所有产品 社区论坛

One of the typical configuration in linux is to turn off the user namespaces and/or network namespaces. This is because most of the exploits in linux have been related to namespaces vulnerabilities.

If there is a Firefox ver 127.0.2, running on Linux in which the user namespace is turned off then the following is observed in the Troubleshooting information, i.e. about:support Seccomp-BPF (System Call Filtering) true Seccomp Thread Synchronisation true User Namespaces for privileged processes true User Namespaces false Content Process Sandboxing true Media Plugin Sandboxing true

So how come with the username turned off, the content process and media plugin is still sandboxed? Also is having user namespace turned off, as given above, a security risk?

However if the network namespace is turned off, i.e. max_net_namespaces is set to zero, then it renders the browser unusable. Nothing works. Why is that?

Is there some documentation somewhere where these namespaces and their impact is explained in detail?

Hi,

I am facing an issue with Thunderbird.

I integrated my email address but there problem is the new message is giving "Undelivered Mail Returned to Sender" but I can reply and receive the emails.

Please guide me about it.

Many Thanks

For System Administrative reasons, I want to disable automatic Firefox updates. Firefox can ask me if I want to install an update, but I get to choose whether or not to update.

Problem: Persistent 150 KB of Cached Web Content For several years, I have gone to “Settings” / “Privacy & Security” / “Cookies and Site Data,” clicked the Clear Data…” button, checked both “Cookies and Site Data,” and “Cached Web Content,” and clicked “Clear”, and consistently gotten BOTH “Cookies and Site Data,” and “Cached Web Content” down to “0” zero. Recently, I have been unable to “Cached Web Content” to go below “150 KB of disk space.”

         I have NOTHING listed in “Manage Cookies and Site Data” or “Exceptions -- Cookies and Site Data.”
         I have tried reinstalling, but the problem has persisted.
         On the assumption that this is malware problem, I have continued to use Mozzella VPN, but stopped using the program for browsing, etc.  Should I stop using it altogether until the problem is fixed?
         Can you tell me how to get rid of the last “150 KB” of “Cached Web Content”?

Dear Sir or Madam,

I have just migrated Thunderbird to my new CUBI desktop running Windows 11. I get security errors when I launch Thunderbird. My email provider The Messaging Company advised me to change server settings, which are now shown in the Troubleshooting Information page as account1 (pop3) pop.themessagingco.com.au:995 SSL/TLS Normal password smtp.themessagingco.com.au:587 STARTTLS Normal password true.

On launching Thunderbird I get the message Secure connection failed live.mozillamessaging.com uses an invalid security certificate. The certificate is not trusted because the issuer certificate has expired. Error code: <a id="errorCode" title="SEC_ERROR_EXPIRED_ISSUER_CERTIFICATE">SEC_ERROR_EXPIRED_ISSUER_CERTIFICATE</a>

   This could be a problem with the server's configuration, or it could be someone trying to impersonate the server.
   If you have connected to this server successfully in the past, the error may be temporary, and you can try again later.

Or you can add an exception…

AND when I attempt to send an email I get warning that the SMTP server does not have a valid certificate. If I ask, in either case, to "Get Certificate" the response is that the site attempts to identify itself with invalid information.

I have "tried again later" over two weeks, and nothing has changed.

The Messaging Company is a fairly large email provider: it seems strange that its security is incomplete. However, I am not happy to just set an exception and over-ride these errors without doing all I can to check that there is not something screwy going on. I really value using Thunderbird, and The Messaging Company's advice that I should just use webmail is not at all satisfactory: I keep everything on my computer or backed up to a portable drive here.

Please: is there anything I can do or should know to fix this problem?

Best Regards, Margaret Mackisack

I have unsubscribed from all newsletter after receiving the first email but days later I'm still getting emails from Firefox (e.g. Superpower #4: See if your info has been leaked).

This is an incredibly bad user experience and to my knowledge illegal in the EU.

I'm probably still within that journey but the journey should terminate the moment I clicked unsubscribed.

We have set up exceptions for mail.google.com and accounts.google.com in Settings. Yet, Gmail is still asking for passwords to log in and saving them. I thought I had done all it would take to have Gmail remember them. Am I missing something?

Also, we cleared cache.

Thank you, Meg

Can't log into router. Works with Chrome and Edge 192.168.2.1

Tried this says in the router's Admin page: Access setting page via https://router.asus.com:8443 * Please use port 1024-65535. With and without :80 and :433

Tried everything I can find on this site and Google. Has worked for many years.

I am shipping a broken computer back to the manufacturer. I had installed Firefox on it using my Firefox account. Since I have used the Firefox password feature to store all my passwords, I'm concerned that someone at the manufacturer could access my passwords. (The computer refused to boot, so I was not able to scrub it prior to sending it back.) My question is this: if I change the Firefox password on my home desktop, will my passwords on the returned computer be protected?

Thanks for any help!

Tom Smith Ph. [phone# removed from public]

Is there a security setting that allows me to show all my passwords rather than having to toggle them on each time?

I am a recluse. There's never anyone looking over my shoulder. I just don't want to have to mess with it anymore.

If there isn't, could some kind developer please make an add-on?

I am using two computers: an iMac (late 2009) running 10.13.6 (High Sierra) and a Macbook Pro (13-inch, 2012) running 10.15.7 (Catalina).

Thank you!

K

hello, i recently went from google browser to firefox, and i want to import my passwords. i did save all my passwords from google browser to .csv file, but when i go to settings>import passwords, it lets me choose the file, i choose my passwords.csv, and then-nothing happens. no loading, browser doesnt stop working, my folder where i choose csv from is just closing, but passwords doesnt import

Hi, I accidentally allowed notifications (while using Firefox) from a particular web site only to find out that now I get numerous notifications regarding phony virus alerts, etc. I am unable to block the notifications.

I searched the web for how to block a notification from a web site, but have not come up with any solutions.

In particular, I went to about:preferences > Privacy & Security > Permissions > Notifications. The web site is set to Block, but still the unwanted notifications continue. Perhaps the notifications are coming from a different web site that seems to be hidden?

I also quit Firefox and restarted Firefox, but the notifications continue. I also restarted my Macbook Pro, but that didn’t help either.

Here is the link I originally clicked on, but I obviously wouldn’t want anyone to click on it:

https://duckduckgo.com/?q=!ducky+trialjuries&ia=web

I would be so grateful if anyone has a solution!

We followed the links below to block internet access in Firefox browser:

https://www.youtube.com/watch?v=fAGYYX5hYb8 https://github.com/mozilla/policy-templates/releases

We downloaded the ADMX and ADML files. Using these files, we were able to locate Mozilla Firefox in Group Policy Management and successfully block all websites in the Firefox browser using the pattern :///*.

However, we encountered an issue with exceptions. We do not wish to block certain websites, including localhost. We attempted to use the "Exceptions to block websites" option, providing values such as ://msn.com/ to exclude specific sites. Unfortunately, this approach did not work as intended. For instance, msn.com is one of the websites we want to allow, among others and also localhost.

We require assistance with the following issue: "Exceptions to block websites" is not functioning properly within the group policy of Mozilla Firefox.

Hello,

My password saved are deleted every time I close FF. It used to be manageable because Google and other sites didn't require me to fill my passwords (cookies did the trick I suppose) but now I also loose access to gmail and Youtube every time I close FF. It's annoying to have to use 2FA every damn time. And keeping the passwords available.

I've tried every answer I found by looking around :

- tried to start in safe mode - disable hardware acceleration - I have no extensions

FF saves the passwords correctly (at least they appear in the saved password tab) but they are erased every time I restart FF. The cookies aren't automatically deleted (FF remembers my browsing history) but I need to relog into Google.

I getting frustrated.

Microsoft tell me that I must use OAuth2 for my accounts, else I'll be locked out.

Server is imap-mail.outlook.com. If I select OAuth2, then I can't receive emails unless I reset back to Normal Password.

I'm also supposed to set my SMTP server (smtp-mail.outlook.com) to OAuth2, but this isn't an option on the drop down list.

Help, please!

Hi, 3 weeks ago I suddenly could not log in to my email without errors.

First I get a Google screen "Choose an account" showing the three Gmail accounts I use. I select the first one.

"Mozilla Thunderbird wants to access your Google Account". This refers to calendars. I take the Allow option.

Then I get the message "Warning: Potential Security Risk Ahead

Thunderbird detected a potential security threat and did not continue to localhost. If you visit this site, attackers could try to steal information like your passwords, emails, or credit card details."

When I close this window I get another Google screen .

"Mozilla Thunderbird wants to access your Google Account". This refers to i) mail, ii) contacts, and iii) calendars. I take the Allow option.

Then I get the same message message "Warning: Potential Security Risk Ahead

Thunderbird detected a potential security threat and did not continue to localhost. If you visit this site, attackers could try to steal information like your passwords, emails, or credit card details."

This process cycles through the other two emails. Then I get and authentication failure message.

I have seen hints that this might be a certificate issue but I have tried in vain to find certificates stored in Thunderbird.

Any help approeciated.

Thanks

PaulM

I use Thunderbird 115.12.2 (64-bit) with Hotmail, using a local account on Windows 10. Microsoft is introducing 'modern authentication' on Hotmail, and I want to be ready for this, but I cannot follow the guidance at https://support.microsoft.com/en-gb/office/modern-authentication-methods-now-needed-to-continue-syncing-outlook-email-in-non-microsoft-email-apps-c5d65390-9676-4763-b41f-d7986499a90d

If I try to alter my existing Thunderbird Account Settings for my Hotmail account, the authentication method for Outgoing Server (SMTP) is shown as Normal Password but there is no option to change it to OAuth2. If I delete and recreate my Hotmail account in Thunderbird, I get an error message from Microsoft saying that I cannot log in because my browser is not set to allow cookies -- even though I believe I have set both Thunderbird and Firefox (my default browser) to allow cookies.