CFA/Security-Research: Difference between revisions

From MozillaWiki
< CFA
Jump to navigation Jump to search
Line 34: Line 34:
* Shiira  
* Shiira  


== Add-ons to investigate (TO DO) ==
== Add-ons to investigate ==
=== Firefox ===  
=== Firefox ===  
* AdBlock [https://addons.mozilla.org/en-US/firefox/addon/10 link]
* [https://addons.mozilla.org/en-US/firefox/addon/10 AdBlock]
* AdBlock Plus [https://addons.mozilla.org/en-US/firefox/addon/1865 link]
* [https://addons.mozilla.org/en-US/firefox/addon/1865 AdBlock Plus]
* NoScript [https://addons.mozilla.org/en-US/firefox/addon/722 link]
* [https://addons.mozilla.org/en-US/firefox/addon/722 NoScript]
* CookieCuller [https://addons.mozilla.org/en-US/firefox/addon/82 link]
* [https://addons.mozilla.org/en-US/firefox/addon/82 CookieCuller]
* CookiePie [http://www.nektra.com/oss/firefox/extensions/cookiepie link]
* [http://www.nektra.com/oss/firefox/extensions/cookiepie CookiePie]
* VeriSign EV Green Bar Extension [https://addons.mozilla.org/en-US/firefox/addon/4828 link]
* [https://addons.mozilla.org/en-US/firefox/addon/4828 VeriSign EV Green Bar Extension]
* FirePhish Anti-Phishing Extension [https://addons.mozilla.org/en-US/firefox/addon/2366 link]
* [https://addons.mozilla.org/en-US/firefox/addon/2366 FirePhish Anti-Phishing Extension]
* PhishTank SiteChecker [https://addons.mozilla.org/en-US/firefox/addon/3840 link]
* [https://addons.mozilla.org/en-US/firefox/addon/3840 PhishTank SiteChecker]
* Finjan SecureBrowsing [https://addons.mozilla.org/en-US/firefox/addon/4892 link]
* [https://addons.mozilla.org/en-US/firefox/addon/4892 Finjan SecureBrowsing]
* iTrustPage [https://addons.mozilla.org/en-US/firefox/addon/3661 link]
* [https://addons.mozilla.org/en-US/firefox/addon/3661 iTrustPage]
* YesScript - JavaScript blacklist [https://addons.mozilla.org/en-US/firefox/addon/4922 link]
* [https://addons.mozilla.org/en-US/firefox/addon/4922 YesScript]- JavaScript blacklist  
* PwdHash - automatically generates per-site passwords, and the same password for each subdomain; prevents JavaScript from reading your password as it is typed [https://addons.mozilla.org/en-US/firefox/addon/1033 link]
* [https://addons.mozilla.org/en-US/firefox/addon/1033 PwdHash]- automatically generates per-site passwords, and the same password for each subdomain; prevents JavaScript from reading your password as it is typed  
      
      
=== Internet Explorer ===
=== Internet Explorer ===
Line 59: Line 59:
* Pop-up Blockers
* Pop-up Blockers
* Privacy
* Privacy
=== Safari ===
* Sogudi - shortcut keyword searches
* Saft [http://haoli.dnsalias.com/Saft/ link]
* Insquisitor [http://www.43folders.com/2004/09/06/sogudi-for-searching-via-safaris-location-bar/ link] - rich search results, autocomplete, search suggestions


== Meeting Takeaways ==
== Meeting Takeaways ==

Revision as of 00:47, 27 July 2007

« Comparative Feature Analyses
« Security Notes

General Browser Capabilities

Purpose

Examine a bunch of browsers, existing Firefox Add-ons, and web services to generate a report that describes:

  • Which capabilities each has
  • A summary of where each is different/unique
  • Some conclusions about which aspects seem most innovative and interesting that we might want to consider for Firefox

Browsers to investigate

  • Firefox 2
  • Camino
  • Flock
  • iCab
  • IE 7
  • Maxthon
  • Netscape
  • OmniWeb
  • Opera
  • Safari
  • SeaMonkey
  • Shiira

Add-ons to investigate

Firefox

Internet Explorer

  • Online Protection
    • SpyWall Anti-Spyware - IE sandbox blocks attacks encountered while browsing the web; detects and removes spyware (not free)
    • 1-Click SignupShield Suite - enhanced password manager; protects against phishing fraud and automatically fills out forms; generates unlimited number of unique passwords and disposable Email addresses for signing up to Web sites. It fills sign-up forms and encrypts passwords and Email addresses for later use during sign-in. When you need to sign-in to a Web site, SignupShield automatically retrieves the correct e-mail address and password and fills in the sign-in form for you (not free)
    • McAfee SiteAdvisor for IE - protects from spyware, adware, spam, viruses, browser exploits, and online scams. SiteAdvisor has safety ratings.
    • Password Scrambler - automatically present unique passwords to the sites you visit, generated from a unique master password you choose. It achieves this by uniquely scrambling your password for every site you visit, so every site gets a unique, secure and hard-to-guess password, while you only remember one.
  • Parental Controls
  • Pop-up Blockers
  • Privacy

Meeting Takeaways