Firesheep demonstrates a security flaw that the computer security community has been concerned about for years — that any network eavesdropper can take over another user's session (say, a login to a webmail or social networking account) just by sniffing packets and copying the victim's cookie

The Electronic Frontier Foundation (EFF), in collaboration with the Tor Project, has launched an official 1.0 version of HTTPS Everywhere, a tool for the Firefox web browser that helps secure web browsing by encrypting connections to more than 1,000 websites.

The Tor Project and the Electronic Frontier Foundation have released HTTPS Everywhere, a Firefox extension that activates SSL/TSL encryption on sites that support the security setting, but don't feature it as a default when visiting because of partial support, unsecured trackback links or other issues. To alleviate this problem, HTTPS Everywhere writes all requests in HTTPS.

"...In summary, there’s no news here since last year: Yes Firefox 2 has an enhanced anti-phishing protection that sends your web address to Google that you have to activate. There’s currently no other mechanism to achieve a comparable level of protection. Unless there were other providers. Which Firefox could integrate.

The U.S. National Security Agency has released its own version of the open-source computer operating system Linux, which offers enhanced security for users.

The debate rages over whether open source browsers such as Firefox and Konqueror provide better zero-day attack protection than proprietary browsers such as Microsoft's Latest News about Microsoft Internet Explorer (IE) and Opera Software's Opera browser.

Today, Mozilla is happy to release Firefox 3.6.4, the latest security and stability release for Firefox, used by nearly 400 million people around the world to browse the Web. This release provides crash protection for Windows and Linux users by isolating third-party plugins when they crash.

Have you ever come across a situation where you've needed a tool but didn't think you had the right one to get the job done?... Now shift into the application security mindset and voila, there's Firefox Web Developer: an unlikely "security testing" tool but one that serves the purpose very well.

Ah, cryptographic security: a boon to those who understand the algorithms, but all too often a lost cause to those who don't. The secure HTTPS protocol for Web surfing is widely accepted, but has one fatal flaw: users ignore certificate error warnings. A Firefox extension called Perspectives aims to close that security hole.