Greasemonkey Insecurities

18 Jul 2005

Today's most interesting mailing list posting:

Uninstall Greasemonkey altogether. At this point, I don't trust having it on my computer at all. I would think that whoever is in charge of addons.mozilla.org should immediately remove the Greasemonkey XPI and post a large warning in its place advising people to uninstall it.

By the way, "Greasemonkey Hacks" is DEAD until we fix this. And I'm posting a big red blinking warning on every page of diveintogreasemonkey.org advising visitors to uninstall it, until all of these security holes are closed. This is why God invented the <blink> tag.

Posted on Monday, July 18, 2005 at 4:57 PM

3 TrackBacks

Many people are wondering how to debug AJAX application. In fact, the idea of cross plateform development isn't that easy to debug, there is Javascript calls, and there is XML server response in the other side. And if you have two errors in the two sid

Read More »
Debugging AJAX applications | July 19, 2005 1:50 AM
Hasta nuevo aviso habría que desactivar el Greasemonkey (una fantástica extensión para Firefox) debido a un grave problema de seguridad. Lo mejor será activarlo cuando se necesite puntualmente.... Read More »
Greasemonkey, inseguro | July 19, 2005 2:06 AM
GreaseMonkey is a popular Firefox extension which allows lots of great enhancements to your browser using third party GreaseMonkey scripts. Yesterday a serious security vulnerability was found which exposes the hard drive content of GreaseMonkey users ... Read More »
Critical Security Vulnerability with GreaseMonkey (Firefox Extension) | January 17, 2007 10:28 AM

1 Comment

It is rather serious vulnerability which Mark found. I have blogged the details here.

Angsuman Chakraborty | July 19, 2005 9:55 AM | Reply

Leave a comment

About this Site

Prev Next

Explore This Site

Recent Comments

Recent Entries

  • Burying The Lede

    I think one of the biggest reasons many great writers go into journalism is for the chance to sneak little wisecracks in, with the hope...

  • I Am Telling You This

    As always, I am trying to be everywhere at once. Here's where I've succeeded: * Dan Costa at PC Magazine offers a look at the...

  • Alan Leeds and Who Writes the Web

    One of the most frequent questions I get when I talk to people who are unfamiliar with social media on the web is, "Who writes...

  • Ubiquity

    Right now I am here, but soon I may be somewhere near you! Let's see where I've been lately, and where I'm going to be:...

  • Seven is Angry, Sadly

    Each year, I try to write a memorial post on the anniversary, to remind myself, and as a record of where I am compared to...

What I'm Up To

Thursday

  • Anil tweeted, "Getting inordinately excited about seeing Maxwell tonight."
  • Anil tweeted, "Leaks are bewing fixed. Scaffolding is being removed. Skilled laborers are at work."
  • Anil tweeted, "Okay, pretty soon I'm gonna go down to Wall Street and call "Bowser Revolution!" and just randomly reassign all the coins. Who's with me?"
  • Anil tweeted, "Having again braved the inscrutable and superstitious ways of the transhudsonic peoples, I am safely home at last in New York Civilization."

Wednesday

Tuesday

  • Anil tweeted, "This whole financial bailout kind of feels like the opposite of being in the audience during an Oprah's Favorite Things episode."
  • Anil tweeted, "Am I the only one who experiences Pacific Time as a sense of continuously being three hours behind and never catching up?"

Elsewhere

1999 2000 2001 2002 2003 2004 2005 2006 2007 2008
  Jan Jan Jan Jan Jan Jan Jan Jan Jan
  Feb Feb Feb Feb Feb Feb Feb Feb Feb
  Mar Mar Mar Mar Mar Mar Mar Mar Mar
  Apr Apr Apr Apr Apr Apr Apr Apr Apr
  May May May May May May May May May
  Jun Jun Jun Jun Jun Jun Jun Jun Jun
Jul Jul Jul Jul Jul Jul Jul Jul Jul Jul
Aug Aug Aug Aug Aug Aug Aug Aug Aug Aug
Sep Sep Sep Sep Sep Sep Sep Sep Sep Sep
Oct Oct Oct Oct Oct Oct Oct Oct Oct Oct
Nov Nov Nov Nov Nov Nov Nov Nov Nov  
Dec Dec Dec Dec Dec Dec Dec Dec Dec