Lieberman Software is headquartered in Los Angeles, CA with an office in Austin, TX and channel partners throughout the world

For more information, visit www.liebsoft.com

London, (PresseBox) - Responding to reports that Mozilla is planning to implement silent background updates in the upcoming version of Firefox 10, Lieberman Software has warned that the feature could be very bad news on the security front.

According to Philip Lieberman, President and Chief Executive Officer of the data security specialist, while many IT security systems will have to be reconfigured to allow background updates to Firefox - which is not a good thing in the first place - there is danger that hackers could subvert the update system to allow them backdoor access to the users' computer.

"Auto-updating can be a welcome feature for many computer users, but the feature does need to let the user know what is happening. Having your software quietly update in the background - presumably on a modular code basis - is not something that all IT security professionals will welcome," he said.

"If, as I think appears quite likely, hackers start reverse engineering the Firefox background updating system - and remember we are talking about open source software here - then it is only a matter of time before they subvert this auto-updating mechanism to inject malware," he added.

The Lieberman Software president went on to say that, at the MalCon security conference taking place in Mumbai later this week, well-known code cracker Peter Kleissner - who developed the Stoned bootkit back in 2008 - is scheduled to reveal the first Windows 8 bootkit.

This Stoned Lite bootkit, he explained, will reportedly allow code loaded from the Master Boot Record on the PC's hard disk to remain in place all the way through the Windows 8 boot-up and loading purpose (http://bit.ly/uVBbpo).

It is coding technology like this, says Lieberman, which could allow the Firefox background updating system to be subverted, as he notes that we are talking about ultra low-level code that actually sits under the Windows 8 operating system itself.

"It doesn't take a programming genius to figure out that - against the backdrop of a Windows 8 bootkit - it shouldn't be difficult to subvert a background updater for a piece of open source software like Firefox 10," he said.

"Having a Windows 8 bootkit that exists is bad enough, but at least IT security professionals can set up their system controls to only allow access to the update processes when a suitable admin account logs in. This is the principle of admin accounts - which need to be protected using privileged account management technology - that ensures an extra layer of security on corporate systems," he said.

"But with the prospect of having to allow for Firefox 10 updating itself silently and in the background, I suspect that many IT security professionals will raise the alarm. And for the very good reason that this is a recipe for a hacker security incursion in the background," he added.

For more on Lieberman Software: http://www.liebsoft.com
For more on the silent update plans for Firefox 10: http://bit.ly/tLrcDI

Lieberman Software Corporation

Lieberman Software provides privileged identity management and security management solutions to more than 1000 customers worldwide, including 40 percent of the Fortune 50. By automatically discovering and managing privileged accounts everywhere on the network, Lieberman Software helps secure access to sensitive systems and data, thereby reducing internal and external security vulnerabilities, improving IT productivity and helping ensure regulatory compliance. The company developed the first solution for the privileged identity management space, and its products continue to lead this market in features and functionality. Lieberman Software is headquartered in Los Angeles, CA with an office in Austin, TX and channel partners throughout the world. For more information, visit www.liebsoft.com.

Press releases you might also be interested in

Weitere Informationen zum Thema "Software":

Was ist JSON?

Bei JSON (Ja­va­Script Ob­ject No­ta­ti­on) han­delt es sich um ein Text­for­mat zum Aus­tausch von Da­ten. Es ist ein­fach zu er­ler­nen und zu le­sen. JSON ba­siert auf der Ja­va­Script-Spra­che. Das For­mat kon­kur­riert beim Aus­tausch struk­tu­rier­ter Da­ten mit XML, be­sitzt aber we­sent­lich we­ni­ger Mög­lich­kei­ten.

Weiterlesen

Subscribe for news

The subscribtion service of the PresseBox informs you about press information of a certain topic by your choice at a choosen time. Please enter your email address to receive the email with the press releases.

An error occurred!

Thank you! You will receive a confirmation email within a few minutes.


I want to subscribe to the gratis press mail and have read and accepted the conditions.