Mozilla's Firefox browser flaw makes it easy for cyber-thieves to steal user information on websites where users create their own web page as with MySpace. Mozilla Firefox has confirmed a critical flaw that allows a user's password to be stolen. The flaw lies in Firefox's Password Manager software, which can be tricked into sending password information to an attacker's Web site, according to Robert Chapin, president of Chapin Information Services Inc. For this attack to work, attackers need to be able to create HTML (Hypertext Markup Language) forms on the Web site, something that is allowed on blogging and social networking sites. Read More ...
