sites

A new attack on Internet users combines multiple tactics into a nasty strategy. The scam includes hacking routers, redirecting users to bogus sites, and preying on fear to trick people into installing malware. The first step in the attack involved ... the hackers taking control of home and small business routers, with Linksys and D-Link models targeted. Exactly how they are doing this isn't certain, but it appears to involve a brute force attack through the optional feature that lets users access their router settings from any Internet-connected computer. Brute force is effectively an automated ... (view more)

Mozilla is to block "fingerprinting" tracking in the Firefox browser. It's an alternative tracking technique to cookies and doesn't require any consent from users. Most people know about cookies, which involves sites putting a small file on a ... computer to either identify a user for future visits or track their online activity. In most cases cookies both legally and practically need consent from the user before they can be issued. Fingerprinting is a more creative technique that doesn't require consent and has proven harder to block. It's all based around the fact that a website is able to ... (view more)

Google is experimenting with ways to inform Chrome users when a web site likely to be slow to load. In doing so, it wants to penalize poorly coded sites - though critics say that's not always the main reason for a delay. The idea is a form of ... "badging" that will appear in the browser. It's a sign of how potentially controversial the subject is that Google is thinking of informing users in this way rather than simply downgrading such sites so they appear lower in search rankings. The initial tests will be based around the general point of whether a site is slow to load. Later on, Google may ... (view more)

Mozilla is to make an important change to Firefox browser security. It could reduce risks for users, but has raised concerns among governments and Internet Service Providers (ISPs), as it could limit their tools for filtering and monitoring online ... activity. The change has to do with a feature called DNS-over-HTTPS (DoH), and will first affect users in the US. It's already possible to enable DoH in Chrome, but it takes some technical know-how because the feature currently isn't widely used. DoH is all to do with the DNS (Domain Name System), which is effectively the phone book of the Internet ... (view more)

Facebook is to show users what data it collects about their activity on other sites. It won't stop tracking, but will make the data anonymous if users ask. The changes will come in a new settings option called "Off-Facebook Activity." This will list ... all websites and apps that share data about user activity with Facebook. This most commonly happens through two methods. One is that the user has opted to log in to the third-party site through Facebook. In other words, as long as they haven't logged out of their Facebook account, they don't need to create or input user names and passwords for the ... (view more)

Chrome and Firefox will stop indicating when websites have received an "extra level of verification" to prove they are in fact genuine. The move is largely due to the fact that most users aren't aware of the Extended Validation SSL (EV SSL) system. ... The Extended Validation SSL (secure socket layer) security certificates go beyond the standard SSL certification scheme, which browsers use to show that data being sent to and from a website is in fact encrypted and secure. This means that communication is encrypted, and that no one can eavesdrop or steal data mid-stream. In other words, ... (view more)

Google is changing the way its "incognito" mode works. It says the move is necessary, but some news and magazine website owners are upset by the change. Incognito is Google's version of private browsing. Despite the name, it's mainly about privacy ... on the user's device: when in incognito mode, the local browser stops adding websites to its browsing history, which consists of a list of pages the user has visited and the searches they've carried out. The mode won't stop the activity being recorded by an Internet service provider (ISP) or by a local network administrator - something that has ... (view more)

One of the most important services on the Internet went down for around an hour this week, causing widespread problems on other sites. The glitch is a reminder of how fragile some aspects of the Internet are. Cloudflare is a website that offers ... several free and paid services designed to make websites more efficient. Two of its main services are traffic filtering and web caching. The former involves web traffic between a user and a website going through Cloudflare. During this process, the client machine is checked for signs of malicious activity. This can involve attempted hacking, but also ... (view more)

Firefox is to stop websites from playing videos automatically when a user visits a page. By default, autoplay will only be allowed if the sound is muted. The move by developers Mozilla is designed to tackle the problem of unwanted noise when ... somebody is simply expecting to read an article. This is a particular problem with sites that carry video ads or news sites that automatically play a video report, even if it isn't related to the story the user was expecting to read. The new default takes effect in version 66 of Firefox, which is getting a public release this week. The videos will still ... (view more)

Google's Chrome browser will soon block all ads on sites that have "abusive experiences" for users. It's designed as a way to put financial pressure on scammers. It's a new step following on from an existing attempt to protect users against ... misleading websites. 'Misleading' has a couple of meanings in this context. One is sites that carry pop-up or other ads that falsely claim to be system warnings, such as those which state the user's computer has malware. In this case, the user either downloads (and pays for) fake security software to "fix" the "problem", or is directed ... (view more)