Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Security: Firefox for mobile and fake phishing website

  • 2 replies
  • 2 have this problem
  • 1 view
  • Last reply by Mark

Mark
Mark
more options

Firefox for Android mobile load the title of the page on the URL space.

If a fake website put the name of the page as the address of the website user can be confused.

Suppose the website of the bank is www.mybank6567.ext

The fake site can be fakebank.ext this website can have a SSL and the name of the page on mybank65.ext can be the url of the original bank.

If user open masked link from Firefox mobile can be easily confused.

Look try to open this URL from Firefox Mobile on Android https://github.com/webcompat/web-bugs/issues/405 you have to be logged into github.com after the page load if you see on top it seems to be on the right website of the bank, there is the lockpad simbol and the address you read is the bank address. Inexpert user can confusing.

Firefox for Android mobile load the title of the page on the URL space. If a fake website put the name of the page as the address of the website user can be confused. Suppose the website of the bank is www.mybank6567.ext The fake site can be fakebank.ext this website can have a SSL and the name of the page on mybank65.ext can be the url of the original bank. If user open masked link from Firefox mobile can be easily confused. Look try to open this URL from Firefox Mobile on Android https://github.com/webcompat/web-bugs/issues/405 you have to be logged into github.com after the page load if you see on top it seems to be on the right website of the bank, there is the lockpad simbol and the address you read is the bank address. Inexpert user can confusing.

Chosen solution

Oh, I'M sorry. This is very important problem and i hope security of Firefox will be fixxed as soon as possibile.

Bad image for Firefox in this issue. Very dangerous. So i close there my question.

Sorry but I'M not registered into bugzilla and i will not register as i don't want make my email address public so I hope other people continue to insist on bugzilla for this security problem. I stop my discussion here, i have alerted about security issue on Firefox Mobile.

Read this answer in context 👍 0

All Replies (2)

philipp
philipp
  • Moderator
more options

hello, thanks for bringing this up - there is already a long running discussion about this subject at https://bugzilla.mozilla.org/show_bug.cgi?id=605206.

Mark
Mark Question owner
more options

Chosen Solution

Oh, I'M sorry. This is very important problem and i hope security of Firefox will be fixxed as soon as possibile.

Bad image for Firefox in this issue. Very dangerous. So i close there my question.

Sorry but I'M not registered into bugzilla and i will not register as i don't want make my email address public so I hope other people continue to insist on bugzilla for this security problem. I stop my discussion here, i have alerted about security issue on Firefox Mobile.

Modified by Mark