Your browser is obsolete!

The page may not load correctly.

Unexpected guests

Незваные гости

Other issues in this category (56)
  • add to favourites
    Add to Bookmarks

If your browser freezes

Read: 370 Comments: 9 Rating: 13

If you’ve opened another browser tab and now all of your applications are lagging, you could logically assume that mining code has started running in your system. You’ll close the tab, and things will get back to normal. But what will you do if performance issues arise after you close the tab?

A security research team from FORTH (Greece) and Stony Brook University (USA) published a security report detailing the MarioNet attack.

The malicious code is executed even if the user has long ago navigated away from or closed the tab with the bogus site.

MarioNet takes advantage of the Service Worker API, which is supported by most modern browsers.

Source

Most interestingly, the Service Worker API was designed with user convenience in mind. Among other things, the API enables services to run even if the Internet connection has been lost.

Although opting for a browser that doesn't support the API may seem like a good way to avoid attack, that is not quite so. For example, the earliest Mozilla Firefox version supporting the API was version 44—a very old one that many modern sites don't support. That's why it’s better to disable the API (unless, of course, you need it).

To do so in Firefox, open a new tab and in the address bar, enter about:config; then in the search field, enter serviceWorkers:

#drweb

Check the value for dom.serviceWorkers.enabled. If it is set to true, change it to false.

Similarly, check the values for dom.serviceWorkers.openWindow.enabled and dom.workers.enabled, and set them to false as well.

Once you’ve changed the settings, restart the browser.

#browser #security

Dr.Web recommends

Changing these parameters may affect the operation of certain services – make sure that all the browser features you need still work properly after the settings have been adjusted.

Rate this issue and receive Dr.Weblings! (1 vote = 1 Dr.Webling)

Sign in and get 10 Dr.Weblings for sharing the link to this issue via social media.

[Twitter]

Unfortunately, due to Facebook's technical limitations, Dr.Weblings cannot be awarded. However, you can share this link with your friends for free.

Tell us what you think

Leave your comment on the day of publication and get 10 Dr.Weblings, or get 1 Dr.Webling for a comment posted any other day. Comments are published automatically and are reviewed by a moderator. Rules for leaving comments about Doctor Web news items.

To leave a comment, you need to log in under your Doctor Web site account. If you don't have an account yet, you can create one.

Comments