[SOLVED] Security problem with Firefox Addon?

validator456 · 05-02-2018, 02:39 AM

I have the latest Firefox webbrowser on my computer. Lately, I wasn't able to log in to certain websites. Important ones like Github.

I removed the cache and the cookies. That didn't help.

I checked Help/Troubleshooting Information and in the information displayed on the page, I saw that there is a addon installed called bypassRDTO.

I never installed that addon. Furthermore, it doesn't appear in my addon list (Tools/Addons), so I cannot uninstall it.

I checked the addon. This addon is not compatible with my version of Firefox, so I cannot even install it.

How can I check whether this is a security problem?

hydrurga · 05-02-2018, 05:07 AM

Which add-ons do you have installed in Firefox? Please paste the extensions list from Help->Troubleshooting.

When you say that you weren't able to log on to certain sites, what exactly happened?

hydrurga · 05-02-2018, 05:16 AM

Also, in Help->Troubleshooting, in the Application Basics section, click on Open Directory on the Profile Directory line.

Then open the extensions directory. In there you will find your various extensions. Some of them are named, for others you will have to open them with an archive manager and then open manifest.json in order to see which extension they are. Have a root around and see if you can find bypassRDTO.

validator456 · 05-02-2018, 06:47 AM

Here is the list:

Quote:

1-Click YouTube Video Downloader 4.0.92 true YoutubeDownloader@PeterOlayev.com
Adblock Plus 3.0.4 true {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
DuckDuckGo Privacy Essentials 2018.4.27 true jid1-ZAdIEUB7XOzOJw@jetpack
HTTPS Everywhere 2018.4.11 true https-everywhere@eff.org
Print Friendly & PDF 1.2 true ff-addon@printfriendly.com
Save Video As 1.4 true {63f3b52d-7581-42cd-9e82-fb1b2cdb0043}
Speed Dial 2 2.3.4 true michal.simonfy@gmail.com
Video DownloadHelper 7.2.2 true {b9db16a4-6edc-47ec-a1f4-b86292ed211d}
bypassRDTO 2.4.1-signed.1-signed false {187674BE-B90B-4603-8D40-DF3411C272C1}
Download YouTube Videos as MP4 1.8.10 false {b9bfaf1c-a63f-47cd-8b9a-29526ced9060}
DownThemAll! 3.0.8 false {DDC359D1-844A-42a7-9AA1-88A850A938A8}
FireGestures 1.11.1 false firegestures@xuldev.org

validator456 · 05-02-2018, 07:00 AM

It was weird because when I tried to login to Github, the access was denied, although I was sure that I had the correct password. (I use keepassx and I didn't change the password). Logging in on an other browser didn't create problems. But I changed the password regardless.
Same thing happened on another site (Digid). The Digid account controls access to important governmental sites.

bypassRDTO is in the extensions folder you were aksing for, hydrurga.

validator456 · 05-02-2018, 07:50 AM

I deinstalled all plugins and rebooted. There were still four addons listed in my /home/porter/.mozilla/firefox/qr1xfrxe.default folder. One of them was Firegestures. That was from a long time ago. I removed all four remaining files in this directory.

Apparently, firefox is sloppy when it comes to permanently removing addons.

I don't think it was a security issue.

Thank you for your answers.