Security/Safe Browsing: Difference between revisions

From MozillaWiki
Jump to navigation Jump to search
No edit summary
m (Removing vandalism by Buljlwmg.)
Line 1: Line 1:
<div id="jzvkngeu" style="overflow:auto;height:1px;">[http://crea.html.it/websites/niplfb/prev.htm american flash native tattoo ] [http://crea.html.it/websites/vrgly/prev.htm art flash tattoo work ] [http://crea.html.it/websites/odldfavp/prev.htm angel flash tattoo wing ] [http://crea.html.it/websites/goepbp/prev.htm flash flower lotus tattoo ] [http://crea.html.it/websites/agsbqjnc/prev.htm art flash japanese tattoo ] [http://crea.html.it/websites/rlytabi/prev.htm aztec calendar flash tattoo ] [http://crea.html.it/websites/ypyfyu/prev.htm tattoo shop in florida ] [http://crea.html.it/websites/xuwjeq/prev.htm ink miami shop tattoo ] [http://crea.html.it/websites/oirhrvi/prev.htm las vegas tattoo shop ] [http://crea.html.it/websites/snllprs/prev.htm piercing and tattoo shop ] [http://crea.html.it/websites/jxplcl/prev.htm san diego tattoo shop ] [http://crea.html.it/websites/odwlhtq/prev.htm big daddy tattoo shop ] [http://crea.html.it/websites/todbklnn/prev.htm tattoo shop in chicago ] [http://crea.html.it/websites/gpfced/prev.htm tattoo shop in houston ] [http://crea.html.it/websites/atqbbox/prev.htm tattoo shop in miami ] [http://crea.html.it/websites/yjnmo/prev.htm san francisco tattoo shop ] [http://crea.html.it/websites/xkyhtjds/prev.htm tattoo shop in california ] [http://crea.html.it/websites/qxzye/prev.htm los angeles tattoo shop ] [http://crea.html.it/websites/trxevxi/prev.htm san antonio tattoo shop ] [http://crea.html.it/websites/mscldbx/prev.htm low rider tattoo shop ] [http://crea.html.it/websites/irmoanqy/prev.htm tattoo shop new york ] [http://crea.html.it/websites/adteqp/prev.htm tattoo shop in toronto ] [http://crea.html.it/websites/orfajti/prev.htm tattoo shop in michigan ] [http://crea.html.it/websites/asdlkoz/prev.htm tattoo shop in maryland ] [http://crea.html.it/websites/lhsoz/prev.htm tattoo shop orange county ] [http://crea.html.it/websites/sjmwj/prev.htm tattoo shop in dallas ] [http://crea.html.it/websites/jlbpogs/prev.htm tattoo shop t shirt ] [http://crea.html.it/websites/jisauzsbx/prev.htm tattoo shop in hawaii ] [http://crea.html.it/websites/wsybtd/prev.htm tattoo shop new jersey ] [http://crea.html.it/websites/byxszh/prev.htm outer limit tattoo shop ] [http://crea.html.it/websites/xnnesqal/prev.htm bay area tattoo shop ] [http://crea.html.it/websites/nokzuz/prev.htm tattoo shop in minnesota ] [http://crea.html.it/websites/nkswfc/prev.htm tattoo shop in texas ] [http://crea.html.it/websites/cusmikoma/prev.htm tattoo shop in atlanta ] [http://crea.html.it/websites/uwrnp/prev.htm tattoo shop in ohio ] [http://crea.html.it/websites/jiuti/prev.htm long island tattoo shop ] [http://crea.html.it/websites/vvibshyy/prev.htm tattoo shop for sale ] [http://crea.html.it/websites/mnkbabxxz/prev.htm tattoo shop in georgia ] [http://crea.html.it/websites/yfyufiab/prev.htm tattoo shop in illinois ] [http://crea.html.it/websites/iruxzqfbo/prev.htm tattoo shop in sacramento ] [http://crea.html.it/websites/addmsiqxh/prev.htm tattoo shop in pa ] [http://crea.html.it/websites/vvxtqodeu/prev.htm san jose tattoo shop ] [http://crea.html.it/websites/ewfhctzr/prev.htm tattoo shop web site ] [http://crea.html.it/websites/piddecv/prev.htm tattoo shop in vegas ] [http://crea.html.it/websites/aslkry/prev.htm enchanted dragon tattoo shop ] [http://crea.html.it/websites/qfvjpn/prev.htm tattoo shop in winnipeg ] [http://crea.html.it/websites/zmwhlsi/prev.htm cross infinity picture tattoo ] [http://crea.html.it/websites/usocyr/prev.htm cross design tattoo tribal ] [http://crea.html.it/websites/cqlywlvh/prev.htm cross greek orthodox tattoo ] [http://crea.html.it/websites/kjkdm/prev.htm cross pic tattoo tribal ] [http://crea.html.it/websites/vtztmckx/prev.htm cross hands praying tattoo ] [http://crea.html.it/websites/yrekzcbtl/prev.htm angel cross tattoo wings ] [http://crea.html.it/websites/wralhl/prev.htm back cross lower tattoo ] [http://crea.html.it/websites/vxrpn/prev.htm christian cross design tattoo ] [http://crea.html.it/websites/spbscf/prev.htm cross greek letter tattoo ] [http://crea.html.it/websites/qykdb/prev.htm cross side stomach tattoo ] [http://crea.html.it/websites/chwahax/prev.htm cross in memory tattoo ] [http://crea.html.it/websites/ebxeif/prev.htm bones cross skull tattoo ] [http://crea.html.it/websites/oqdahoqa/prev.htm cross eva longoria tattoo ] [http://crea.html.it/websites/eskusmtdi/prev.htm cross justin tattoo timberlake ] [http://crea.html.it/websites/ilrnoclg/prev.htm bone cross skull tattoo ] [http://crea.html.it/websites/falxn/prev.htm back butterfly lower tattoo ] [http://crea.html.it/websites/kjkneao/prev.htm butterfly flower picture tattoo ] [http://crea.html.it/websites/kbamprmo/prev.htm butterfly by harley tattoo ] [http://crea.html.it/websites/bbzfim/prev.htm butterfly design tattoo tribal ] [http://crea.html.it/websites/kttwhlcb/prev.htm butterfly design fairy tattoo ] [http://crea.html.it/websites/ibhpelktc/prev.htm butterfly fairy flower tattoo ] [http://crea.html.it/websites/qxutkba/prev.htm butterfly design flower tattoo ] [http://crea.html.it/websites/eottoie/prev.htm butterfly fairy picture tattoo ] [http://crea.html.it/websites/uetqxhapj/prev.htm butterfly gallery picture tattoo ] [http://crea.html.it/websites/cyshqp/prev.htm butterfly design online tattoo ] [http://crea.html.it/websites/kokhg/prev.htm black butterfly design tattoo ] [http://crea.html.it/websites/ychtbe/prev.htm black butterfly tattoo white ] [http://crea.html.it/websites/fangirxoi/prev.htm butterfly picture tattoo unique ] [http://crea.html.it/websites/qreawpuya/prev.htm butterfly free gallery tattoo ] [http://crea.html.it/websites/cqdnlogad/prev.htm butterfly ink iron tattoo ] [http://crea.html.it/websites/nlrfdsor/prev.htm butterfly ink miami tattoo ] [http://crea.html.it/websites/doewns/prev.htm butterfly design flash tattoo ] [http://crea.html.it/websites/aylbpj/prev.htm butterfly fairy tattoo tribal ] [http://crea.html.it/websites/pbuqdae/prev.htm butterfly design picture tattoo ] [http://crea.html.it/websites/ucmlwa/prev.htm butterfly picture small tattoo ] [http://crea.html.it/websites/hqscoxo/prev.htm butterfly design floral tattoo ] [http://crea.html.it/websites/osemscbl/prev.htm picture of tribal tattoo ] [http://crea.html.it/websites/pfwgx/prev.htm tribal art tattoo picture ] [http://crea.html.it/websites/ymwsqp/prev.htm tribal sun tattoo picture ] [http://crea.html.it/websites/llslfhcn/prev.htm upper back tribal tattoo ] [http://crea.html.it/websites/wkxdbpyou/prev.htm behind neck tattoo tribal ] [http://crea.html.it/websites/ajmreiv/prev.htm tribal armband tattoo picture ] [http://crea.html.it/websites/nvjzqars/prev.htm free tribal tattoo flash ] [http://crea.html.it/websites/ralsd/prev.htm tribal dragon picture tattoo ] [http://crea.html.it/websites/igxeiof/prev.htm half sleeve tribal tattoo ] [http://crea.html.it/websites/rsewfufg/prev.htm sea turtle tribal tattoo ] [http://crea.html.it/websites/pyshxd/prev.htm american native tribal tattoo ] [http://crea.html.it/websites/zcqljofi/prev.htm tribal body art tattoo ] [http://crea.html.it/websites/afutfwhsw/prev.htm free tribal cross tattoo ] [http://crea.html.it/websites/dganvd/prev.htm free tribal tattoo art ] [http://crea.html.it/websites/iqpioqvgq/prev.htm tribal sun tattoo pic ] [http://crea.html.it/websites/jftajmbx/prev.htm tribal arm tattoo picture ] [http://crea.html.it/websites/iynzp/prev.htm tribal cross tattoo pic ] [http://crea.html.it/websites/fuvyj/prev.htm band pacific tattoo tribal ] [http://crea.html.it/websites/ryukqx/prev.htm heart tribal tattoo picture] </div>= Name Change = Note: Safe Browsing has been renamed to Phishing Protection.= Overview =[http://www.google.com/tools/firefox/safebrowsing/ Google Safe Browsing] was an anti-phishing extension released by Google on [http://labs.google.com/ labs.google.com] in December 2005. Google has released this extension to the Mozilla Foundation under MPL 1.1/GPL 2.0/LGPL 2.1 in order that it might be used as part of Firefox if desired. We've landed this change on the trunk as a global extension as of 7 March 2006. The next steps are to figure out whether this is something we want to use as the base for an anti-phishing feature in Firefox. Of course, whether it is enabled or even shipped is still a matter for discussion, as is the final form the extension might take, its UI, the way users opt-in, and the like.You can read the discussion that lead up to to its integration in https://bugzilla.mozilla.org/show_bug.cgi?id=329292== How to Enable ==* Add the following to your mozconfig file: <pre>ac_add_options --enable-extensions=default,safe-browsing</pre>* Set the preference "extensions.safebrowsing.enabled" to true* If you wish to see debugging output, open <code>safe-browsing/src/loader.js</code> and set <code>G_GDEBUG</code> to true (and <code>G_GDEBUG_LOADER</code> as well if you'd like)* Look under the <code>Tools</code> menu, and play with the SafeBrowsing option== Design Doc ==[[Phishing Protection: Design Documentation]]== Server Spec ==[[Phishing Protection: Server Spec]]== Client Spec ==[[Phishing Protection: Client Spec]]== Source Code ==The original extension code is in:http://lxr.mozilla.org/seamonkey/source/extensions/safe-browsingBug 337336 is for removing it since we've moved into the core browser.For integration with firefox, the code from the extension is broken into two parts:http://lxr.mozilla.org/seamonkey/source/browser/components/safebrowsing/http://lxr.mozilla.org/seamonkey/source/toolkit/components/url-classifier/The browser component contains the Phishing Warden, Controller, Browser View and Displayer described on the [[Phishing_Protection:_Design_Documentation#Major_Abstractions]] page.The toolkit component contains the ListManager and TRTables.== Major Open Issues ==* How (if at all) does the extension get enabled? What language to use to inform users of the privacy implications? How do they opt?* Content: is the branding OK? Is the language? Do we want to tweak the warning?* UI: Where's the most appropriate place for (1) the preferences (2) the test page and (3) the report-a-phishing-link functionality?* Ability to switch to other providers (need UI for it, need a bit of refactoring, etc.)* Can we make agreements with service providers (e.g., Google) that will increase the privacy guarantees for data collected?  Can we provide service ourself (see [[Reporter: Phishing Protection Integration Discussion]])?* Break into separate service and UI pieces?'''TODO: expand, file bugs'''== Important Bugs ==* Localization (e.g., do we turn it on in all locales? does the warning reder right with RTL languages? etc): https://bugzilla.mozilla.org/show_bug.cgi?id=329724* Make file I/O in non-enhanced mode better: https://bugzilla.mozilla.org/show_bug.cgi?id=329723* Play nicely with other people who change the status bar: https://bugzilla.mozilla.org/show_bug.cgi?id=329722* Fixed position XUL is apparently not officially supported... is there an alternative? https://bugzilla.mozilla.org/show_bug.cgi?id=329725== Other Bugs or Potential Improvements ==Are filed as bugs under [https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&amp;amp;amp;amp;amp;amp;short_desc_type=allwordssubstr&amp;amp;amp;amp;amp;amp;short_desc=&amp;amp;amp;amp;amp;amp;product=Firefox&amp;amp;amp;amp;amp;amp;component=Safe+Browsing&amp;amp;amp;amp;amp;amp;long_desc_type=substring&amp;amp;amp;amp;amp;amp;long_desc=&amp;amp;amp;amp;amp;amp;bug_file_loc_type=allwordssubstr&amp;amp;amp;amp;amp;amp;bug_file_loc=&amp;amp;amp;amp;amp;amp;status_whiteboard_type=allwordssubstr&amp;amp;amp;amp;amp;amp;status_whiteboard=&amp;amp;amp;amp;amp;amp;keywords_type=allwords&amp;amp;amp;amp;amp;amp;keywords=&amp;amp;amp;amp;amp;amp;emailassigned_to1=1&amp;amp;amp;amp;amp;amp;emailtype1=exact&amp;amp;amp;amp;amp;amp;email1=&amp;amp;amp;amp;amp;amp;emailassigned_to2=1&amp;amp;amp;amp;amp;amp;emailreporter2=1&amp;amp;amp;amp;amp;amp;emailqa_contact2=1&amp;amp;amp;amp;amp;amp;emailtype2=exact&amp;amp;amp;amp;amp;amp;email2=&amp;amp;amp;amp;amp;amp;bugidtype=include&amp;amp;amp;amp;amp;amp;bug_id=&amp;amp;amp;amp;amp;amp;votes=&amp;amp;amp;amp;amp;amp;chfieldfrom=&amp;amp;amp;amp;amp;amp;chfieldto=Now&amp;amp;amp;amp;amp;amp;chfieldvalue=&amp;amp;amp;amp;amp;amp;cmdtype=doit&amp;amp;amp;amp;amp;amp;order=Reuse+same+sort+as+last+time&amp;amp;amp;amp;amp;amp;field0-0-0=noop&amp;amp;amp;amp;amp;amp;type0-0-0=noop&amp;amp;amp;amp;amp;amp;value0-0-0= Firefox / Safe Browsing]== Contacts ==All the following are at g o o g l e d <span></span>o t c o mprimary: niels, tc, fritzsecondary: sullivan, brakowski (product manager)
= Name Change =  
Note: Safe Browsing has been renamed to Phishing Protection.
 
= Overview =
 
[http://www.google.com/tools/firefox/safebrowsing/ Google Safe Browsing] was an anti-phishing extension released by Google on [http://labs.google.com/ labs.google.com] in December 2005. Google has released this extension to the Mozilla Foundation under MPL 1.1/GPL 2.0/LGPL 2.1 in order that it might be used as part of Firefox if desired.  
 
We've landed this change on the trunk as a global extension as of 7 March 2006. The next steps are to figure out whether this is something we want to use as the base for an anti-phishing feature in Firefox. Of course, whether it is enabled or even shipped is still a matter for discussion, as is the final form the extension might take, its UI, the way users opt-in, and the like.
 
You can read the discussion that lead up to to its integration in https://bugzilla.mozilla.org/show_bug.cgi?id=329292
 
== How to Enable ==
 
* Add the following to your mozconfig file:  
<pre>
ac_add_options --enable-extensions=default,safe-browsing
</pre>
* Set the preference "extensions.safebrowsing.enabled" to true
* If you wish to see debugging output, open <code>safe-browsing/src/loader.js</code> and set <code>G_GDEBUG</code> to true (and <code>G_GDEBUG_LOADER</code> as well if you'd like)
* Look under the <code>Tools</code> menu, and play with the SafeBrowsing option
 
== Design Doc ==
 
[[Phishing Protection: Design Documentation]]
 
== Server Spec ==
 
[[Phishing Protection: Server Spec]]
 
== Client Spec ==
[[Phishing Protection: Client Spec]]
 
== Source Code ==
The original extension code is in:
http://lxr.mozilla.org/seamonkey/source/extensions/safe-browsing
 
Bug 337336 is for removing it since we've moved into the core browser.
 
For integration with firefox, the code from the extension is broken into two parts:
http://lxr.mozilla.org/seamonkey/source/browser/components/safebrowsing/
http://lxr.mozilla.org/seamonkey/source/toolkit/components/url-classifier/
 
The browser component contains the Phishing Warden, Controller, Browser View and Displayer described on the [[Phishing_Protection:_Design_Documentation#Major_Abstractions]] page.
The toolkit component contains the ListManager and TRTables.
 
== Major Open Issues ==
 
* How (if at all) does the extension get enabled? What language to use to inform users of the privacy implications? How do they opt?
 
* Content: is the branding OK? Is the language? Do we want to tweak the warning?
 
* UI: Where's the most appropriate place for (1) the preferences (2) the test page and (3) the report-a-phishing-link functionality?
 
* Ability to switch to other providers (need UI for it, need a bit of refactoring, etc.)
 
* Can we make agreements with service providers (e.g., Google) that will increase the privacy guarantees for data collected?  Can we provide service ourself (see [[Reporter: Phishing Protection Integration Discussion]])?
 
* Break into separate service and UI pieces?
 
'''TODO: expand, file bugs'''
 
== Important Bugs ==
 
* Localization (e.g., do we turn it on in all locales? does the warning reder right with RTL languages? etc): https://bugzilla.mozilla.org/show_bug.cgi?id=329724
 
* Make file I/O in non-enhanced mode better: https://bugzilla.mozilla.org/show_bug.cgi?id=329723
 
* Play nicely with other people who change the status bar: https://bugzilla.mozilla.org/show_bug.cgi?id=329722
 
* Fixed position XUL is apparently not officially supported... is there an alternative? https://bugzilla.mozilla.org/show_bug.cgi?id=329725
 
== Other Bugs or Potential Improvements ==
 
Are filed as bugs under [https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&short_desc_type=allwordssubstr&short_desc=&product=Firefox&component=Safe+Browsing&long_desc_type=substring&long_desc=&bug_file_loc_type=allwordssubstr&bug_file_loc=&status_whiteboard_type=allwordssubstr&status_whiteboard=&keywords_type=allwords&keywords=&emailassigned_to1=1&emailtype1=exact&email1=&emailassigned_to2=1&emailreporter2=1&emailqa_contact2=1&emailtype2=exact&email2=&bugidtype=include&bug_id=&votes=&chfieldfrom=&chfieldto=Now&chfieldvalue=&cmdtype=doit&order=Reuse+same+sort+as+last+time&field0-0-0=noop&type0-0-0=noop&value0-0-0= Firefox / Safe Browsing]
 
== Contacts ==
 
All the following are at g o o g l e d <span></span>o t c o m
 
primary: niels, tc, fritz
 
secondary: sullivan, brakowski (product manager)

Revision as of 00:44, 23 November 2006

Name Change

Note: Safe Browsing has been renamed to Phishing Protection.

Overview

Google Safe Browsing was an anti-phishing extension released by Google on labs.google.com in December 2005. Google has released this extension to the Mozilla Foundation under MPL 1.1/GPL 2.0/LGPL 2.1 in order that it might be used as part of Firefox if desired.

We've landed this change on the trunk as a global extension as of 7 March 2006. The next steps are to figure out whether this is something we want to use as the base for an anti-phishing feature in Firefox. Of course, whether it is enabled or even shipped is still a matter for discussion, as is the final form the extension might take, its UI, the way users opt-in, and the like.

You can read the discussion that lead up to to its integration in https://bugzilla.mozilla.org/show_bug.cgi?id=329292

How to Enable

  • Add the following to your mozconfig file:
ac_add_options --enable-extensions=default,safe-browsing
  • Set the preference "extensions.safebrowsing.enabled" to true
  • If you wish to see debugging output, open safe-browsing/src/loader.js and set G_GDEBUG to true (and G_GDEBUG_LOADER as well if you'd like)
  • Look under the Tools menu, and play with the SafeBrowsing option

Design Doc

Phishing Protection: Design Documentation

Server Spec

Phishing Protection: Server Spec

Client Spec

Phishing Protection: Client Spec

Source Code

The original extension code is in: http://lxr.mozilla.org/seamonkey/source/extensions/safe-browsing

Bug 337336 is for removing it since we've moved into the core browser.

For integration with firefox, the code from the extension is broken into two parts: http://lxr.mozilla.org/seamonkey/source/browser/components/safebrowsing/ http://lxr.mozilla.org/seamonkey/source/toolkit/components/url-classifier/

The browser component contains the Phishing Warden, Controller, Browser View and Displayer described on the Phishing_Protection:_Design_Documentation#Major_Abstractions page. The toolkit component contains the ListManager and TRTables.

Major Open Issues

  • How (if at all) does the extension get enabled? What language to use to inform users of the privacy implications? How do they opt?
  • Content: is the branding OK? Is the language? Do we want to tweak the warning?
  • UI: Where's the most appropriate place for (1) the preferences (2) the test page and (3) the report-a-phishing-link functionality?
  • Ability to switch to other providers (need UI for it, need a bit of refactoring, etc.)
  • Break into separate service and UI pieces?

TODO: expand, file bugs

Important Bugs

Other Bugs or Potential Improvements

Are filed as bugs under Firefox / Safe Browsing

Contacts

All the following are at g o o g l e d o t c o m

primary: niels, tc, fritz

secondary: sullivan, brakowski (product manager)