Tab Napping

[Brett]

Watch out for this new online phishing scam which uses 'tab napping' to attack your computer - and your finances...

As internet users we're all vulnerable to online scams. Unluckily for us, as soon as we become pretty good as spotting one type of attack, another more sophisticated version comes along in its place. In fact, technology company Mozilla - which developed the Firefox web browser - has recently warned against a possible threat from a new scam known as 'tap napping' which takes phishing one step further.

http://uk.biz.yahoo.com/07062010/389/tab-napping-new-online-scam.html

What will they think of next. Using the internet is gonna have people paranoid about doing anything secure soon.

[Brett]

For Mozilla users:

http://noscript.net/

The NoScript Firefox extension provides extra protection for Firefox, Flock, Seamonkey and other mozilla-based browsers: this free, open source add-on allows JavaScript, Java and Flash and other plugins to be executed only by trusted web sites of your choice (e.g. your online bank), and provides the most powerful Anti-XSS protection available in a browser.

# Faster and more compatible anti-XSS protection.

# Better error reporting during the execution of location bar scriptlets.

# Improved protection against Aviv Raff's scriptless tabnagging variant, by blocking refreshes triggered on unfocused untrusted tabs. See the changelog for more details.

# Improved compatibility with some GreaseMonkey scripts and some web applications.

# New Surrogate Script type: when a "sources" preference for a surrogate starts with "!", it is treated as a page-level surrogate which runs on pages where scripts are disabled as soon as the DOM is completed (useful as a GreaseMonkey-like enhancer of non-whitelisted pages).

[Monsta®]

pure paranoia

[Brett]

Doesn't matter anyway, the girlfriend totally forgets about the use of tabs and ends up with hundreds of windows open all on google anyway..