the master password. Only when this is done will the website’s username/password field be filled-in. When Firefox is quit, the password store is locked. It’s only necessary to unlock the password file once each time you use Firefox.
TIP Because you’re only prompted to unlock the password file once each time you use Firefox, it makes sense to get in the habit of quitting Firefox when you’ve finished with it, rather than leaving it open in the background.
To enable the master password, click Edit Preferences in the Firefox program window, click the Security heading at the top of the dialog box that appears, and put a check alongside Use a Master Password. Then type a new password, as prompted. When done, quit and restart Firefox. The changes will take effect immediately—when you visit a site requiring a username/password that Firefox knows, you’ll be prompted for the master password.
Avoiding “executable content” attacks
Many websites make use of JavaScript, Java, and/or Flash to provide useful functionality. Such website features are known as executable content.
Unfortunately, in a minority of cases, executable content can be used to attack your computer and steal data. Because of this, many securityminded Ubuntu users opt to install NoScript, a Firefox add-on program that lets you authorize or restrict JavaScript, Java, Flash, and other technologies on a site-by-site basis.
Installing NoScript
To install NoScript, start Firefox and click Tools Add-ons. Ensure the Get Add-ons icon is selected in the dialog box that appears, and in the Search All Add-ons text field, type noscript. In the list of results, click the ADD TO FIREFOX button alongside the NoScript entry. In the dialog box that appears, click the INSTALL NOW button and, when installation has finished, click RESTART FIREFOX.
Blocking/allowing executable content
When Firefox restarts, you’ll notice a new “S” icon at the bottom-right of the program window. Clicking this lets you enable or deny executable content for the site you’re browsing. The default policy is for NoScript to deactivate everything, including Java, JavaScript, Adobe Flash, and Microsoft SilverLight components. However, some sites on a central
Securing the System : 129