Highjacking your browser

I know you folks get all pissy when I mention Linux, but this is for
you Windoze and Apple users, too. Basically, anyone with an internet
broswer, which is pretty much all of us regardless of operating system
(OS). I think you should be aware of this insidious little bit of
slimeware I've recently been seeing way too often.

Some background. All browsers have an about:config file. It's got a
lotta browser specific settings that determine how your browser
interacts with webpages. You can see it by typing about:config in
your URL box. Don't change anything unless you know exactly what
you're doing. Also, most webpages run some "scripts" when you go to
their page. These are little programs and/or applications that may do
nothing more than set a cookie or scripts that run the entire time you
are on a webpage. There are server-side scripts and client-side
scripts. Client side scripts mean they run on your computer. Many of
you already know this. For you who don't, pay attention.

I run a browser plug-in called NoScript. It will kill any and all
scripts that are client-side and use my computer/browser to run. This
makes a lot of websites I visit unviewable or kills things like
streaming video or java or flash. It also has options that let me
"allow" or "temorarily allow" certain scripts to run, should I decide
to. The one I've been seeing more and more surprised me. It's a
script called about:blank.

Sounds suspicious, doesn't it? That because it is. It's like
about:config, but it's a blank slate. I wondered if this is some
sorta malicious script to modify or somehow rewrite my about:config
file. After a bit of research, I discoverd that's precisely what it
is. Now, read this:

http://spyware-adware-reviews.upickreviews.com/what-is-about-blank.html

I'd never seen this script before a couple mos ago. Now, I see it
more and more. Naturally, I never allow it to run. I can understand
if one were to run across this on porn.com or freeMP3s.com or
warez.org, but no! I jes saw it again on www.nbc.com when I was
checking world news. That means trusted webpages like NBC are now
infected with this slimeware.

Sorry for the long post, but thought you folks should be aware.
Here's how I stop it:

http://noscript.net/

Runs on other browsers besides FF.

nb
 
notbob wrote:


Thanks nb, i have yet to fully comprehend your message and its
implications but i have been wondering about just those issues.
--
JL
when I mention Linux, but this is for
 
On Apr 2, 12:10?pm, notbob wrote:

==
Sounds good but there are certain things that really constrain
browsing that people should research before using it.

Did you know that there are over 5700 add-ons available for
FF...incredible.
==
 
On Sun, 03 Apr 2011 12:46:38 -0700, "M. JL Esq."
wrote:


If you have that problem, install NoScript.

--

Today's mighty oak is just yesterday's nut that held its ground.
 
Back
Top