+magicboy Posted July 21, 2005 Posted July 21, 2005 An article posted on today's Register has described how people running the latest version of Greasemonkey are vulnerable to hacking attacks, regardless of whether or not they are using Mac's or PC's. It is advised to either uninstall/disable Greasemonkey, or to downgrade to an earlier version. Sorry folks! Quote
+Pengy&Tigger Posted July 21, 2005 Posted July 21, 2005 This has been mentioned on the greasemonkey thread. Quote
+The Southseakers Posted July 21, 2005 Posted July 21, 2005 A new version of GreaseMonkey (version 0.3.5) is available from http://greasemonkey.mozdev.org/ You should install it immediately. The security problem has been removed in this release, however this has been done at the expence of some usefull features, so not all scripts will work with the new version. Work is underway to fix the problem in the long term (see GreaseBlog) so expect another release of GreaseMonkey quite soon ... I have tested both My Extension and Lord Elph's using GreaseMonkey 0.3.5 on the latest version of FireFox (1.0.6) and they seem to work (although I suspect some features may not ). Its worth noting that downgrading your Monkey to a previous version will not remove the security problem which is caused by the part of GreaseMonkey used to request additional information from the internet. You should install the newest version or disable GreaseMonkey. Quote
+The Hokesters Posted July 21, 2005 Posted July 21, 2005 Work is underway to fix the problem in the long term (see GreaseBlog) so expect another release of GreaseMonkey quite soon ... Would some kind soul holler when the new 'fixed' version comes out because I don't seem to get any updates from Mozilla! Cheers in advance Quote
+Celtic Ghost Posted August 3, 2005 Posted August 3, 2005 Would some kind soul holler when the new 'fixed' version comes out because I don't seem to get any updates from Mozilla! Cheers in advance News: Greasemonkey 0.5 Beta is now available This release fixes the security issues discovered in Greasemonkey 0.3.4 and will be the next major version after 0.3.5, which temporarily removed the Greasemonkey APIs. It also has several new features. The red arrow is working again when you click the british grid link Quote
+lordelph Posted August 3, 2005 Posted August 3, 2005 I've found Greasemonkey 0.5 flaky under Firefox 1.06 for some of the extensions I've written, but haven't had a chance to investigate fully. Short version: Greasemonkey extensions I've written *might* work for you Longer version: GM 0.5 is a beta to encourage developers to look for issues, so expect the odd problem if you do install it. The new version is really aimed towards Firefox 1.1, they are encouraging extension authors to verify things work in the current "Deer Park" alpha releases of Firefox 1.1, since it takes advantage of improve security features in that release. Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.