We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Èròjà atẹ̀lélànà yii ni a ti fi pamọ́ fọ́jọ́ pípẹ́. Jọ̀wọ́ béèrè ìbéèrè titun bí o bá nílò ìrànwọ́.

Security: Firefox for mobile and fake phishing website

  • 2 àwọn èsì
  • 2 ní àwọn ìṣòro yìí
  • 1 view
  • Èsì tí ó kẹ́hìn lọ́wọ́ Mark

Mark
Mark
more options

Firefox for Android mobile load the title of the page on the URL space.

If a fake website put the name of the page as the address of the website user can be confused.

Suppose the website of the bank is www.mybank6567.ext

The fake site can be fakebank.ext this website can have a SSL and the name of the page on mybank65.ext can be the url of the original bank.

If user open masked link from Firefox mobile can be easily confused.

Look try to open this URL from Firefox Mobile on Android https://github.com/webcompat/web-bugs/issues/405 you have to be logged into github.com after the page load if you see on top it seems to be on the right website of the bank, there is the lockpad simbol and the address you read is the bank address. Inexpert user can confusing.

Firefox for Android mobile load the title of the page on the URL space. If a fake website put the name of the page as the address of the website user can be confused. Suppose the website of the bank is www.mybank6567.ext The fake site can be fakebank.ext this website can have a SSL and the name of the page on mybank65.ext can be the url of the original bank. If user open masked link from Firefox mobile can be easily confused. Look try to open this URL from Firefox Mobile on Android https://github.com/webcompat/web-bugs/issues/405 you have to be logged into github.com after the page load if you see on top it seems to be on the right website of the bank, there is the lockpad simbol and the address you read is the bank address. Inexpert user can confusing.

Ọ̀nà àbáyọ tí a yàn

Oh, I'M sorry. This is very important problem and i hope security of Firefox will be fixxed as soon as possibile.

Bad image for Firefox in this issue. Very dangerous. So i close there my question.

Sorry but I'M not registered into bugzilla and i will not register as i don't want make my email address public so I hope other people continue to insist on bugzilla for this security problem. I stop my discussion here, i have alerted about security issue on Firefox Mobile.

Ka ìdáhùn ni ìṣètò kíkà 👍 0

All Replies (2)

philipp
philipp
  • Moderator
more options

hello, thanks for bringing this up - there is already a long running discussion about this subject at https://bugzilla.mozilla.org/show_bug.cgi?id=605206.

Mark
Mark Ìbéèrè olóhun
more options

Ọ̀nà àbáyọ Tí a Yàn

Oh, I'M sorry. This is very important problem and i hope security of Firefox will be fixxed as soon as possibile.

Bad image for Firefox in this issue. Very dangerous. So i close there my question.

Sorry but I'M not registered into bugzilla and i will not register as i don't want make my email address public so I hope other people continue to insist on bugzilla for this security problem. I stop my discussion here, i have alerted about security issue on Firefox Mobile.

Ti ṣàtúnṣe nípa Mark