Slashdot Mirror

Multiple Firefox Security Flaws Discovered

Too bad I can't trust Firefox due to the fact that Firefox is full of gaping security holes. Firefox has so many security flaws you could drive a truck through them. These horrible security failures include:

-Installing Firefox requires downloading an unsigned binary from a random web server
-Installing unsigned extensions is the default action in the Extensions dialog
-There is no way to check the signature on downloaded program files
-There is no obvious way to turn off plug-ins once they are installed
-There is an easy way to bypass the "This might be a virus" dialog

For more information on these security flaws, be aware that Firefox has also killed Linux - NOW THAT I HAVE FIREFOX, I HAVE NO NEED FOR LINUX! Yay open sores!

Multiple Firefox Security Flaws Discovered

Too bad I can't trust Firefox due to the fact that Firefox is full of gaping security holes. Firefox has so many security flaws you could drive a truck through them. These horrible security failures include:

-Installing Firefox requires downloading an unsigned binary from a random web server
-Installing unsigned extensions is the default action in the Extensions dialog
-There is no way to check the signature on downloaded program files
-There is no obvious way to turn off plug-ins once they are installed
-There is an easy way to bypass the "This might be a virus" dialog

For more information on these security flaws, be aware that Firefox has also killed Linux - NOW THAT I HAVE FIREFOX, I HAVE NO NEED FOR LINUX! Yay open sores!

Multiple Firefox Security Flaws Discovered

Too bad I can't trust Firefox due to the fact that Firefox is full of gaping security holes. Firefox has so many security flaws you could drive a truck through them. These horrible security failures include:

-Installing Firefox requires downloading an unsigned binary from a random web server
-Installing unsigned extensions is the default action in the Extensions dialog
-There is no way to check the signature on downloaded program files
-There is no obvious way to turn off plug-ins once they are installed
-There is an easy way to bypass the "This might be a virus" dialog

For more information on these security flaws, be aware that Firefox has also killed Linux - NOW THAT I HAVE FIREFOX, I HAVE NO NEED FOR LINUX! Yay open sores!

Multiple Firefox Security Flaws Discovered

Too bad I can't trust Firefox due to the fact that Firefox is full of gaping security holes. Firefox has so many security flaws you could drive a truck through them. These horrible security failures include:

-Installing Firefox requires downloading an unsigned binary from a random web server
-Installing unsigned extensions is the default action in the Extensions dialog
-There is no way to check the signature on downloaded program files
-There is no obvious way to turn off plug-ins once they are installed
-There is an easy way to bypass the "This might be a virus" dialog

For more information on these security flaws, be aware that Firefox has also killed Linux - NOW THAT I HAVE FIREFOX, I HAVE NO NEED FOR LINUX! Yay open sores!

That's http://getfirefox.com BTW.

This is wonderful news for Mozilla. With the increasing popularity of FireFox among non-geeks, now is the perfect time to convert Outlookers to Thunderbird.

Spam - the hardest of the ones you've mentioned.

Virii, worms - having a clue about computers will help in most cases. In the other cases, all you can do is pretty much installing patches as soon as possible.

Spyware - Tell him about Firefox.

Goofy OS problems - not a problem with the internet, I think...

Easy Instructions:
a) Download Firefox.

b) Download anti-spyware (ad-aware, Spybot)
c) Get off the internet.
d) Run the anti-spyware to make sure your machine is 100% virus and spyware free.
e) Activate your winxp firewall.
f) install Firefox.

Ta-da! :)

Get Firefox.

The internet experience doesn't have to be this way, but when the powers that be (Microsoft, mostly) sit on their laurels and allow the situation to degenerate, what hope is there?

I don't know what my neices are doing, but their PCs seem to soak up spyware like a sponge.

I know exactly what they're doing, and you can stop it. Firefox's XPI system has a whitelist of approved plug-in sources reviewed by actual human beings, unlike ActiveX where any spyware publisher that slips Verisign a couple hundred USD can get on the whitelist. If you have a good enough software firewall on the nieces' PC, you can implement your own whitelist and prohibit explorer.exe and iexplore.exe from accessing any host outside of Microsoft.com, which should block spyware but not Windows Update.

I don't use IE since Firefox 1.0 were released and since this date my machine runs WITHOUT spywares.

I use this program, seems good, but, I don't use IE, then I don't need spyware removal tool.

[]s

---

http://www.getfirefox.com/

"What more should I patch?"

Well, this site seems to have a good solution to every problem you've ever had regarding Internet Explorer... but, I'unno.

Good for SkyOS, possibly, rather a non-event from a Firefox perspective, at least numbers-wise.

That's right. SkyOS is too small of a project to be any of significance. And everybody knows no small projects ever become big ones, right?

Too bad I can't trust Firefox due to the fact that Firefox is full of gaping security holes. Firefox has so many security flaws you could drive a truck through them. These horrible security failures include:

-Installing Firefox requires downloading an unsigned binary from a random web server
-Installing unsigned extensions is the default action in the Extensions dialog
-There is no way to check the signature on downloaded program files
-There is no obvious way to turn off plug-ins once they are installed
-There is an easy way to bypass the "This might be a virus" dialog

For more information on these flaws, Click Here for information.

Too bad I can't trust Firefox due to the fact that Firefox is full of gaping security holes. Firefox has so many security flaws you could drive a truck through them. These horrible security failures include:

-Installing Firefox requires downloading an unsigned binary from a random web server
-Installing unsigned extensions is the default action in the Extensions dialog
-There is no way to check the signature on downloaded program files
-There is no obvious way to turn off plug-ins once they are installed
-There is an easy way to bypass the "This might be a virus" dialog

For more information on these flaws, Click Here for information.

Too bad I can't trust Firefox due to the fact that Firefox is full of gaping security holes. Firefox has so many security flaws you could drive a truck through them. These horrible security failures include:

-Installing Firefox requires downloading an unsigned binary from a random web server
-Installing unsigned extensions is the default action in the Extensions dialog
-There is no way to check the signature on downloaded program files
-There is no obvious way to turn off plug-ins once they are installed
-There is an easy way to bypass the "This might be a virus" dialog

For more information on these flaws, Click Here for information.

Most of my dual processor systems *rarely* use both processors. I think I've only noticed one program (a commercial OCR program) that seems to be programmed to take advantage of dual processors).

There are all sorts of ways for an app to take advantage of SMP. You just don't see them implemented because until the recent announcements of multicore CPUs, there just hasn't been a market for dual processors, partly because (possibly until recently?) 2-core machines needed a more expensive version of Windows (Professional vs. Home Edition) than a 1-core machine with double the GHz.

I think the older versions of Netscape may have an explicit problem with dual processors if Javascript is enabled.

That is a bug. Bugs like that will be reported and fixed as SMP penetration increases. Have you tried upgrading to the latest version?

Get it here

Oh yeah! The ad for Mozilla Firefox is in the centerfold of the frontpage section of today's (Thursday, December 16, 2004's) issue of The New York Times. Now that is something to pin up on your wall!

It's called Firefox.

Now if only they would let me change the Internet search default from MSN to Google I'd be set! ;)

And, to top it off, Firefox is TMBG preferred browser. Nice!

Well, what's interesting, however, is that I was in one of the computer labs on Tuesday, and ITS still had Internet Explorer as the default browser on some two thousand lab computers at University Park. They couldn't have changed it over in one day. In addition, since ITS does only cover University Park, half of those 80,000 students at Commonwealth campuses will still use IE. This is a welcome decision, but ITS needs to back it up with words by installing Firefox on its public computers, and encourage the computer services departments at the other 21 campuses to do the same.

there's also firefox :)

Whoah, don't hide you motive AC *this is what you mean*

save yourself. Get Firefox. (I never thought I would have to do this on Slashdot.)

Next time try linking to them instead of just typing them:-
http://www.getfirefox.com/
http://www.spreadfirefox.com/

That entire article was written on the basis of the fact that most people incorrectly use word processors!

Either that, or that word processors' tutorials encourage users to use them incorrectly. In addition, many users of Microsoft Word for Windows are upgrading from WordPad bundled in Windows 2000, which doesn't seem to expose any GUI for style sheets, and carrying their learned anti-patterns with them.

If I sent my Dad a Tex document, he'd be pissed off that he had to read all of that \section{} crap along with the text, because we both know he isn't going to have anything that will render Tex.

If he's coming from a fresh install of Windows, we both know that he may not have anything that will reliably read Microsoft Word documents either, as not all PC vendors bundle a Microsoft Word license, and WordPad can't read everything that Microsoft Word can put into a .doc file. You need to negotiate a common format, and if you use LaTeX, then such formats include HTML, which a standard web browser can read.

Mouse gestures, automatic numerical forward/back and image zoom, popup blocking, skinning, tabbed browsing and UA spoofing.

Ok, so I liked Opera when I used it for a while. But firefox kicks its butt. I prefered FF myself because there were no ads (although you can add them if you want them)

But all of these features are available as FF extensions... even adding google ads to your browser.

I don't want to sound like a zelot, but FF is cheaper, ad free and does all that plus some. Email client? IRC client? That's what Thunderbird/Chatzilla/Mozilla suite are for.

It's your money, but I know where I'll be putting mine. Straight back in my wallet.

I wonder though, why would anyone want to switch to a google branded version of Firefox? There is already a toolbar for firefox that searches google.

Do you even use Firefox? Just because the reporter talks about Firefox and operating systems doesn't mean anything. The technologies that Firefox utilizes are cross platform, meaning that a company can design an client-side application, and it automatically has support for Linux, Mac, and Windows.

It's already a simple, quality browser. I recommend trying it out.

Please please please dump IE. That ALONE is the ONLY reason my users have problems. It always ends up being (spy|ad|mal)ware that breaks something (again, our mission-critical app is poorly designed and most anything will break it), and the only way for it to get on the computer is through IE. Period.

I of course recommend Firefox.

Yep, their only option is to differentiate by going non-standard. Ok, more non-standard.

God help us.

Spread the fire

Gerv, who works for mozilla/bugzilla, already went through this, and found several ways around google's hackery. He then went and summarized the multiple ways to do it in good browsers.

How about if Slashdot would open up their logfiles? Same crowd, but bigger sample...

http://www.spreadfirefox.com/

and

http://www.getfirefox.com/

I hate registering

So use Bugmenot. If you are really clever you can use Firefox and use the bugmenot extension. hOORay!

No need to waste a mod point on something that does not deserve it.

Forget the Google Toolbar for Internet Explorer, just Get Firefox - The Browser, Reloaded.

Oh and if you want to pay for 2GB go with Yahoo! Mail. Far better than Hotmail and the same price. :-)

What about this anti-phishing tool? It's worked pretty well for me.

Jason

Windoze 9x/ME/2000/XP PC + New high speed cable connection + No firewall + No anti-spyware + No anti-virus + Kazza = The Killer CombinationTM!

Seriously folks, get yourself a decent firewall, don't trust Internet Connection Firewall in Windows XP, get anti-virus, get Spybot, and DITCH IE!