.
Posted by CEOinIRVINE
l

Five Best Web Browsers

IT 2009. 3. 24. 03:44

It's probably the most important and debated piece of software on the modern computer. See how your fellow readers get around the net, and vote for your favorite web browser, in this week's Hive Five.

Picture background created with WEB2DNA Art Project.

The only proper way to follow up on the passionate flurry of voting that last week's Hive Five Best Linux Distributions created was to ask you about your favorite web browser. You didn't disappoint—Lifehacker readers came out in force, logging nearly a thousand votes to support their favorite browsers. We've tallied up the votes and we're here to share the top five browsers.

Chrome

Windows only (for practical purposes, but soon on Mac and Linux, if we're lucky): Some browsers have roots going back to the early 1990s—Chrome, on the other hand, is the new kid on the block. Although Chrome has a distant relationship to Konqueror and is a cousin to the Safari web browser—both share the speedy WebKit rendering engine—Google's browser is less than a year old. Despite its youth, it's already garnered praise for its minimalist interface and snappy page rendering. Chrome also handles site errors and quirks well, and each individual tab is a unique process, so a crash or lag in one shouldn't pull down or crash the others. In general, though, Chrome has caught attention for running a performance-focused JavaScript engine in a lightweight GUI. Also worth noting, Chrome has been holding its own in the recent Pwn2Own security challenge, with the distinction of being the only browser left standing after the first day of security exploits and attacks. For a closer look at Chrome, check out our screenshot tour.

Opera

Windows/Mac/Linux: Opera is a rock-solid browser with roots stretching back to 1994. Many of the features baked right into Opera are either not implemented in other browsers, or require multiple extensions at the cost of system resources—navigation by mouse gestures is one of the flashier examples. Despite being feature-packed, Opera has a fairly small market share, due largely in part to being trialware up until 2000 and advertisement-supported until 2005—many people were turned off by the expense, if not the ads. Still, Opera proponents have long claimed that Opera beats Internet Explorer and Firefox when it comes to speedy rendering. Another selling point for Opera is the quality of the built-in tools. For many users, the built-in RSS reader, email client, and BitTorrent client do their jobs admirably, cutting down on the number applications they need running at once. Opera is extensible, but the pool of available extensions is radically smaller than that available for Firefox. More screenshots and details on Opera's features are available here.



Firefox

Windows/Mac/Linux: Firefox is the grandchild of the venerable Mosaic browser and free-roaming son of Netscape. Although Firefox has a myriad of user-friendly, forward-thinking features, a decently secure framework, and an open-source ideology, its most prominent is extensibility. When convincing a Firefox user to abandon Firefox for anything else, even temporarily, you won't have to fight them over giving up the AwesomeBar or about:config tweaks—you'll hear a common, understandable refrain: "What about my extensions?" The repository of extensions maintained by Mozilla currently has over 6,000 entries, covering everything from blocking advertisements, to managing your clipboard, to allowing you to further customize your browsing experience with scripts a la Greasemonkey (here's 10 of our must-have picks). Combine the passion people have for extensions and the ability to sync those extensions across multiple computers and portable installations, and you've got a force to be contended with. For a closer look at Firefox, make sure to check out our power user's guide to Firefox 3 and the top 10 Firefox 3 features.

Internet Explorer

Windows only: Internet Explorer still commands a healthy chunk of the browser market, mostly because it ships with the most popular operating system on Earth and fits, if not exactly elegantly, into corporate computer plans. While many or most IE users stick with it for lack of wanting to try something else, Lifehacker readers definitely don't fall into that crowd—the majority of readers who voted in favor of Internet Explorer are sporting Internet Explorer 8. By contrast, nearly 20 percent of those surfing the web right now are using Internet Explorer 6, which had its initial release in 2001. Version 8 could mark a resurgence for the brand, though. It's the first version of Internet Explorer to have a strong focus on web standards compliance, as well as increasing rendering speed. And like Chrome, Internet Explorer 8 maintains a separate process for each tab to increase stability and security. Internet Explorer 8 has also beefed up its security measures from previous versions, including active filtering against malicious cross-site scripting and ActiveX isolation from the core of the browser. For more information about what's new in Internet Explorer 8 check out our screenshot tour and overview.

Safari

Windows/Mac: Safari is Apple's contribution to the web browsing world, built originally to fit snugly inside OS X. Like Chrome, Safari runs the speedy WebKit rendering engine for snappy page loads. In addition to its WebKit core, Safari also has the Nitro JavaScript engine, which lays claim to radically faster JavaScript execution than Internet Explorer and Firefox (in its own testing reports, anyways). Safari sports Apple's Cover Flow browser for perusing your history and bookmarks and an eye-catching display of the top 24 sites you've visited as the default page when Safari is loaded. For more features, check out our screenshot tour.

You've seen the top contenders. Now it's time to log your vote for the best browser:

Posted by CEOinIRVINE
l
TITLE:
Mozilla Firefox 2 Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA33184

VERIFY ADVISORY:
http://secunia.com/advisories/33184/

CRITICAL:
Highly critical

IMPACT:
Security Bypass, Cross Site Scripting, Exposure of sensitive
information, System access

WHERE:
From remote

SOFTWARE:
Mozilla Firefox 2.0.x
http://secunia.com/advisories/product/12434/

DESCRIPTION:
Some vulnerabilities have been reported in Mozilla Firefox, which can
be exploited by malicious people to bypass certain security
restrictions, disclose sensitive information, conduct cross-site
scripting attacks, or potentially compromise a user's system.

1) Multiple errors in the layout engine can be exploited to corrupt
memory and potentially execute arbitrary code.

2) An error in the processing of XBL bindings can be exploited to
bypass the same-origin policy and read data from a target document in
another domain.

Successful exploitation of this vulnerability requires that the
target document contains a "<bindingsi>" element and that the "id" of
the read binding is known.

3) An error in the feed preview functionality can be exploited to
execute arbitrary JavaScript code with chrome privileges.

This is related to vulnerability #3 in:
SA31984

4) An error exists when processing "XMLHttpRequest" requests to a web
server which redirects the browser via a 302 HTTP status code. This
can be exploited to bypass the same-origin policy and disclose
sensitive information from another domain.

5) An error exists when processing JavaScript URLs redirecting the
browser to another domain returning non-JavaScript data. This can be
exploited to disclose sensitive information from the other domain via
a "window.onerror" event handler.

6) An error when processing URLs starting with whitespace or certain
control characters can be exploited to output a malformed URL when
rendering a hyperlink.

7) An error in the CSS parser when processing "\0" sequences can be
exploited to potentially bypass third party script sanitation
routines.

8) An error when processing an XBL binding attached to an unloaded
document can be exploited to bypass the same-origin policy and
execute arbitrary JavaScript code in a different domain.

9) Two errors can be exploited to pollute "XPCNativeWrappers" and
execute arbitrary JavaScript code with chrome privileges.

10) Several errors in the session restore feature can be exploited to
execute arbitrary JavaScript code in a different domain or with chrome
privileges.

The vulnerabilities are reported in versions prior to 2.0.0.19.

SOLUTION:
Update to version 2.0.0.19.
http://www.mozilla.com/en-US/firefox/all-older.html

PROVIDED AND/OR DISCOVERED BY:
The vendor credits:
1) Daniel Veditz, Jesse Ruderman, and David Baron
2) Boris Zbarsky
3, 8-10) moz_bug_r_a4
4) Marius Schilder of Google Security
5) Chris Evans of Google Security
6) Chip Salzenberg, Justin Schuh, Tom Cross, and Peter William
7) Kojima Hajime

ORIGINAL ADVISORY:
http://www.mozilla.org/security/announce/2008/mfsa2008-60.html
http://www.mozilla.org/security/announce/2008/mfsa2008-61.html
http://www.mozilla.org/security/announce/2008/mfsa2008-62.html
http://www.mozilla.org/security/announce/2008/mfsa2008-64.html
http://www.mozilla.org/security/announce/2008/mfsa2008-65.html
http://www.mozilla.org/security/announce/2008/mfsa2008-66.html
http://www.mozilla.org/security/announce/2008/mfsa2008-67.html
http://www.mozilla.org/security/announce/2008/mfsa2008-68.html
http://www.mozilla.org/security/announce/2008/mfsa2008-69.html

OTHER REFERENCES:
SA31984:
http://secunia.com/advisories/31984/

'Hacking' 카테고리의 다른 글

Reverse Engineering (BASIC)  (0) 2008.12.22
Gunz Hacking  (0) 2008.12.19
Red Hat Update for Kernel  (0) 2008.12.18
Microsoft Internet Explorer Data Binding Vulnerability  (0) 2008.12.18
PE Format Analysys  (0) 2008.12.18
Posted by CEOinIRVINE
l