Staying Logged In...using Mozilla Firefox

[Patronus]

I can't stay logged in for more than a few minutes using Mozilla Firefox as my browser. And I won't go back to Internet Explorer -- you can't make me go back to it!

I've tired looking in Tools / Options / Privacy, but nothing stands out as the obvious solution.

Thanks :wavey:

[IKZ]

Make sure you check the "Remember Me" box when you log in next time.

Also goto =Tools, Options, Security= and check "remember passwords for sites.

Goto =Tools, Options, Privacy= Check "remember visited web sites for (I set mine to 9 days). Then accept cookies from sites "until the expire"

Lastly, make sure the box "Always clear my private data when I close firefox" is NOT checked!

Let me know how that works.

-IKZ

[Patronus]

Many thanks. :thumbsup:

[kc8ykd]

Make sure you check the "Remember Me" box when you log in next time.

Also goto =Tools, Options, Security= and check "remember passwords for sites.

Goto =Tools, Options, Privacy= Check "remember visited web sites for (I set mine to 9 days). Then accept cookies from sites "until the expire"

Lastly, make sure the box "Always clear my private data when I close firefox" is NOT checked!

Let me know how that works.

-IKZ


This is all very sound advise, except for the part about having Firefox remember your passwords.

Exploits exist via visiting web pages where someone can read your database of saved passwords. Imagine having all of your saved passwords in someone else's hands !!!

This is not internet rumor, I have seen this happen first hand.

I would HIGHLY recommend against using this feature of Firefox.


The 'remember me' check box is a much better alternative, as is the non-automatic removal of private data/cookies expiration settings.

[IKZ]

I was simply answering the question with how to stay logged in.... To interject with web security hints is somewhat ridiculous. There are ALWAYS ways for someone to gain access to your passwords, whether automatically (through a trojan), or manually through a particular site or email account (exploiting weaknesses in a site, or through "security questions" when you forget your PW).

The OP said he couldn't figure it out--I told him the ways. I'm sure your advice is appreciated, but it seems a little too dramatic imo. :wavey:

[kc8ykd]

I was simply answering the question with how to stay logged in.... To interject with web security hints is somewhat ridiculous. There are ALWAYS ways for someone to gain access to your passwords, whether automatically (through a trojan), or manually through a particular site or email account (exploiting weaknesses in a site, or through "security questions" when you forget your PW).

The OP said he couldn't figure it out--I told him the ways. I'm sure your advice is appreciated, but it seems a little too dramatic imo. :wavey:

I woudln't consider it inappropriate at all.

The last thing I want to see is someone snatch his passwords to glocktalk or other sensitive sites (think online banking, cell phone provider, etc..) where someone could use them to steal money from him. If you dig around a little bit it is fairly easy to find web forum where this information is posted just like the informative articles that Herr posts in GNG. Username and password combinations are traded from this exploit like candy. Dramatic? I think not.

I have seen this particular exploit in the wild and it poses a very valid threat to anyone who uses that particular feature.

Your advise was top notch. I just don't want to see anyone get burned by using that particular feature.

[ssHova]

i think its sound advice , and youre both right , but youre both over reacting.

yes , that is a way to stay logged in , but its also kind of a security risk.

its all dependent of how security minded you are. i could care less , as i refuse to save any passwords , at all , ever.

i forget them by doing that...

but seriously , i dont ever save any passwords. i have all cookies clear when i am done , and i even have a shortcut on desktop to delete temp folders , and also remove access times.

what can i say , i think personally that the guv'ment can hack your pc from the power lines...but thats a whole 'nother topic
:whistling::poke::woohoo:

:this is where the tin foil hat smiley goes...we need one though, so i substituted...:http://i178.photobucket.com/albums/w258/ytownzinks/afdbsmiley.gifhttp://i178.photobucket.com/albums/w258/ytownzinks/tinfoil_hat.gif-hov

[kc8ykd]

i think its sound advice , and youre both right , but youre both over reacting.

yes , that is a way to stay logged in , but its also kind of a security risk.

its all dependent of how security minded you are. i could care less , as i refuse to save any passwords , at all , ever.

i forget them by doing that...

but seriously , i dont ever save any passwords. i have all cookies clear when i am done , and i even have a shortcut on desktop to delete temp folders , and also remove access times.

what can i say , i think personally that the guv'ment can hack your pc from the power lines...but thats a whole 'nother topic
:whistling::poke::woohoo:

:this is where the tin foil hat smiley goes...we need one though, so i substituted...:http://i178.photobucket.com/albums/w258/ytownzinks/afdbsmiley.gifhttp://i178.photobucket.com/albums/w258/ytownzinks/tinfoil_hat.gif-hov


Heh, it's only overreacting till it happens to you and you see all your info pop up on a foreign website :(

The threat I outlined is a current and valid threat. Anyone who uses a computer should be security conscious and having worked as a Network Engineer for a large internet service provider for 8 years I've seen the risks up close.

If you have trouble remembering your passwords, I'd suggest using an offline password manager. There are quite a few free ones to choose from, I use one myself to manage a long list of varied usernames and passwords.

I've seen lots of hacks to Pc's over the years but very simple things can be done to protect against them, use a router that does NAT in combination with a software or hardware firewall. Double and triple check your a/v and spyware updates and your Os updates. (assuming windows is being used). clearing of temp files, access times and cookies isn't all that necessary unless you are in a shared computing environment.

The absolute last thing I want to see is Patronus posting in GNG a month from now saying that some hacker stole all the cash in his bank account that he accesses via online banking. Or his paypal accout or amazon account. The point is, this particular attack can cost the user real money depending on the sites stored in the database.

[IKZ]

kc8--You seem quite knowledgeable on the topic...I think you should consider posting a 10 ways article of sorts on this topic....I think it certainly deserves the attention as you pointed out above, but to go in depth would require it's own thread. Just something to consider--it may make for good sticky material and can be updated as time goes by. :wavey:

[kc8ykd]

kc8--You seem quite knowledgeable on the topic...I think you should consider posting a 10 ways article of sorts on this topic....I think it certainly deserves the attention as you pointed out above, but to go in depth would require it's own thread. Just something to consider--it may make for good sticky material and can be updated as time goes by. :wavey:

Well, I wouldn't have had to go into more depth but it seems some information about basic computing security was required to point out the magnitude of the specific vulnerability. It's very easy to down-play computing security since it's not as tangible as say, locking the doors of a car in a busy parking lot.

Sticky? I dunno, all of that information is pretty basic and is available all over the place. It would also be better suited in the computer forum.



Again, the info provided earlier was quite sound but some consideration for part of it was required due to some risks specifically related to that software, the rest I couldn't have written better myself if I tried :)