3 ms·

It's actually not about the browser config, its all about the graphics - this reminds me in firefox you could customize the UI easily with an overlay image. Th

It's actually not about the browser config, its all about the graphics - this reminds me in firefox you could customize the UI easily with an overlay image. That would defeat this attack, assuming it was random/undetectable. Maybe time to go the other way and never lock down the config... Or just disable anything resembling a box in the browser, make html strictly hyper text media again, no programming or js.

metadat 5y ago
I love this idea, wish this was a standard feature implemented in many of my applications and operating systems. Also.. setting a custom UI background image sounds like browser configuration to me :p Seriously though, the difference with and genius in your idea is essentially applying the "Send my bank a custom secret they then present to me so I know if I'm really speaking with them", except with new twists in: 1. Know if a window belongs to my FF client / OS / whatever needs securing. 2. The absence of further concerns about what OS details get inevitably leaked, at least for protecting against this one class of threat.