Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Inactive Support Threads
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Software
Browsers
Firefox
Mozilla starts rolling out Site Isolation to all Firefox channels
Message
<blockquote data-quote="HarborFront" data-source="post: 943438" data-attributes="member: 55987"><p>Mozilla has started rolling out the Site Isolation security feature to all Firefox channels, protecting users from attacks launched via malicious websites.</p><p></p><p>Until today, Site Isolation could only be enabled by users of Firefox Nightly, the release channel used by Mozilla to test new features not yet ready for a wider rollout.</p><p></p><p>Site Isolation has been under development since April 2018 under the <a href="https://wiki.mozilla.org/Project_Fission" target="_blank">Project Fission</a> codename, with Mozilla first announcing plans to add it to the Firefox web browser in <a href="https://mystor.github.io/fission-news-1.html" target="_blank">February 2019</a>.</p><p></p><p>A similar Site Isolation feature is also <a href="https://www.bleepingcomputer.com/news/security/google-enables-site-isolation-feature-for-99-percent-of-chrome-desktop-users/" target="_blank">available in Google Chrome</a>, first released as an experimental feature for Chrome 63 users <a href="https://www.bleepingcomputer.com/news/software/google-chrome-63-released-for-android-linux-mac-and-windows/" target="_blank">in December 2017</a>, and later made generally available in Chrome 67, <a href="https://www.bleepingcomputer.com/news/software/google-chrome-67-released-for-windows-mac-and-linux/" target="_blank">released at the end of May 2018</a>.</p><p></p><h2>How Site Isolation works</h2><p>The new Site Isolation security architecture acts as an additional security boundary between sites, and it works by completely separating users' web content, loading all sites in separate processes.</p><p></p><p>Thus it prevents malicious websites from accessing private data (including passwords, credit card numbers, or other sensitive info) loaded from other sites.</p><p></p><p>For instance, with this new feature enabled, Firefox can protect users from attackers exploiting <a href="https://www.bleepingcomputer.com/tag/meltdown/" target="_blank">Meltdown</a> and <a href="https://www.bleepingcomputer.com/tag/spectre/" target="_blank">Spectre</a> vulnerabilities that allow them to harvest sensitive data by reading memory content anywhere within a process's address space.</p><p></p><p>"This fundamental redesign of Firefox’ Security architecture extends current security mechanisms by creating operating system process-level boundaries for all sites loaded in Firefox for Desktop," Mozilla engineers Anny Gakhokidze and Neha Kochar said.</p><p></p><p>"Isolating each site into a separate operating system process makes it even harder for malicious sites to read another site’s secret or private data."</p><p></p><p></p><p><img src="https://www.bleepstatic.com/images/news/u/1109292/2021/How%20Site%20Isolation%20works.jpg" alt="How Site Isolation works" class="fr-fic fr-dii fr-draggable " style="" /><em>How Site Isolation works (Mozilla)</em></p><p></p><p>Besides obvious security advantages, Site Isolation also comes with <a href="https://hacks.mozilla.org/2021/05/introducing-firefox-new-site-isolation-security-architecture/" target="_blank">performance benefits</a>:</p><p></p><ul> <li data-xf-list-type="ul">By placing more pages into separate processes, we can ensure that doing heavy computation or garbage collection on one page will not degrade the responsiveness of pages in other processes.</li> <li data-xf-list-type="ul">Using more processes to load websites allows us to spread work across many CPU cores and use the underlying hardware more efficiently.</li> <li data-xf-list-type="ul">Due to the finer-grained separation of sites, a subframe or a tab crashing will not affect websites loaded in different processes, resulting in improved application stability and better user experience.</li> </ul><h2>How to enable Site Isolation</h2><p>You can start testing Site Isolation right now by enabling it on any Firefox release channel, including Release, Beta, or Nightly.</p><p></p><p>To do that, you have to follow these step-by-step instructions:</p><p></p><p><strong>To enable Site Isolation on Firefox Nightly:</strong></p><p></p><ol> <li data-xf-list-type="ol">Navigate to about<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite115" alt=":p" title="Stick out tongue :p" loading="lazy" data-shortname=":p" />references#experimental</li> <li data-xf-list-type="ol">Check the “Fission (Site Isolation)” checkbox to enable.</li> <li data-xf-list-type="ol">Restart Firefox.</li> </ol><p><strong>To enable Site Isolation on Firefox Beta or Release:</strong></p><p></p><ol> <li data-xf-list-type="ol">Navigate to about:config.</li> <li data-xf-list-type="ol">Set `fission.autostart` pref to `true`.</li> <li data-xf-list-type="ol">Restart Firefox.</li> </ol><p></p><p><img src="https://www.bleepstatic.com/images/news/u/1109292/2021/Enabling%20Site%20Isolation.png" alt="Enabling Site Isolation" class="fr-fic fr-dii fr-draggable " style="" /><em>Enabling Site Isolation</em></p><p></p><p>Toggling on Site Isolation is highly recommended given that it "sandboxes web pages and web frames, isolating them from each other, further strengthening Firefox security."</p><p></p><p>Once enabled, it will protect you from current and future security vulnerabilities that would allow malicious websites to access private info loaded from other sites.</p><p></p><p></p><p>[URL unfurl="true"]https://www.bleepingcomputer.com/news/security/mozilla-starts-rolling-out-site-isolation-to-all-firefox-channels/[/URL]</p></blockquote><p></p>
[QUOTE="HarborFront, post: 943438, member: 55987"] Mozilla has started rolling out the Site Isolation security feature to all Firefox channels, protecting users from attacks launched via malicious websites. Until today, Site Isolation could only be enabled by users of Firefox Nightly, the release channel used by Mozilla to test new features not yet ready for a wider rollout. Site Isolation has been under development since April 2018 under the [URL='https://wiki.mozilla.org/Project_Fission']Project Fission[/URL] codename, with Mozilla first announcing plans to add it to the Firefox web browser in [URL='https://mystor.github.io/fission-news-1.html']February 2019[/URL]. A similar Site Isolation feature is also [URL='https://www.bleepingcomputer.com/news/security/google-enables-site-isolation-feature-for-99-percent-of-chrome-desktop-users/']available in Google Chrome[/URL], first released as an experimental feature for Chrome 63 users [URL='https://www.bleepingcomputer.com/news/software/google-chrome-63-released-for-android-linux-mac-and-windows/']in December 2017[/URL], and later made generally available in Chrome 67, [URL='https://www.bleepingcomputer.com/news/software/google-chrome-67-released-for-windows-mac-and-linux/']released at the end of May 2018[/URL]. [HEADING=1]How Site Isolation works[/HEADING] The new Site Isolation security architecture acts as an additional security boundary between sites, and it works by completely separating users' web content, loading all sites in separate processes. Thus it prevents malicious websites from accessing private data (including passwords, credit card numbers, or other sensitive info) loaded from other sites. For instance, with this new feature enabled, Firefox can protect users from attackers exploiting [URL='https://www.bleepingcomputer.com/tag/meltdown/']Meltdown[/URL] and [URL='https://www.bleepingcomputer.com/tag/spectre/']Spectre[/URL] vulnerabilities that allow them to harvest sensitive data by reading memory content anywhere within a process's address space. "This fundamental redesign of Firefox’ Security architecture extends current security mechanisms by creating operating system process-level boundaries for all sites loaded in Firefox for Desktop," Mozilla engineers Anny Gakhokidze and Neha Kochar said. "Isolating each site into a separate operating system process makes it even harder for malicious sites to read another site’s secret or private data." [IMG alt="How Site Isolation works"]https://www.bleepstatic.com/images/news/u/1109292/2021/How%20Site%20Isolation%20works.jpg[/IMG][I]How Site Isolation works (Mozilla)[/I] Besides obvious security advantages, Site Isolation also comes with [URL='https://hacks.mozilla.org/2021/05/introducing-firefox-new-site-isolation-security-architecture/']performance benefits[/URL]: [LIST] [*]By placing more pages into separate processes, we can ensure that doing heavy computation or garbage collection on one page will not degrade the responsiveness of pages in other processes. [*]Using more processes to load websites allows us to spread work across many CPU cores and use the underlying hardware more efficiently. [*]Due to the finer-grained separation of sites, a subframe or a tab crashing will not affect websites loaded in different processes, resulting in improved application stability and better user experience. [/LIST] [HEADING=1]How to enable Site Isolation[/HEADING] You can start testing Site Isolation right now by enabling it on any Firefox release channel, including Release, Beta, or Nightly. To do that, you have to follow these step-by-step instructions: [B]To enable Site Isolation on Firefox Nightly:[/B] [LIST=1] [*]Navigate to about:preferences#experimental [*]Check the “Fission (Site Isolation)” checkbox to enable. [*]Restart Firefox. [/LIST] [B]To enable Site Isolation on Firefox Beta or Release:[/B] [LIST=1] [*]Navigate to about:config. [*]Set `fission.autostart` pref to `true`. [*]Restart Firefox. [/LIST] [IMG alt="Enabling Site Isolation"]https://www.bleepstatic.com/images/news/u/1109292/2021/Enabling%20Site%20Isolation.png[/IMG][I]Enabling Site Isolation[/I] Toggling on Site Isolation is highly recommended given that it "sandboxes web pages and web frames, isolating them from each other, further strengthening Firefox security." Once enabled, it will protect you from current and future security vulnerabilities that would allow malicious websites to access private info loaded from other sites. [URL unfurl="true"]https://www.bleepingcomputer.com/news/security/mozilla-starts-rolling-out-site-isolation-to-all-firefox-channels/[/URL] [/QUOTE]
Insert quotes…
Verification
Post reply
Top
