
07-09-2004, 05:20 AM
|
Mystic
Join Date: Feb 2004
Posts: 1,911
|
|
ATTN Firefox Users
Hey just giving fellow Firefox users a heads up. A security hole was found in Firefox. So make sure to go and download the new version 0.9.1
|
|
|
|
|

07-09-2004, 05:30 AM
|
Executive Editor
Join Date: Aug 2006
Posts: 29,160
|
|
Interesting. Since there has been a huge suge in Firefox/Mozilla downloads, there's suddenly more scrutiny of the browser, and holes are going to be found. No doubt there are hackers out there starting to poke and prod at it. And, worse, Firefox doesn't seem to have an "UPDATE" function or any way to automatically check for patches. :-(
I'm using Firefox, and it's not bad, but it's very un-polished.
|
|
|
|
|

07-09-2004, 05:31 AM
|
Mystic
Join Date: Feb 2004
Posts: 1,911
|
|
Quote:
Originally Posted by Jason Dunn
And, worse, Firefox doesn't seem to have an "UPDATE" function or any way to automatically check for patches. :-(
|
They say that will be in the next revision.
|
|
|
|
|

07-09-2004, 05:39 AM
|
Executive Editor
Join Date: Aug 2006
Posts: 29,160
|
|
Quote:
Originally Posted by dean_shan
They say that will be in the next revision.
|
Ah, good to hear!
|
|
|
|
|

07-09-2004, 09:23 AM
|
Swami
Join Date: May 2004
Posts: 4,396
|
|
Re: ATTN Fireforx Users
Quote:
Originally Posted by dean_shan
Hey just giving fellow Firefox users a heads up. A security hole was found in Firefox. So make sure to go and download the new version 0.9.1
|
It sounds like the bug also affects Mozilla users (of which I'm one). I guess I'll have to upgrade....
Steve
|
|
|
|
|

07-09-2004, 09:36 AM
|
Swami
Join Date: May 2004
Posts: 4,396
|
|
Mozilla Vulnerabilities
Quote:
Originally Posted by Jason Dunn
Interesting. Since there has been a huge suge in Firefox/Mozilla downloads, there's suddenly more scrutiny of the browser, and holes are going to be found. No doubt there are hackers out there starting to poke and prod at it.
|
Actually, as this exploit uses browser helpers, which most browsers support, it sounds like it's an issue with most browsers. Whether the exact same exploit can work with IE, Mozilla, Opera, etc. or needs to be tailored to the browser is something I don't know.
However, I do agree that if another browser starts getting more popular, it's likely to get more interest from hackers. However, I suspect any other browsers will have to get a lot more popular (like 30% browser share) before you'll see a significant interest in exploiting them. IE will still be a better target.
Even more, in an article about browser security, Paul Thurrott noted reasons why it might not be as bad a problem even if another browser becomes dominant.
First, IE runs ActiveX items by default, which are notoriously insecure. You can run ActiveX items in other browsers with plug-ins, but the user has to specifically allow that.
Second, IE is integrated into the OS, making it more likely that the OS itself can be compromised. Mozilla, Opera and so on aren't integrated, and therefore are less likely to compromise the OS itself.
Steve
|
|
|
|
|

07-09-2004, 11:16 AM
|
Sage
Join Date: Aug 2006
Posts: 761
|
|
As long as it doesn't get to where I have to update Firefox every week.
|
|
|
|
|

07-09-2004, 06:26 PM
|
Intellectual
Join Date: Dec 2003
Posts: 217
|
|
0.9.1 came out a week or so ago, the current version is 0.9.2.
|
|
|
|
|

07-09-2004, 06:30 PM
|
Intellectual
Join Date: Dec 2003
Posts: 217
|
|
Quote:
Originally Posted by Jason Dunn
And, worse, Firefox doesn't seem to have an "UPDATE" function or any way to automatically check for patches. :-(
|
Double click in the right hand corner of the status bar at the bottom. :wink:
|
|
|
|
|

07-09-2004, 06:35 PM
|
Executive Editor
Join Date: Aug 2006
Posts: 29,160
|
|
Quote:
Originally Posted by c38b2
Double click in the right hand corner of the status bar at the bottom. :wink:
|
Gee, THAT's obvious. :roll: :lol: Strangely enough it told me there were no updates, which doesn't sound right.
Now if I could only get the damn spell checker to work I'd be set! When I right click and do a spell check, the window loads, but there's no content in it. :-(
|
|
|
|
|
|
|