Slashdot Mirror

Just grab the fix instead. ;)

Copy/paste this (linking doesnt work)

They were already working on patching this, but it was stolen before they could finish and leaked to bugtraq with LIVE material in the exploit (it's not a proof of concept, folks!) and no explanation or advisory.

Reminder: Bugzilla blocks /. referers. Copy URL and paste in new to view. (Beware Slashcode's extra spaces.)

https://bugzilla.mozilla.org/show_bug.cgi?id=29269 1 %lt; Original security bug (probably still blocked to outsiders to prevent someone stealing it before mitigation)

https://bugzilla.mozilla.org/show_bug.cgi?id=29330 2 %lt; Duplicate (reported after leak)

They are going to release a 1.0.4 shortly, I gather.

Still more timely than most of Microsoft's advisories... despite their earlier announcement. http://www.eeye.com/html/research/upcoming/index.h tml

They were already working on patching this, but it was stolen before they could finish and leaked to bugtraq with LIVE material in the exploit (it's not a proof of concept, folks!) and no explanation or advisory.

Reminder: Bugzilla blocks /. referers. Copy URL and paste in new to view. (Beware Slashcode's extra spaces.)

https://bugzilla.mozilla.org/show_bug.cgi?id=29269 1 %lt; Original security bug (probably still blocked to outsiders to prevent someone stealing it before mitigation)

https://bugzilla.mozilla.org/show_bug.cgi?id=29330 2 %lt; Duplicate (reported after leak)

They are going to release a 1.0.4 shortly, I gather.

Still more timely than most of Microsoft's advisories... despite their earlier announcement. http://www.eeye.com/html/research/upcoming/index.h tml

Bugzilla bug 293302 has been filed. A temporary fix has been implemented on UMO.

This was reported to the mozilla bugzilla a while ago. https://bugzilla.mozilla.org/show_bug.cgi?id=29269 1

Or you could install Html Validator (based on Tidy) extension and then you don't have to do anything. The number of warnings and errors will be displayed in a popup in the statusbar.

Though, for this page (at +5) it only shows 1 warning..

Works great here. Fair enough, it only zooms images one at a time, but isn't that enough?

The SeaMonkey project will keep the suite alive. While we pick different features to include, development is still very active. The "lack of resources" discussed in other stories was on the Mozilla Foundation side (there's a lot involved in pushing out a release), not on the developer side.

There is a way to reduce the amount of memory Firefox uses, you know.

Go to about:config
Set (or create if nonexistent) browser.cache.memory.capacity to, say, 4096. This sets memory cache to 4MB.
More on http://www.mozilla.org/support/firefox/tips

Change the search mode in the address field

By default, if you enter a search term in the address field and press Enter, a Google "I'm Feeling Lucky" search is performed, and you're taken to the first result of that search directly. If you prefer to see the standard search result list instead, add the following code to your user.js file:

// Change to normal Google search:
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q =");

Of course, you could also change to a completely different search engine by changing the string to something else. The default search string is: "http://www.google.com/search?btnI=I%27m+Feeling+L ucky&q=".

Have you seen this stuff?

http://www.mozilla.org/support/firefox/tips

https://addons.update.mozilla.org/extensions/showl ist.php?application=firefox&numpg=10&category=Kios k%20Browsing

http://tln.lib.mi.us/~amutch/pro/phoenix/kiosk.htm

http://malektips.com/firefox_0007.html

Maybe use moz instead
https://addons.update.mozilla.org/extensions/showl ist.php?application=mozilla&version=1.7&category=K iosk%20Browsing

You might also want to vote for this:
https://bugzilla.mozilla.org/show_bug.cgi?id=3341

Have you seen this stuff?

http://www.mozilla.org/support/firefox/tips

https://addons.update.mozilla.org/extensions/showl ist.php?application=firefox&numpg=10&category=Kios k%20Browsing

http://tln.lib.mi.us/~amutch/pro/phoenix/kiosk.htm

http://malektips.com/firefox_0007.html

Maybe use moz instead
https://addons.update.mozilla.org/extensions/showl ist.php?application=mozilla&version=1.7&category=K iosk%20Browsing

You might also want to vote for this:
https://bugzilla.mozilla.org/show_bug.cgi?id=3341

Have you seen this stuff?

http://www.mozilla.org/support/firefox/tips

https://addons.update.mozilla.org/extensions/showl ist.php?application=firefox&numpg=10&category=Kios k%20Browsing

http://tln.lib.mi.us/~amutch/pro/phoenix/kiosk.htm

http://malektips.com/firefox_0007.html

Maybe use moz instead
https://addons.update.mozilla.org/extensions/showl ist.php?application=mozilla&version=1.7&category=K iosk%20Browsing

You might also want to vote for this:
https://bugzilla.mozilla.org/show_bug.cgi?id=3341

Have you seen this stuff?

http://www.mozilla.org/support/firefox/tips

https://addons.update.mozilla.org/extensions/showl ist.php?application=firefox&numpg=10&category=Kios k%20Browsing

http://tln.lib.mi.us/~amutch/pro/phoenix/kiosk.htm

http://malektips.com/firefox_0007.html

Maybe use moz instead
https://addons.update.mozilla.org/extensions/showl ist.php?application=mozilla&version=1.7&category=K iosk%20Browsing

You might also want to vote for this:
https://bugzilla.mozilla.org/show_bug.cgi?id=3341

There's an extension already (RiteOfTongue) that does spell-checking in forms in Firefox. I don't have it installed myself, but it's out ther.e

I don't see the problem with the Firefox icon, BTW.

The next release of Mozilla (it won't be called Mozilla) will get any features that are Core bugs. The cached back and forward feature is a Core change. Sanatize is not.

Take a look at bug #72352
https://bugzilla.mozilla.org/show_bug.cgi?id=72352

Cache != memory leak. Memory leak means that memory is allocated but never will be used again; it's a type of error in software. A cache is a deliberate thing; something is kept closer to the processor for speed reasons. They use those in-memory (or on-disk) copies of images to avoid reloading them from a website.

I'm not saying your problem isn't real - I'm sure it is - but you'll need to understand this distinction to make a proper bug report. If you talk about "memory leaks" and "lowering browser.cache.*", your report will be closed as NOTABUG quickly.

Maybe you could suggest a lower default value, a dynamic limit based on physical memory, or some way of detecting images that are unlikely to be used again (such as these weather loops).

With that in mind, head to bugzilla and file. Also, make sure no one else has filed a similar report. If they have, vote for it instead of filing a duplicate. Add comments only if you have something new to say (not just "me, too" - that's what the vote is for).

Will they finally fix the title-tag bug that has been an issue in the browser for five years?

Link pre-fetching, as performed by Mozilla/Firefox, is an opt-in thing. Webmasters should add the "rel='prefetch'" attribute to their tags to enable software to intelligently prefetch links.

It's safe, it's an emerging standard, and webmasters maintain control. Why isn't Google following the standard?

This isn't really so much a review as a description of features currently in the nightly. Firefox 1.1 isn't expected until June at the earliest. The roadmap (http://www.mozilla.org/projects/firefox/roadmap.h tml) gives a rough overview of the timeframes involved right now, though it is not always accurate as it isn't updated frequently.

Honestly, Firefox 1.1 isn't even in alpha-release yet. To take some highly unstable code and to "preview" it is a bit premature right now. I would call 1.1beta a better time to 'preview' things, as hopefully by then there will be a feature freeze and things will have stabilized a bit. I'm not kidding about the unstable bit either: up until a couple days ago themes and extensions wouldn't install in the nightly builds.

In fact, an article like this does a disservice because it's misleading the /. crew. Yes, an incredibly fast back/forward feature has been checked in to the latest nightly builds, but what they won't tell you is at present this feature is DISABLED. While that doesn't mean it won't be enabled in the future and might be enabled for 1.1, as it stands this feature is off by default and only accessible through a custom pref, so in its current state it changes nothing for the average end-user.

This forums post gives a better idea of the new features to be expected in 1.1 with one line sentences: http://forums.mozillazine.org/viewtopic.php?t=2577 66

Huh, what rendering bug? I mean Slashdot looks like this to everyone, right?

Gee.. I wonder why you posted that as an AC

Using linux does not have to mean typing in scripts at a bash shell.
Linux can be made to look and act just as point-and-clicky as windows.

Using K12LTSP enables you to quickly set up a large school network where students have access to office applications, web browsing, photo editing, desktop publishing, web publishing,programming languages , etc.
It also centralizes network administration, allows for recycling hardware, and saves a ton of money on software licensing.
It is important to teach computer concepts, not just the nuances of the latest proprietary office suite.

Just remember, It should never under any circumstances be the responsibility of educators to teach brand loyalty.

I think they are mistaken. Link prefetching is a standard, and the webmaster is in charge of deciding which links are prefetched, by adding the appropriate tags to links.

No. Your site shouldn't add the prefetching tag to the "logout" links.

Pre-fetching is an opt-in thing by webmasters/web designers. It's not evil.

Article says: The chief drawback of OpenOffice is that it still lacks an equivalent to Microsoft's excellent Outlook e-mail and calendar program. This need not be a fatal flaw. If you're fine with a simple e-mail program, you can download the free Thunderbird program from www.mozilla.org. If you need more features, just buy Microsoft Outlook for $109

Don't forget about Sunbird. Yes, it's also in beta (and still at version 0.2 as of this writing). But it already has several of the features of Outlook that Tbird lacks (calendars and tasks management).

Never give up the search for an OSS solution!

Tried to paste an example tag, but I guess I can't, anyway, here are the docs on it.

http://www.mozilla.org/projects/netlib/Link_Prefet ching_FAQ.html

OK so maybe it does.

Darn.

You can drastically speed up PDF load times if you disable all the unneeded plugins:

1. Install Adobe Reader 6.0 and notice where it is installed.
2. Navigate to that folder in Explorer, locate the plug_ins subfolder and rename this folder to plug_ins_disabled.
3. Create a new plug_ins folder.
4. Move the files EWH32.api, printme.api and search.api from plug_ins_disabled to plug_ins.

From http://www.mozilla.org/support/firefox/faq#acrobat

You also realize that one of the biggest advertisers on this site is Microsoft? Didn't you just scroll thru the big ad for Visual Studio.net?

Most of us use Firefox, available here. This browser offers a feature to "extend" it's functionality through what they call "extensions". One of such "extensions" is called "AdBlock", available here.

"Mozilla/Firefox/Opera do not have the google toolbar."

You are wrong, and I dub thee "fuckbeak" for the error...

Google Toolbar Firefox Extension: (there are actually multiple flavours)
https://addons.update.mozilla.org/extensions/morei nfo.php?id=33

Calender for firefox. Its based on Sunbird. (Or Sunbird is based on the Calender component, I'm not sure which came first).

Calender for firefox. Its based on Sunbird. (Or Sunbird is based on the Calender component, I'm not sure which came first).

They do predictive prefeching of pages. That's probably why they said it's primarily for broadband users. Though they might use their servers for this as well, predictive prefetching can be done entirely locally.

Will Google Web Accelerator affect my server load or usage statistics?

It depends on whether your pages are cacheable. You can identify page requests prefetched by Google Web Accelerator through the HTTP header X-moz: prefetch. You can learn more about this header on the Mozilla website.

Interesting project. It looks like apache supports compression, but not automatically (the user has to manually gzip the pages to be sent compressed).

Hm, there are still people who do not use Adblock?

You're obviously not visiting slashdot enough. That's your problem. ;)

J/k. I haven't seen the bug in quite a long time, myself. Several months. At least since before v1.0.1 came out. Not sure if that's related though.

Of course, posting that statement guarantees that I will see it before the end of the day. =)

I've also heard that the problem may be with certain ads, so having an adblocker may circumvent the issue. If you really want to get the rendering bug, I recommend searching the Bugzilla database for Mozilla/Firefox:
https://bugzilla.mozilla.org/query.cgi

https://bugzilla.mozilla.org/show_bug.cgi?id=26336 7

Copy and paste the link above, omitting the space that Slashdot inserted. Bugzilla doesn't like it when people link from Slashdot to Bugzilla.

It's a real bug, and this is the most recent report of it. Some of the developers get quite snippy when they hear that Thunderbird isn't perfect.

Trouble is, sensing the browser's capabilities via a client-side script is a security violation, so one can't check "svg.enabled" either. However, if an svg image is not displayable, there is no error; it is just not visible. So for one extra server exchange, there could be a cover page which redirects the user to the proper version of the html data. Old-fashioned and 90's-style, but works.

Hard to say. The discussion around bug #240493 makes it sound like image/svg+xml (the MIME type for SVG) might not even be in the Accept Header. To me that sounds very very odd. It also makes it impossible to decide simply based on the accept header whether or not to serve SVG. This means client side scripts (to detect support) and another trip to the server (to get the appropriate file).

I do, and I did (until they added WIDTH="100" to it). However, that's a bug in Gecko's table rendering and nothing else.

SVG has been a compile time option since at least 2000. See the beginnings of netscape.public.mozilla.svg

SVG has been a compile time option since at least 2000. See the beginnings of netscape.public.mozilla.svg

I actually just tried out Friday's nightly yesterday. Up to now I've been relying on the Adobe SVG Viewer (ASV) 6.0 Beta in Firefox, along with some advice from surfers using the SVG-enabled Mozilla. It definitely looks cool and seems to render faster than ASV. There's less of a feeling that the SVG is a separate entity and more that it's just part of the page.

I did a side-by side comparison of ASV in IE and native SVG on my site. My examples are all very simple and rendered almost identically. The major exception to this is that filters are totally missing. From the Mozilla project page:
"Big areas of the SVG specification where we're still lacking include filters, svg defined fonts, and declarative animations."

It's a beta, so I don't expect it to be complete, but it brought to mind the utility of having a simple way to check which implementation of SVG is being used to render the page. For example, without knowing that animations aren't supported, the casual user will be very confused as to why an SVG-based game simply doesn't function. Right now it's not casual users who are downloading this build (the nightlies), but there will always be differences between implementations, so when the next release comes out I hope it's simple to tell how the SVG is being rendered.

It's also a good idea to pay attention to the version of the standard supported, whether it's Tiny or Full and whether it's 1.1 or 1.2 (which could come from W3C in May).

SVG support are great news for our beloved Firefox but what, IMHO, would be a killer feature will be XForms support in order to make all those akward "tecnologies?" like ASP, JSP, JSF, tiles and such to "softly and suddenly vanish away".

AFAIK the XForms Mozilla project http://www.mozilla.org/projects/xforms/ is progressing right but it will just be great if it could also be available too.

Regards.

We've already done that, in fact. The next version will be called "Deer Park". https://bugzilla.mozilla.org/show_bug.cgi?id=29038 3

Enjoy!

i've filed Bug 290057 "Thunderbird should integrate with the Spotlight Search" https://bugzilla.mozilla.org/show_bug.cgi?id=29005 7 (no link bugzilla doesnt like /. links) some time ago

If your download went through the URLs listed in these links, and you're not talking about using Firefox's built-in update service, then your download was probably counted. http://www.mozilla.org/products/firefox/all.html

If your download did not go through one of those links, then you aren't counted.

- A