VPNの脆弱性に関する不安が広がっています。ZPAの60日間無料トライアルを利用して、VPNからの移行のメリットをお確かめください。

Zscalerのブログ

Zscalerの最新ブログ情報を受信

購読する
セキュリティリサーチ

Search Engine Security Available for Firefox Mobile

image
JULIEN SOBRIER
4月 20, 2011 - 2 分で読了
While the number of threats targeting mobile devices is increasing, web browsers for mobile devices are still lacking the security features of their Desktop counterparts. For example, Firefox 4 Mobile (also known as Fennec), does not include Google Safe Browsing to prevent users from navigating to known malicious sites.

Zscaler has released 3 Firefox add-ons to protect users, such as Search Engine Security, BlackSheep and Zscaler Safe Shopping. I have now ported Search Engine Security to the mobile version of Firefox 4, and will release Zscaler Safe Shopping for mobile devices later on.

 
Install Search Engine Security add-on for Firefox 4 Mobile

Search Engine Security

The add-on behaves the same as the desktop version. It protects users from malicious search results in Google, Bing and Yahoo!, by modifying the Referer and User Agent headers, when the users leave these sites.

You can turn enable/disable Search Engine Security for any specific search engine. The add-on will show it's status in the search results.
 
Image
Search Engine Security protection for Google

The settings are the same as those used for the desktop version. You can specify which Referer header to use (none by default) and whether or not to modify the user agent (choose Yes for better protection). Because of restrictions in Firefox Mobile, the allowlist, used to prevent header changes for particular sites, is restricted to a single URL.

 
Image
Search Engine Security options for Mobile
 
How to test it

Search Engine Security works transparently and most users will not notice the change of HTTP headers. The equivalent of Live HTTP Headers for Fireofx Mobile is Mobile Tools. Unfortunately, this extension shows HTTP before they are modified by Search Engine Security. To see the changed Referer and User Agent headers, look for "referer mobilefish" in Google. Click on the first search result. The page from mobilefish.com shows your User Agent string as well as Referer. You can try it with Search Engine Security truned on and off for Google to see the different values.
 
Image
User Agent and Referer headers modified by Search Engine Security

Don't forget to restart Firefox after you install this add-on. It does not yet take advantage of the restartless feature introduced in Firefox 4.

 
Install Search Engine Security add-on for Firefox 4 Mobile

-- Julien
form submtited
お読みいただきありがとうございました

このブログは役に立ちましたか?

dots pattern

Zscalerの最新ブログ情報を受信

このフォームを送信することで、Zscalerのプライバシー ポリシーに同意したものとみなされます。