[contemplator]

From the above referenced article - "...The attack can be disabled in Firefox and Mozilla by setting 'network.enableIDN' to false in the browser's configuration (enter about:config in the address bar to access the configuration fucntions). "

---

There are some folks here who are big fans of Firefox.

[rocksblues]

bump for later

[CDB]

Thanks a million!

[PAR35]

The attack can be disabled in Firefox and Mozilla by setting 'network.enableIDN' to false in the browser's configuration

That appears to be the default setting in Mozilla.

[Lx]

Thanks! You learn something new everyday. I love Firefox!

[Altamira]

I'm a huge fan of Firefox. Much better than Exploder.

I just made the change you suggested; thanks for the tip.

[Labyrinthos]

From the above referenced article - "...The attack can be disabled in Firefox and Mozilla by setting 'network.enableIDN' to false in the browser's configuration (enter about:config in the address bar to access the configuration fucntions). "

Explain that to the average computer 'tard who barely knows how to turn the pc on and off let alone configure a program.

[ChefKeith]

Thank You!

[RobRoy]

BUMP to do this to my home computer as well.

[jammer]

Thanks! That was easy.

[rpierce]

In the interest of actually helping fellow Firefox Freepers (hey, that sounded cool ;):

Source: IDN Spoofing Issue - MozillaZine Forums

IDN Spoofing Issue

---

A Spoofing issue has been found in browsers that support IDN (International Domain Names). This includes Mozilla, Firefox, Konqueror, Safari and Opera.

Description
A malicious site author can register a domain with characters that resemble other commonly used characters. The browser will in turn show these in the URL bar, status bar, etc. Secunia has a test available.

Status
Unfixed, workaround available.

Workaround
This can be worked around by disabling IDN support. To do this, you will have to edit compreg.dat, which is located in your Firefox profile directory (Common profile locations).

Open this file with a text editor which understands the line endings in it, such as Wordpad (or your favourite text editor on other platforms), and comment out all lines containing IDN by adding # at the start of the line. For example:

# {4byteshex-2byteshex-2byteshex-2byteshex-6byteshex},@mozilla.org/network/idn-service;1,,nsIDNService,rel:libnecko.so

More Information
Secunia Advisory
Firefox spoofing flaw goes international - The Register

[Monitor]

Found on slashdot:

Hmm, I stand corrected. Setting enableIDN and then testing worked right away for me. Until I restarted my browser. About:config still shows enableIDN set to false, but the spoof works again. However, if I go back into about:config and reset enableIDN to false, it again stops the spoof.

Maybe it is a problem in the Firefox startup code not setting enableIDN properly.