Warning - Freak vulnerability on ecommerce
- Thread starter rolygate
- Start date
- th_trl_thread_readers 0
- Status
Chrome has the patch already. Running that while waiting for the others to catch up.
Thanks for the heads up!
FF36.01 here on Win 7.1 - and came in vulnerable! Reading the freakcheck site, disabled Avast webshield and passed.
Looked into the latest program (not definition) version update of Avast, and was due for an update. Updated Avast to latest program version and all's good with it's web shield running.
While they state Firefox is not vulnerable, it pays to check. Your AV program may "intercept" the https calls, and if it's vulnerable an impervious browser won't help!
FF36.01 here on Win 7.1 - and came in vulnerable! Reading the freakcheck site, disabled Avast webshield and passed.
Looked into the latest program (not definition) version update of Avast, and was due for an update. Updated Avast to latest program version and all's good with it's web shield running.
While they state Firefox is not vulnerable, it pays to check. Your AV program may "intercept" the https calls, and if it's vulnerable an impervious browser won't help!
My Chrome passed the test, as is, no patching necessary...
edit -- Firefox, Pale Moon and Sea Monkey also passed, IE..not so much
I changed over to FF from IE and my system passed.
Windows 7 here. My IE was shown to be vulnerable, but Firefox returned the error message, "Secure Connection Failed".
Which means one thing: I'm doing my online vapemail shopping with Firefox. I don't use IE except to play games on Pogo.
Which means one thing: I'm doing my online vapemail shopping with Firefox. I don't use IE except to play games on Pogo.
My Android phone showed vulnerable. I use the default Android browser, not sure if it can be patched as I've never seen an update for it. I'll search for what I can do, but if someone already knows I'd appreciate it!
Thanks, I have Chrome so just need to update it. I have it, but I don't like it
If i browse with my default Android browser but do online orders from Chrome I should be safe from the freak attack right?Bear in mind, this affects ANY https connection. Whether it be with your email account, shopping cart, etc. Any secure communication using https is affected by this bug.
It's unknown whether Google will address the default browser issue on Android. And if your phone is locked into a provider, you're also at their mercy as to when they'll push a patch. If Chrome isn't to your liking, I do believe FireFox makes a "droid" version as well.
It's unknown whether Google will address the default browser issue on Android. And if your phone is locked into a provider, you're also at their mercy as to when they'll push a patch. If Chrome isn't to your liking, I do believe FireFox makes a "droid" version as well.
Thanks, good to know. Seems the best idea will be to use a different browser all together. I can check my my default browser periodically with that link to see if it's patched.
Thanks for the heads up! I too have FF and Avast, and initially the test failed. Once I turned the web shield off, I passed. Just updated Avast, but a reboot is required. Let's see if I can turn the Web Shield back on after reboot...
EDIT: It works! I mean doesn't! I mean the page doesn't load so I'm safe! Yay!
Last edited:
Chrome on my android (latest version from the Play Store) is still vulnerable. I installed Firefox, and that one isn't vulnerable - it passes the tes by failing to load the page.
Thanks, Roly!
Thanks, Roly!
Thank you SO much. Running Firefox and Avast. Tested Vulnerable. Closed Avast web shield. Passed the test. Updated Avast. Turned web shield on. Re-ran test. Passed!! Updated Firefox just to be sure. Re-ran test again. Passed!
Like many of you probably do, I purchase online daily. I'm So glad I saw this thread. Thanks again Roly!
Roly, would you mind if I shared your post information with my Facebook family? This info should be broadcast on News Channels for everyone to see.
- Status
Similar threads
- Locked
