anyone else getting Firefox NoScript Hijack warnings in Hotmail?

[MilesAhead]

Seems like almost everything I do now in Hotmail in Firefox browser generates a NoScript HiJack attempt warning. Some mumbojumbo about redirecting stuff, even though I'm just going into a mail folder. Is it just me or is everybody seeing this crap?

 

[RedDawn]

Hi MilesAhead,

No problems here while navigating Hotmail. Running Firefox 3.0.7 and NoScript 1.9.1.2.

 

[MilesAhead]

Hmmmmmmm, this just started recently too. Strange.

 

[rive0108]

perhaps you have malware?

 

[MilesAhead]

Don't know why it would only show up on hotmail. Malwarebyes scans clean. I think it has something to do with the new livemail crap. Plus I think it's unlikely both my PCs would get hit the same way at the same time. Never happened before doubt it's happening now.

 

[rive0108]

Well a good idicator is that you are the only one having this problem- suggests that it may be your network or your computers. possibly a worm.

 

[MilesAhead]

Maybe I'm the only still using FF 2.x? That's more likely

 

[rive0108]

Don't know why it would only show up on hotmail. Malwarebyes scans clean. I think it has something to do with the new livemail crap. Plus I think it's unlikely both my PCs would get hit the same way at the same time. Never happened before doubt it's happening now.

PS-I really hope you are not just using Malwarebytes as you antivirus program- becuase it is not very good. It detected only 2.66% of a malware sample containing 800.025 items, in the folowing categories:
Windows Viruses, Trojans, Backdoors, Worms, Spyware, Adware, Rootkits, Exploits, Keyloggers, Hacking Tools, Malicious Scripts and other malware
note- No Certified labs have ever tested this product (Vendor never submitted), and this is the only source I could find who did test it. Source:http://ssupdater.com/modules/Forums/index.php?showtopic=3746&pid=21712&mode=threaded&show=&st=&

Considering the fact that malwarebytes has never had an entry in comparison Antimalware/Antivirus lab testing- and has never recieved, any lab certification from AV-Comparatives/Virus Bulletin VB100, I would think about running an online scanner from a reputable certified vendor and "doublecheck" your current products performance and detection capabilities.

try this: NOD32 4.0 (online scan-no download)/ Windows Defender (full scan)

 

[MilesAhead]

That's fine but one thing I won't tolerate are programs that install what they want regardless of what I indicate during a custom install. I think 80% or more of free av programs I've tried, if you tell it not to install real-time "shield" or whatever mumbo jumbo they call that in memory thing that interferes with your PCs operation, they do anyway. I'd rather control the software than the other way around. For 32 bit systems I find Sandboxie a superior approach to all that av crap. For 64 bit, unfortunately MS put the whammy on Sandboxie, so one has to rely on backups. I'd still rather do that then live according to the edicts of what software some false-positive scanner likes.

The av program IS the virus in most cases. Just try to get the crap off that comes preinstalled on most machines to see what I mean.

 

[rive0108]

That's fine but one thing I won't tolerate are programs that install what they want regardless of what I indicate during a custom install. I think 80% or more of free av programs I've tried, if you tell it not to install real-time "shield" or whatever mumbo jumbo they call that in memory thing that interferes with your PCs operation, they do anyway. I'd rather control the software than the other way around. For 32 bit systems I find Sandboxie a superior approach to all that av crap. For 64 bit, unfortunately MS put the whammy on Sandboxie, so one has to rely on backups. I'd still rather do that then live according to the edicts of what software some false-positive scanner likes.

The av program IS the virus in most cases. Just try to get the crap off that comes preinstalled on most machines to see what I mean.

Did you enable the "Whitelist" and "Noscript"? If so, you need to check and see if Hotmail is in the list, or re-add Hotmail to the Whitelist if need be.
Source:http://74.125.95.132/search?q=cache...k+warning+in+hotmai?&cd=3&hl=en&ct=clnk&gl=us

NoScript Firefox extension provides extra protection for Firefox, Flock, Seamonkey and other mozilla-based browsers: this free, open source add-on allows JavaScript, Java and Flash and other plugins to be executed only by trusted web sites of your choice (e.g. your online bank), and provides the most powerful Anti-XSS protection available in a browser.

What websites are in the default whitelist and why?
A: If you're a security-minded user, you probably want to build your own customized whitelist suiting your needs and keep it as short as you can

Therefore, when you install NoScript for the first time, you've got a very short default whitelist of sites you can trust:

1. chrome:
   It's the only "permanent" one. It can't be removed because it is the privileged pseudo-protocol used by Firefox internal scripts: disabling it would prevent the browser itself from working.
2. about:xyz
   A bunch of about: internal pseudo URLs. You'd better keep them there because they help your browser working as expected.
3. addons.mozilla.org
   It's the add-ons Mozilla website. You probably installed NoScript and any other extension you've got from there. You trust these guys, don't you?
4. noscript.net, flashgot.net, informaction.com, maone.net
   My own websites. You just installed a software of mine on your system, running with the privileges of your web browser. If you don't trust me, you've got a much bigger problem than JavaScript on my websites
   Notice that I intentionally left out hackademix.net, because it contains user-generated content (blog comments) and it could occasionally host security-related proof of concepts for didactic purposes, which you may want to allow explicitly.
5. • gmail.com and google.com (GMail)
   • hotmail.com, live.com, microsoft.com, msn.com, passport.com, passport.net, passportimages.net (Microsoft webmail services)
   • yahoo.com, yimg.com (Yahoo! Mail)
   All these sites have been added to enable JavaScript on the most popular AJAX-based webmail services "out of the box". This way, even if an user installed NoScript without understanding what she was doing, and she's got no idea about how NoScript works, she can still cry for help by email using the shiny user interface she's accustomed to

-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Antivirus and "real time" protection
You do realize what a "real time shield" is right?
It is the enabling of the antivirus product to backgroud scan internet sites/downloads/and monitor/scan executable files/programs already running on the computer as it occurs- disabling this is tantamount to turning off and running without active antivirus/antimalware- and relying solely on "on demand" scanning to check for current infections- "real Time" scanning is designed to PREVENT system infection and/or warn the User of threats. Most free antivirus programs are designed to be basic antivirus protection targeted at those who are inexperienced Users, who are lacking in the "know how" to configure the antivirus program themselves, and/or unable to buy a more advanced, "smarter" product. Some good free products are Avira, Avast!, AVG, and some are utter Garbage (like Sophos, F-Secure, escan, Malwarebytes, VBA 32, Vipre, TrendMicro, etc.,) that offer subpar protection levels.
Anyone who runs without antivirus/antimalware (or thinks disabling "real time" scanners) is a good idea should probably install a 3-star certified Antimalware product, and let it configure itself- or just run without Antivirus/antimalware, and cross their fingers and "hope" that they will manage to avoid all malware/viruses (and perform daily data backups), run an online scanner/cleaner for for full battery of threats/undesirable programs (at least once a week or so), at sites like the NOD32 online scanner linked above. ( for more online scanners see:http://www.vistax64.com/system-security/162362-antivirus-scanners-internet-security-tools.html)

The best "3 STAR" programs on the market right right now are:
*Eset NOD32 4.0
*Avira Premium/Pro
Kaspersky
Norton 2009
GDATA
TRUSTPORT
MCAFEE (WITH ARTEMIS)
AVG

*Best Antivirus Products (Certification by AV-Comparatives/Virus Bulletin VB100)

 

[dk70]

Update Firefox and evaluate. I dont use NoScript but pretty sure updating Firefox is first thing to try. Why have you not updated already? End of the line was made public last summer https://developer.mozilla.org/devne...-stability-update-now-available-for-download/ - officially not supported since December or something.

Strange you use paranoia product no. 1 NoScript and dont see point in real-time scanners. Logic gives me a headache Well, you dont need AV - can also disable Windows Defender/UAC. You wont get infected because of that, it is a myth Depends how those using computer behave. Any general advise would be to use AV of course but you know better. Enjoy the fantastic speed boost...

May be an idea to use WOT Internet Security | WOT Web of Trust and/or OpenDNS? Wont slow you down and works without bothering hardware. Protection, especially from WOT, can be way better than from Avira, ESET and friends, including Firefox/Google/MSs phishing/attack filters. Very fast in blocking malware domains. Ive used it for 2 weeks now. Only few annoyances, check settings and adjust to needs.

If you have doubts try check this site http://hosts-file.net/ Im not asking you to click links, just saying that is a way to check how well "internet protection" works. After an hour there I bet an old floppy drive WOT will look like the best option. They have what seems to be direct link to this and other sites of same nature. They say they use about 100 sources for entries, besides the less important user discoveries. I have doubts about their value for sure but they have not taken over service yet and you have some options of deciding on warn/block levels. Avira and the others will look bad in comparison. They are lazy and cant be bothered - simple as that.