Firefox Privileges Drive Me Insane

By SiCKX
in Web Browser Discussion & Support

 Share

Recommended Posts

Mentor

SiCKX

Posted
Posted (edited)

I cannot save to the C Drive because:

AJtOaKT.png

 

I have tried:

 

Disabling UAC and EnableLUA set to 0.

Enabling FULL permissions for all existing accounts for the Mozilla folder, the .exe and even the whole C drive.

Disabled inherited permissions.

Running as Admin on the shortcut as well as the .exe file for All Users.

Sharing the folder with Everyone as well as the sharing whole C Drive.

I think I even Took Ownership of the whole C Drive even if it was unnecessary.

Tried uninstalling and a refresh upon reinstall.

 

This is only happening with Firefox after the update. Win10 x64.

 

I am losing my sanity, plz help.

Link to comment
https://www.neowin.net/forum/topic/1385972-firefox-privileges-drive-me-insane/
Share on other sites
Mentor

SiCKX

Posted
  • Author
Posted

It does save on any other drive.

It always saved to C and this happened before but I fixed it somehow and forgot how. I think when it updates itself it uses some different permission and when I run it it's like I'm not the owner anymore. Every other program saves to C just fine.

 

@Nick H.

C is my quick access and habit since forever. It acts the same as if UAC was on except it's not.

 

 

Grand Master

Brandon H Supervisor

Posted
  • Supervisor
Posted

the flag Jim mentioned will probably work but honestly that's a habit you should try and get out of; that's what the Download folder is supposed to be for. Things usually should not be stored right at the root of C:\

  • Nick H. and Jim K
  • Like 2
Grand Master

Jim K Global Moderator

Posted
  • Global Moderator
Posted
2 minutes ago, Brandon H said:

the flag Jim mentioned will probably work but honestly that's a habit you should try and get out of; that's what the Download folder is supposed to be for. Things usually should not be stored right at the root of C:\

Yea, I agree.  I'd rather things be default or set to other folders ... but it makes me nervous when people start setting blanket ownerships/permissions/etc....seems like a recipe for a future disaster.

Grand Master

n_K

Posted
Posted

I can predict the future, I imagine it will go something like this...

  1. 1 year passes
  2. huge 0day exposed in firefox
  3. SiCKX visits exploited site
  4. Browser executes bad code
  5. Attackers can't believe their luck, they get full access to someone's PC
  6. Install a rootkit on C:\
  7. Extract all passwords and data from drive
  8. Log all data being typed (e.g. passwords, credit card details, social security numbers, etc.)
  9. Sells data off to highest bidder
  10. SiCKX complains on neowin that their PC has been hacked, ID theft has occured and bank accounts have been emptied

You don't have C:\ write access as a normal user for a very good reason, even if you do, your browser doesn't also for a very good reason,

Grand Master

Jim K Global Moderator

Posted
  • Global Moderator
Posted
4 minutes ago, Jason S. said:

ive never once seen this while using FF. Is your computer on a domain or something?

Per that Mozilla link ....

Quote

Firefox 68 introduces a new launcher process that reduces the browser to running as a standard user (medium integrity). A program running with standard user privileges can't write in certain places on the system.

//

If your work routinely requires you to save to the root of the C drive, you can override the privilege reduction by starting Firefox with a command-line switch.

//

 

  • Brandon H and +Zlip792
  • Like 2
Mentor

SiCKX

Posted
  • Author
Posted

Yes it's a new Mozilla thing.

THANK YOU Jim K for that launch parameter.

 

@n_K

Thanks for your concern, but I'm not that naive or new to this. I see your point, tho no problem there.

Even if I would save elsewhere I want full control of the computer or at least know what's going on.

Anyway, you're great people... thanks for the replies!

 

Grand Master

LaP

Posted
Posted (edited)

I get why all the restrictions imposed by modern browsers can be frustrating at time. Because of the lack of security in older browsers people have taken on some bad habits (not talking about op here but in general). But all those restrictions make modern browsers a lot more secure and the chance of getting infected by a virus a lot lower for computer illiterate people. If you do some research (Jim K did it for you) all those restrictions can be individually turned off in firefox either from the about:config page or by command lines.

Edited by LaP
Grand Master

LaP

Posted
Posted
4 minutes ago, Jason S. said:

i see... odd. i've had no issues downloading/saving files w/ FF. Then again, i'm also not downloading to the root of C.

It's running as a standard user even if you are logged in as an administrator. You'll be able to save to c:\user\meeeeeeeeeee\* but probably not anywhere else. It looks like before 68 it was running with the same privilege as the user (in most case administrator) which means you could not save to the c:\windows\* or c:\program files\* folders without an UAC prompt but c:\ was probably fair game.

Grand Master

Mindovermaster Global Moderator

Posted
  • Global Moderator
Posted
12 minutes ago, SiCKX said:

Yes it's a new Mozilla thing.

THANK YOU Jim K for that launch parameter.

 

@n_K

Thanks for your concern, but I'm not that naive or new to this. I see your point, tho no problem there.

Even if I would save elsewhere I want full control of the computer or at least know what's going on.

Anyway, you're great people... thanks for the replies!

 

You have full control if it is in your home folder...

This topic is now closed to further replies.
 Share
Go to topic listing