Firefox 33 - Startup Issue

Hey sevenforums.

Since I updated to version 33 on every startup it makes two-three connections to 173.194 series ips (I checked using who.is and its Google ip), incoming data of few hundred KBs and then connections end. It only happens when a new firefox window is opened for first the time - does not happen when subsequent windows are opened.

Is it happening due to the new option in Advanced>Certificates tab 'Query OCSP responder servers to confirm the current validity of certificates'.

This issue occurs after clean install of 33 and from 32 to 33 upgrade. Same ddons are installed that I used with version 32.

Callender said:

I'm using Cyberfox 64bit and as far as I can work out that option isn't checked by default.

The issue might well be down to this feature:

https://blog.mozilla.org/futurerelea...google-search/

I reckon you could change search providers and remove Google replacing it with an alternative.


You might also find this interesting:

Firefox sends file download data to google

Thanks for helping.

This 'Query OCSP responder servers to confirm the current validity of certificates' was on by default in 32bit Firefox. I unchecked this option but the ip issue still there.

This is happening when I open a new window and homepage is set to about:blank. I removed Google from the Manage Search Engines menu but this issue still happens. Also happens when I download anything from browser 'Save As' option but not if I use a download manager.

Firefox sends file download data to google Only 'exe' files data is sent or for all types of files? And is it only for downloads via browser or even when using a download manager?

This may have the information you are seeking:

Connections established on startup - Firefox - MozillaZine Knowledge Base

Not Myself said:

This may have the information you are seeking:

Connections established on startup - Firefox - MozillaZine Knowledge Base

Thanks for helping.

Maybe one of these from the list in the link:

• Updating phishing sites database. Setting browser.safebrowsing.enabled to false in about:config will disable this feature.
• Prefetching links if the page it's on defines any. See the Prefetch FAQ and network.prefetch-next for further information. To disable pings in prefetched links, see browser.send_pings.
• Updating the Add-ons Blocklist. Setting extensions.blocklist.enabled to false in about:config will disable this feature.
• Updating metadata for installed add-ons (described here). Setting extensions.getAddons.cache.enabled to false in about:config will disable this feature. [2]

Which one of these is safe to disable?

Callender said:

PCrazy123 said:

Firefox sends file download data to google Only 'exe' files data is sent or for all types of files? And is it only for downloads via browser or even when using a download manager?

I don't know but it would make sense if it applies to any downloaded file that contains any type of executable. Also I don't personally use download managers but I'd assume that some come with their own built in malware scans.

So far I haven't found any way of preventing Firefox connecting to Google completely. I'm using several tools/ utilities I still see one connection and haven't yet tracked down the cause of it! I'm using Cyberfox though.

Checked connections with:

Netstat (command)
CurrPorts
CrowdInspect
Comodo KillSwitch
TCPEye
MetaScan Online

All show a single connection:

Thanks for helping.

I always get two\three connections for a few seconds after initial window then connections stop. I am checking with the Network Monitor window in Kspersky Internet Security 2013.

Callender said:

Finally I can run Cyberfox with no connections to Google ip addresses on startup. The single connection was due to setting https encrypted dot google dot com as home page. Even after opening a new (non google) tab and clearing cookies the connection persisted. Changing home page to something else resolved the issue.

Opened a new tab but no connection to Google ip's detected:

Edit:

I'd suggest backing up your Profiles folder and .ini file by copying them to another folder before trying any further modifications. That way you can restore your current profile if needed.

Thanks for helping.

I have homepage always set to about:blank but still the connections happen for a few seconds.

Callender said:

Well on my machine with no connections to Google ip addresses the following apply:

Suggested:
Updating phishing sites database. Setting browser.safebrowsing.enabled to false in about:config will disable this feature.

My config:
browser.safebrowsing.enabled false

Suggested:
Prefetching links if the page it's on defines any. See the Prefetch FAQ and network.prefetch-next for further information. To disable pings in prefetched links, see browser.send_pings.

My config:
browser.send_pings false

Suggested:
Updating the Add-ons Blocklist. Setting extensions.blocklist.enabled to false in about:config will disable this feature.

My config:
extensions.blocklist.enabled true

Suggested:
Updating metadata for installed add-ons (described here). Setting extensions.getAddons.cache.enabled to false in about:config will disable this feature. [2]

My config:
extensions.getAddons.cache.enabled false

Which ones are safe to disable?

Well setting browser.safebrowsing.enabled to false will remove some additional security but maybe you don't want it. See:

Recently Chrome has introduced new feature (also called 'Safe Browsing') to alert you on malicious internet downloads. However due to faulty implementation, this feature often mark good files as malicious and block you from downloading it. On top of that, this annoying feature is useless as most of us already have antivirus on our system to get rid of those malicious files.

Source: Chrome Malware Alert Blocker Tool : Free Tool to Enable or Disable Malicious File Warning in Google Chrome | www.SecurityXploded.com

I believe that the same safe browsing feature has been added to Firefox. It's up to you if you want to disable it. Most users would argue that doing so reduces security.

I don't see any safety issues with disabling the rest.

I know nothing about Kaspersky network monitor. Does it show the process path for the connection?

Also check out some features that have been removed from Cyberfox:

Removed features (Telemetry, Healthreport, Crashreporter And other components that collection information).

https://8pecxstudios.com/Forums/viewtopic.php?f=8&t=298

Do you get the same results if you start Firefox in Safe Mode? If not then possibly one of your add ons is to blame.

Thanks for helping.

I tried it with all add ons disabled but still the same result.