Firefox and Safari allow password security

The latest version of the two browsers has revealed an "Asin heel" when allowing hackers to obtain user names and passwords on sites that require login, such as e-mail, bank accounts. .

Heise Security said that users would be in danger if the "Remember password" mode is enabled and JavaScript will be enabled. When they visit the website to log in, another malicious page on the same server can steal all this data from customers.

When an attacker can put malicious code on the server, they also control this page and steal other sensitive information.

Therefore, individual users first protect themselves as follows:

On Firefox browser, select Tools > Options > Security > remove the check box in Remember password for sites > OK .

On Firefox browser, select Tools > Options > Content > uncheck the box Enable JavaScript .