Your browser is obsolete!

The page may not load correctly.

Unexpected guests

Незваные гости

Other issues in this category (70)
  • add to favourites
    Add to Bookmarks

If your browser freezes

Read: 25132 Comments: 8 Rating: 14

Thursday, September 26, 2019

If you’ve opened another browser tab and now all of your applications are lagging, you could logically assume that mining code has started running in your system. You’ll close the tab, and things will get back to normal. But what will you do if performance issues arise after you close the tab?

A security research team from FORTH (Greece) and Stony Brook University (USA) published a security report detailing the MarioNet attack.

The malicious code is executed even if the user has long ago navigated away from or closed the tab with the bogus site.

MarioNet takes advantage of the Service Worker API, which is supported by most modern browsers.

Source

Most interestingly, the Service Worker API was designed with user convenience in mind. Among other things, the API enables services to run even if the Internet connection has been lost.

Although opting for a browser that doesn't support the API may seem like a good way to avoid attack, that is not quite so. For example, the earliest Mozilla Firefox version supporting the API was version 44—a very old one that many modern sites don't support. That's why it’s better to disable the API (unless, of course, you need it).

To do so in Firefox, open a new tab and in the address bar, enter about:config; then in the search field, enter serviceWorkers:

#drweb

Check the value for dom.serviceWorkers.enabled. If it is set to true, change it to false.

Similarly, check the values for dom.serviceWorkers.openWindow.enabled and dom.workers.enabled, and set them to false as well.

Once you’ve changed the settings, restart the browser.

#browser #security

The Anti-virus Times recommends

Changing these parameters may affect the operation of certain services – make sure that all the browser features you need still work properly after the settings have been adjusted.

[Twitter]

Tell us what you think

To leave a comment, you need to log in under your Doctor Web site account. If you don't have an account yet, you can create one.

Comments

Comments to other issues | My comments