Windows Security Tutorials - Herong's Tutorial Examples - v3.01, by Dr. Herong Yang
Reviewing Advanced Settings in Firefox
This section provides a tutorial example on how to review advanced configuration settings in Firefox.
The last step to secure your Firefox is in the advanced configuration area.
1. Run Firefox and type in "about:config" in Web site address input box. You will see a warning message:
This might void your warranty! Changing these advanced settings can be harmful to the stability, security, and performance of this application. You only continue if you are sure of what you are doing.
2. Click the "I'll be careful, I promise!" button to continue. You will see all Firefox configuration settings in a single list.
3. Review each setting in the list. Watch out settings that Web addresses as their values.
For example, I have the following settings that use Web addresses:
app.support.baseURL: https://support.mozilla.org/1/firefox/...
browser.dictionaries.download.url: https://addons.mozilla.org/...
browser.safebrowsing.gethashURL: http://safebrowsing.clients.google...
browser.search.defaultengine: Ask.com
browser.search.defaulturl: http://search.yahoo.com/search?...
browser.search.selectedEngine: Ask.com
gecko.handlerService.schemes.irc.0.uriTemplate: https://www.mibbit...
gecko.handlerService.schemes.webcal.0.uriTemplate: https://30boxes.com
geo.wifi.uri: https://www.googleapis.com/geolocation/v1...
social.manifest.facebook: ("origin":"https://www.facebook.com",...
social.whitelist: https://mozsocial.cliqz.com,https://now.msn.com...
yahoo.ytff.search.popup_src: http://toolbar.yahoo.com/bh/v8/search...
...(more settings with mozilla.org addresses)
4. Research on the Web to understand what those web addresses are used for, also to see if you can trust them.
For example, "mozsocial.cliqz.com" is social tracking and news provider. It can be trusted.
I don't know why "browser.search.defaultengine: Ask.com" is still there, since I removed it from the search engine list earlier.
The picture below shows some search engines installed in Firefox:
Table of Contents
About This Windows Security Book
Windows 8: System Security Review
Windows 8: System Security Protection
Windows 8 Defender for Real-Time Protection
Windows 7: System Security Review
Windows 7: System Security Protection
Windows 7 Forefront Client Security
Norton Power Eraser - Anti-Virus Scan Tool
McAfee Virus and Malware Protection Tools
Spybot - Spyware Blocker, Detection and Removal
Start and Download Options for Firefox
Content Type Handler Applications
Privacy Options: Tracking, History and Cookies
Security Options: Add-Ons and Passwords
Deleting Cookies Stored in Firefox
Getting New Add-Ons in Firefox
Disabling Extension Add-Ons in Firefox
Disabling Plugin Add-Ons in Firefox
Disabling Search Engines in Firefox
►Reviewing Advanced Settings in Firefox
Keeping IE (Internet Explorer) Secure
Malware (Adware, Spyware, Trojan, Worm, and Virus)
HijackThis - Browser Hijacker Diagnosis Tool
IE Add-on Program Listing and Removal
"Conduit Search" - Malware Detection and Removal
"Tube Dimmer", "Scorpion Saver" or "Adpeak" Malware
Malware Manual Removal Experience
Vundo (VirtuMonde/VirtuMundo) - vtsts.dll Removal
Trojan and Malware "Puper" Description and Removal
VSToolbar (VSAdd-in.dll) - Description and Removal
PWS (Password Stealer) Trojan Infection Removal