Firefox Not as Secure as some think

Toyman · 02-25-2005, 06:38

http://www.mozilla.org/projects/secu...abilities.html

Granted, they're now fixed, but before that, you were vulnerable. Stop preaching that Firefox is perfect. Yes, it's very good, but we're tired of you religious nazi's telling us so.

***HerrGlock*** · 02-25-2005, 06:53

I have yet to see a program that has over about 100 lines of code that does not have a DoS, overflow, underflow, or other vulnerability of some kind.

Some programs are much tighter out of the box than others and some companies are MUCH more responsive to announcements than others, though.

There is also the idea that some browsers have more permission to do stuff to the OS than others as well. That gives malware a direct line to the kernel of the operating system.

Firefox, mozilla, netscape, opera, galeon, may not be perfect but they at least understand limited permissions a whole lot better than some other browsers out there and thus ARE more secure. If you cannot do as much damage when there is a vulnerability, is that not the browser writers taking security into account?

DanH

David_G17 · 02-25-2005, 07:39

http://www.mozilla.org/download-mozilla.html

when MS puts up a page like that, i'll think about switching.

Washington,D.C. · 02-25-2005, 09:30

There's now a new version of Firefox available,Firefox 1.0.1

fastvfr · 02-25-2005, 15:40

Quote:

Originally posted by Toyman
http://www.mozilla.org/projects/secu...abilities.html

Granted, they're now fixed, but before that, you were vulnerable. Stop preaching that Firefox is perfect. Yes, it's very good, but we're tired of you religious nazi's telling us so.

Who's preaching?

Compared to IE, most ANY browser looks good.

Besides, when both the US Government and Billy Gates are telling you that IE6 is an incredible security risk...you'd be nuts not to at least entertain the notion until you can prove that isn's so, IMHO.

Unless you are Beta-testing a malware scanner or something, that is....

Thanks anyway.

PS Religious Nazis?!?;Q

gamegod86 · 02-25-2005, 20:25

I love Firefox. IMO, for a long time it was simply a small target, and therefore was largely ignored by those that wish to exploit browsers.

I am starting to wonder about that. My occurances of popups are becoming more and more frequent. I think that they are starting to write code to annoy FF users.
.
.
.

David_G17 · 02-25-2005, 20:58

i'm actually more of a lynx kind of guy myself. haven't run into many security vulnerabilities with it yet.

Harlequin · 02-26-2005, 04:50

Quote:

Originally posted by Washington,D.C.
There's now a new version of Firefox available,Firefox 1.0.1

Got a link for that? I see no newer security announcement, the update option finds nothing, and I don't see a download link or any kind of announcement of a new version anywhere.

Dandapani · 02-26-2005, 05:20

Quote:

Originally posted by Harlequin
Got a link for that? I see no newer security announcement, the update option finds nothing, and I don't see a download link or any kind of announcement of a new version anywhere.

http://www.mozilla.org/products/firefox/all.html

i was suprised to find a new point release also.

**vote Republican** · 02-26-2005, 06:40

+1 - I told it check now for new updates and it didn't find any.

Maybe they'll fix that in 1.02. ;Q

Has anyone downloaded/installed 1.01- can you do it directly over 1.0?

Harlequin · 02-26-2005, 09:44

Thanks. I found it after looking a little deeper into the release notes. The problem is that when clicking over to the release site from the icon on the browser it went to the start page, not the download page. It seems to do this automatically when the site thinks you had the latest version. After going to getfirefox.com or something similiar I saw where it had been updated.

hwyhobo · 02-26-2005, 10:48

Quote:

Originally posted by vote Republican
Has anyone downloaded/installed 1.01- can you do it directly over 1.0?

Yes, I have it running. Installation is over 1.0 and is painless.

Religious nazis??
;Q

metallic · 02-26-2005, 11:22

Quote:

Originally posted by vote Republican
+1 - I told it check now for new updates and it didn't find any.

Maybe they'll fix that in 1.02. ;Q

Has anyone downloaded/installed 1.01- can you do it directly over 1.0?

The update feature will go live in a couple of days. The Firefox project doesnt want to overload its update server so they want people to upgrade via other means.

Fireglock · 02-26-2005, 11:31

Quote:

Originally posted by vote Republican
+1 - I told it check now for new updates and it didn't find any.

Maybe they'll fix that in 1.02. ;Q

Has anyone downloaded/installed 1.01- can you do it directly over 1.0?

The notes said to not load 1.01 over an existing install. I removed 1.0 and then loaded 1.01, it picked everything up from the profile folder.

eljefe6 · 02-26-2005, 11:37

I don't remember seeing anyone say Firefox is perfect. However, IE is much, much further from perfection than Firefox. Also, IE hasn't been in development since the release of IE 6. Only recently, Microsoft announced they have started alpha testing an IE that will release with Longhorn.

hwyhobo · 02-26-2005, 15:40

Quote:

Originally posted by Fireglock
The notes said to not load 1.01 over an existing install. I removed 1.0 and then loaded 1.01, it picked everything up from the profile folder.

The only such notice I found had to do with a specific condition, quote:

Quote:

If you are experiencing a crash when entering text into the address bar, you can correct the problem by removing the autocomplete.xpt file from your Firefox components directory, for example C:\Program Files\Mozilla Firefox\components. To avoid this crash, do not install a new installer package on top of an older zipped package.

I installed 1.0.1 over my functioning 1.0 - perfect, no problems.

Fireglock · 02-26-2005, 15:48

Quote:

Originally posted by hwyhobo
The only such notice I found had to do with a specific condition, quote:

I installed 1.0.1 over my functioning 1.0 - perfect, no problems.

All Systems

* Prior to installing Firefox 1.0.1, please ensure that the directory you've chosen to install into is clean and doesn't contain any previous Firefox installations.

hwyhobo · 02-26-2005, 16:07

Quote:

Originally posted by Fireglock
All Systems
* Prior to installing Firefox 1.0.1, please ensure that the directory you've chosen to install into is clean and doesn't contain any previous Firefox installations.

Heh. I didn't see it (it is buried a bit deep). Good catch. Well, I am glad it worked nevertheless.

Thanks for bringing it up.

Ljunatic · 02-26-2005, 19:44

if you are running Firefox 1.0, this page has a link that
will download a patch that updates to Firefox 1.0.1 without a reload.

http://www.mozilla.org/press/mozilla-2004-10-01-02.html

***modgun*** · 02-26-2005, 22:17

Quote:

Originally posted by hwyhobo

I installed 1.0.1 over my functioning 1.0 - perfect, no problems.

+1

***MikeG22*** · 02-26-2005, 23:33

Quote:

Originally posted by Ljunatic
if you are running Firefox 1.0, this page has a link that
will download a patch that updates to Firefox 1.0.1 without a reload.

http://www.mozilla.org/press/mozilla-2004-10-01-02.html

That's for version 0.10 not version 1.0 That was the pre-release beta.

Ljunatic · 02-27-2005, 15:54

Quote:

Originally posted by MikeG22
That's for version 0.10 not version 1.0 That was the pre-release beta.

Thanks Mike, I need to clean my glasses;g

greenlead · 02-28-2005, 23:05

i let yum take care of updating the software on my computer. It makes staying current easy and painless.

I found out about Firefox 1.0.1 because yum told me it installed it.

psst! Yum is a part of Fedora Core.