Protection from the recent Fixed Firefox Flaw. Sites accessing file system.

[warwagon]

The recent Firefox 39.0.3 fixed a vulnerability where an ad from a Russian site without the user knowing, was able to bypass the same origin policy, and access the file system on a users machine, searching for certain file extensions and uploading them without the user knowing.

Would it be possible for secureaplus, (maybe via a browser plugin) to block access to the users file system, and be able to enable it on a per site basis. For instance, when you go to Facebook and click the browse button for the first time to upload a photo, secureaplus would appear and say "would you like to allow this website access to the hard drive".

Just a thought.

Thanks!

[hendy]

SecureAge has another product line that does that kind of protection. It is called SecureData. It is basically an encryption software, that automatically encrypt files. It has a feature which is called Application Binding. You can set certain file type to be bound to certain process. For example if you bind .jpg files to Microsoft Photo Viewer, SecureData will only decrypt .jpg files for Microsoft Photo Viewer. For other processes, you can configure SecureData to either block the reading, or let it reads the encrypted content of the files.