Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

New browser attack lets hackers run bad code even after users leave a web page
ZDNet ^ | February 25, 2019 | By Catalin Campanu

Posted on 02/25/2019 1:35:50 PM PST by Swordmaker

click here to read article


Navigation: use the links below to view more comments.
first previous 1-2021-4041-6061-8081-88 next last
To: Bob434

I’ve had the attack tie everything up. It locks the browser and it responds to nothing.

So I reboot by shutting down the power and going through a recovery.

Not the best option. More like something you see with Linux.

In a non GUI version, it would respond. Period. That is the nature of Linux.

And XFCE is pretty light GUI and it’s stable.

Part of the issue is I use https: logins and that complicates the “workers” issues in Firefox.


61 posted on 02/26/2019 11:56:42 AM PST by Texas Fossil ((Texas is not where you were born, but a Free State of Heart, Mind & Attitude!))
[ Post Reply | Private Reply | To 55 | View Replies]

To: Swordmaker

It can even happen here at the FR with no ads. Go hit the Marshmallow Beer thread and watch the processes and connections. Everyone needs to be careful from what source they link to on here. Those links complete a connection to spam API services in our browsers.


62 posted on 02/26/2019 12:03:44 PM PST by Openurmind
[ Post Reply | Private Reply | To 1 | View Replies]

To: Texas Fossil

Honestly... I would rather Linux lock than continue at that point. It might be saving me a lot of heartache by stopping the process immediately.


63 posted on 02/26/2019 12:07:33 PM PST by Openurmind
[ Post Reply | Private Reply | To 61 | View Replies]

To: Openurmind

Yes. I have no idea what the attack actually is. More than likely it is a Java script. I think it is intended to lock up the system or cause a DOS because of my content.

I only see it when I am logged onto Twitter. Although after it presents itself, If I can manage to shut down the Tab with Twitter the processes continue for a while.

I think they are designed to overload the system and cause it to stop responding.


64 posted on 02/26/2019 12:14:48 PM PST by Texas Fossil ((Texas is not where you were born, but a Free State of Heart, Mind & Attitude!))
[ Post Reply | Private Reply | To 63 | View Replies]

To: Openurmind

Umm - good catch. Make that FireFox 65.0.1 (64 bit) - still Mozilla though. ;-)

I’m pretty sure I’ve got some 360Kb Ms-Dos 2.0 disks in the attic if you really want to go back.

My first PC was a Columbia, 256KB ram, RGB monitor, 10MB HD, two 1/2 height 5 1/4” drives, a screaming 1200 baud modem, a C-Itoh dot matrix printer - all for only $8,000 dollars and change.

10MB HD all by itself was $1200. $120 gets you 4TB easy these days. Two Mp3 songs or one picture would fill up that drive!

Columbia’s claim to fame was its dual processor motherboard. It could operate with a Z80 (minicomputer) CPU or the Intel 8080/8088? running MS-Dos in case things went one way or the other back then - didn’t want to lose 6 grand+ on a coin flip.

Turns out IBM/Boca Raton won that one. So did Mr. Gates.

Now my phone is 1000 times more powerful than that PC!


65 posted on 02/26/2019 12:17:42 PM PST by Tunehead54 (Nothing funny here ;-)
[ Post Reply | Private Reply | To 59 | View Replies]

To: Texas Fossil

That’s twitter digging into your stuff and your resources are not enough for them to do it efficiently, so it takes priority and stops what you want to do.

Don’t go there... They used to do that to me too...


66 posted on 02/26/2019 12:25:36 PM PST by Openurmind
[ Post Reply | Private Reply | To 64 | View Replies]

To: Openurmind

I never had this problem as long as I was able to use No Script.

When I upgraded my Debian 8 Linux install and Firefox to 60.5.1 esr the problem started. It may not be related to the upgrade, it may be because of changes on Twitter. I’m unable to be sure. I suspect it was because of the Firefox upgrade, and lack of No Script support.


67 posted on 02/26/2019 12:31:33 PM PST by Texas Fossil ((Texas is not where you were born, but a Free State of Heart, Mind & Attitude!))
[ Post Reply | Private Reply | To 66 | View Replies]

To: Tunehead54

Isn’t that crazy? the price difference? I’m from those early days too. AOL wanted $20 dollars a month and they were not even my internet connection. Then came NETSCAPE FOR FREE!. lol

It was great and changed the internet into what it is now. But it is NOT cheaper... We are now paying for it dearly with our private information. Where is our just compensation for this transaction sometimes even without our knowledge?


68 posted on 02/26/2019 12:33:01 PM PST by Openurmind
[ Post Reply | Private Reply | To 65 | View Replies]

To: Texas Fossil

May I suggest something? I know you are old school and trying to keep that thing running because you are loyal to it, but I really think you would love the newer Mint Cinnamon version that comes with it’s own in house/unhooked version of Firefox with no direct ties to Mozilla.

Just don’t “update” the Firefox because then it does hook you to Mozilla. But if you do get the Mint go with the 18.3 version, and I highly suggest the Cinnamon, it is still only 2 gigs and comes fully loaded... they are still working on bugs in the newest 19.x versions.

If you need the links let me know, I have all the information ready at hand, reviews and all. I am pretty sure you will be glad you did it. :)


69 posted on 02/26/2019 12:47:53 PM PST by Openurmind
[ Post Reply | Private Reply | To 67 | View Replies]

To: Texas Fossil

With his Mint version you will be able to use no script... Ghostery... and many more that do not work on the older stuff. I have been cruising it with absolutely no issues, blocks, or exploits for almost a year now.


70 posted on 02/26/2019 12:53:00 PM PST by Openurmind
[ Post Reply | Private Reply | To 67 | View Replies]

To: Texas Fossil

Know whar else that’s pretty cool? It supports everything linux all the way back to the beginning. So nothing is degraded and lost, and they have a 32 bit version of the same if you need that. I loaded the 32 bit 18.3 on an old E machine and it is almost as fast and efficient as this one. :)


71 posted on 02/26/2019 12:58:42 PM PST by Openurmind
[ Post Reply | Private Reply | To 67 | View Replies]

To: Openurmind

Yes. Linux is very light if you use the right GUI and Firefox is the fastest browser I’ve used when it comes to speed.

And it has been the most secure. But now I think there is an issue.

I put my first Linux computer together in about 1994. It was a command line version of Slackware running UMSDOS. (under MS DOS). It was very fast and efficient. I think it loaded from 10-12 3-1/2” floppies.

Built my first PC from junk in 1982. It had a full complement of RAM? 64K (not meg). That was all the RAM it would address without bank switching. It was an 8 bit processor. But I even had a flight simulator for it. Smile. A Jumbo Jet.

Good old days.


72 posted on 02/26/2019 3:05:29 PM PST by Texas Fossil ((Texas is not where you were born, but a Free State of Heart, Mind & Attitude!))
[ Post Reply | Private Reply | To 71 | View Replies]

To: Openurmind

Yes, I should have left my Debian 8 install the same and not upgraded it. Problems started then.


73 posted on 02/26/2019 3:06:46 PM PST by Texas Fossil ((Texas is not where you were born, but a Free State of Heart, Mind & Attitude!))
[ Post Reply | Private Reply | To 70 | View Replies]

To: Openurmind
It can even happen here at the FR with no ads. Go hit the Marshmallow Beer thread and watch the processes and connections. Everyone needs to be careful from what source they link to on here. Those links complete a connection to spam API services in our browsers.

Entirely possible. From the way I understand how this works, it can operate in the background from a previous webpage you visited and left, even if you closed the page or tab before you went to FR. . . even yesterday if you didn’t quit completely out of the browser.

74 posted on 02/26/2019 3:06:54 PM PST by Swordmaker (My pistol self-identifies as an iPad, so you must accept it in gun-free zones, you hoplaphobe bigot!)
[ Post Reply | Private Reply | To 62 | View Replies]

To: Openurmind

Oh, In know about Mint and the Cinnamon version.

I ran Xubuntu for a while, it is pretty light.

I hate to change OS’s it is a pain to back everything up.

I’ve even considered installing Open BSD. It is a bit more secure than Debian, which is not bad.

I’ve tried many flavors of Linux over the years. Pygmy Linux, Slackware, Redhat, Mandrake, Pico BSD, Debian, DSL, Xubuntu and others I’ll have to think about. I prefer XFCE GUI versions now. Started using it with a Redhat 8.0 install that I found bloated, added XFCE and it was like turning on the lightbulb.


75 posted on 02/26/2019 3:15:55 PM PST by Texas Fossil ((Texas is not where you were born, but a Free State of Heart, Mind & Attitude!))
[ Post Reply | Private Reply | To 69 | View Replies]

To: Texas Fossil

This version is truly the crossover and the best of everything combined that just works. :)


76 posted on 02/26/2019 4:24:11 PM PST by Openurmind
[ Post Reply | Private Reply | To 75 | View Replies]

To: Swordmaker

Yep... Those embedded images can carry cooties.


77 posted on 02/26/2019 4:25:52 PM PST by Openurmind
[ Post Reply | Private Reply | To 74 | View Replies]

To: Openurmind

Like Brave.com?


78 posted on 02/26/2019 7:37:28 PM PST by Perseverando (For Progressives, Islamonazis, Statists, Commies & other DemoKKKrats: It's all about PEOPLE CONTROL!)
[ Post Reply | Private Reply | To 37 | View Replies]

To: Perseverando

I like brave and would use it, but for some reason their version for linux doesn’t like linux. I would like to see them fix it for us linux users and I would go back to it.

Know what? I think that will be my project for today. I’m going to contact brave and see if I can help supply info from my end to figure out what’s wrong.


79 posted on 02/27/2019 4:51:12 AM PST by Openurmind
[ Post Reply | Private Reply | To 78 | View Replies]

To: Openurmind
Is it based on Debian? I fell out with Ubuntu because of their internal issues.

The frustration and the joy of Linux is there are so many choices. The frustration is the mix of approaches make system structure complicated. So those chosen out of pieces, as you said that “simply work”, are the most effective. I'm not impressed with huge code and lots of bells whistles and lights. For me it is function over anything else. I can adapt to almost any interface.

The dispute between Gnome and some of the other branches to me was just noise. Internally there are differences.

Simple works in the real world. Most programmers logic does not exist in the real world. I've heard them say that there is not problem that cannot be solved with a couple of more layers of abstraction. I disagree totally, Computers are not a solution, they are only a tool. The idea of artificial intelligence is nonsense.

I know Geeks. Some are really nice people, but they are a different crowd. (some are exceptional and know)

I'm impressed with how much some people can do and accomplish with very little. For me beauty is simplicity and function, not abstraction and complexity.

I'm an analog type of guy lost in a digital world that is trying to mimic analog reality.

Analog has resonance, digital does not. Like the difference in the sound of a vacuum tube audio amplifier and that of a MOSFET amplifier. Presence?

80 posted on 02/27/2019 5:36:58 AM PST by Texas Fossil ((Texas is not where you were born, but a Free State of Heart, Mind & Attitude!))
[ Post Reply | Private Reply | To 76 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-4041-6061-8081-88 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson