Slashdot Mirror
Firefox 1.0.1 Released
homeobocks writes "Firefox 1.0.1 has been officially released by the Mozilla Foundation, with some important security fixes. An announcement and release notes are available." Presumably this fixes the window injection vulnerabilities.
Have they released any info on new signups as a result of the Firefox 1.0 NY Times Advert?
serenity now!
From changelog: International Domain Names are now displayed as punycode.
(wiki linkage mine).
If the downloads for Firefox become overloaded today/tomorrow, Coral cache mirrors:
t =firefox-1.0.1&os=win&lang=en-US Windowst =firefox-1.0.1&os=linux&lang=en-US Linux
http://download.mozilla.org.nyud.net:8090/?produc
http://download.mozilla.org.nyud.net:8090/?produc
Let's say someone is finished browsing pr0n for the night and wants to clear the cache, history and cookies automatically on browser exit. Is this possible with Firefox via a setting or script?
from tfa:
You can now make links opened by other applications open into a new tab, reuse an existing tab, or open a new window.
Does it play well with Tabbrowser extension?
Usually any app that does this kills off my saved session. (grrrr).
Here's hoping.
And, isn't msi support supposed to be available?
(if it is there I did not see it)
Have you read the moderator guidelines? Well, have you, PUNK? (and I want a Karma: Gnarly option)
the breaking news about Mandrake acquiring Connectiva??
v2sw7CUPhw5ln6pr5Pck4ma7u7LFw0m6g/l7Di5e6t5Ab6TH.
Nope, the center column still goes off to the left.
Firefox 1.0.1 is supposed to have only security and stability fixes. Unless an unstable engineer feels insecure about Slashdot fans complaining about the Slashdot bug, I don't think it'll be fixed until Firefox 1.1.
What a fool believes, he sees, no wise man has the power to reason away.
Hello FUD.
From changelog:
International Domain Names are now displayed as punycode. To show International Domain Names in Unicode, set the "network.IDN_show_punycode" preference to false.
It's just no longer the default, which is what most have been crying for, right? Better security by default so our less web-savvy family and friends don't get owned online?
Oops. On further exploration, I see that it's fixed in the trunk, and the fix will be included in the 1.1 release (I guess must have misread that to say 1.0.1). In the meantime, there's always the SlashFix extension.
It's hard to be religious when certain people are never incinerated by bolts of lightning.
It says no updates available... Do I need to actually update from the site?
It's about time they fixed those security issues. I was getting tired of using Internet Explore in the meantime.
Does the security fix remove internet explorer?
Any word on if this includes fixes for the massive memory leaks in the OS X port? I know they were on track for 1.1, but it's possible they could have made their way into 1.0.1......
-- If you try to fail and succeed, which have you done? - Uli's moose
... over at the burning edge.
They removed default compatibility for international domain names. I wonder how much of an impact this will have on foreign adoption of Firefox over IE
None. IIRC they just turned off IDN support, and did not remove it. If someone needs it, the can turn it back on.
IE has no IDN support without third party software, so Firefox is still a better choice if you need IDN support.
The great advantage of having a reputation for being stupid: People are less suspicious of you.
Try this site: It shows a sarcastic popup saying "your browser has successfully blocked a popup!" http://www.indianmasala.com/
How insulting!
Here is the full list of changes and related bugs for Firefox 1.0.1.
You'll note that it's quite terse - this is not the 1.1 update from trunk that will get us rendering fixes, etc. that we'll see in June or so. Almost all security fixes here.
- Allen Pike
Altering time, one time at a time.
Your statement is misleading.
Support for IDNs is still present, it's just that after inputting a URL using an IDN domain name like http://www.göögle.com/, it is displayed as the punycore representation in the address bar: http://www.xn-ggle-5qaa.com/
The merits of this work around are certainly up for debate (hint: the debate started years ago).
Seeing as no currently shipping version of Microsoft Internet Explorer supports IDNs... you can probably stop wondering.I submitted a feature request / bug report regarding the lack of a true "back" button which actually keeps a true page history instead of just a list of URLs (ideally the server would have no idea you hit "back" and would recieve no request at all).
It turns out problems like this are actually put there on purpose because banking sites have threatened to block Firefox if it doesnt do this.
As for why there's no about:config option, that's for Jesus to figure out.
-- 'The' Lord and Master Bitman On High, Master Of All
If not, get this in the meantime:.
Be friendly to the Mozilla.org mirrors, they
have set up an official Bittorent seeder.
-Jed
( http://bittorrent.mozilla.org/ )
They are going to enable that in a few days, after those who know about the upgrade have cleared from the servers, lest they be fried.
As I mentioned in the story, 1.0.1 contains fixes for 9 security holes, some of which allowed spoofing.
MOUNT TAPE U1439 ON B3, NO RING
Is anyone else getting the type a URL into the URL bar crash?
It doesn't matter what URL I try to enter, with tabs or without, *boom* it crashes.
My email addy? should be easy enough.
Hopefully Slashdot will render correctly in this version.
Even the original Mozilla, which is bloated, uses a mere 20,482K to open slashdot.org, while it can open up my loads of e-mail only using 24,223K of RAM. Using Thunderbird in addition to Firefox, since they don't share the same instance of the Gecko rendering engine, causes another 28,292K of RAM to be used. Internet Explorer 6 even with SP2, on the other hand, only consumes about 3,840K of RAM to open up slashdot.org, and Outlook Express only consumes 2,248K.
I recall it even being worse on Linux due to the fact that it loads quite a large amount of libraries with it, that runs slowly under older machines even under Fluxbox or the ultra-minimalist evilwm.
Whatever Firefox does, it should have made it a priority before the 1.0 Release to clean up the amount of RAM it abuses to do what it does. Even after waiting months for 1.01, it seems to have gotten worse than I recall, and I haven't put it in debug mode or developer mode or anything -- I disabled anything like that in the Custom Installation.
But fortunately, I've got 1GB of RAM, and there's barely any spyware, so I'm ok with it now. I just wish I didn't have to put either Dillo for Linux or IE6 on Win98 for those old late Pentium Is / early Pentium IIs I fix up for people in my spare time, since Firefox is a nice browser despite its flaws. Too bad it won't run decently on anything less than a Pentium III with 256MB of RAM.
- - - - - Fear not the reaper, but my shiny white teeth.
Wow, I'm guessing this was an attempt to be funny, but it missed so badly I had a hard time figuring out what it was trying to say. Thanks for the useful post.
I've gone back to 1.0 and there are no problems. here's a link to the windows 1.0 versions in case anyone else similarly needs to revert back.
Some of those self-same Slashdot fans are unstable engineers.
Lost at C:>. Found at C.
I'm gonna read about it tomorrow on Slashdot! Or maybe even later tonight!
Now if you're worried about putting too much strain on the Mozilla download servers, use the BT links!
Alternatively, this page lists translations and direct download links
They upped the number of localized versions.
So why is there a software update "Check Now" button in the FireFox options, when it doesn't find and install this? Is it a feature that has yet to be implemented, or is there some other configuration setting I need to do first for it to work?
Not that it's tough to manually download & install the update. It'd just be nice if I could tell my co-workers to "click on this button and it'll update itself."
I think a better approach to this issue would be an "intelligent" punycode display. For instance, if any ASCII character is respresented using IDN characters then AND ONLY THEN should punycode be used.
As I understand it, there is only one IDN representation of non ASCII characters, if the only characters using IDN are non ASCII, then the address cannot be spoofed. However if an ASCII character is being represented using IDN representation, then spoofing is likely taking place, switch to punycode. This would preserve the ease of use for end users (punycode url are incomprehensible however much more comprehensible than other things they may be) without affecting the security since unnecessary use of IDN codes would trigger the "fishy" flag.
What do you think? Does this approach make sense. If so what is the best way to transmit this view to Firefox developpers?
Of course, I could be out to lunch on this one too, since I don't know in detail how the IDN thing works.
I like my dinosaurs feathery, and my pterosaurs hairy (or is it pycnofibery?)
I would be interesting to see how many people download 1.0.1 over time vs 1.0. Statistically it would be hard to say how many people upgraded, didn't upgrade, first copy of firefox was 1.0.1 but, I would like to see the number seperately.
It's nice to see so much enthusiasm in the computer world. Personally, I've loved Firefox. It's nice to have the same browser in both Windows and Linux. Got it late (about 2 months ago), but it's done me good. I couldn't go back to non-tabbed browsing and no nested searches window. Also, scanned with ad-aware today. Only two files!!! Both in IE cache from the few times I've had to use IE for ActiveX integrated sites. Used to think 500 was normal. Thanks Firefox, and I expect more good coming from this.
That's not actually a popup, it's just an image inside an with CSS "position: absolute". There's no way to stop this unfortunately, blocking absolute positioning would screw up a lot of site's layouts.
It blocks fine in 1.0 and 1.0.1.
Regards,
steve
Secondly, FF is NOT faster, despite the FUD that FF zealots like to spread. I've timed both and it takes FF several seconds longer to start up as well as to render a complex page.
/. story with browser speed comparison. Opera is faster, but IE is actually faster than Firefox in most operations.
Well said... Check previous
Have you seen the GrApple themes?
Über secks.
--
the strongest word is still the word "free"
It might be time for you to do a little more reading...
The issue isn't an ASCII letter being "represented using an IDN representation" in the way that you seem to imply.
It's a matter of an ASCII character being replaced with a unicode letter that LOOKS the same. It's not just a different way of encoding the same character, it's an entirely different letter that just LOOKS like the letter it is impresonating.
That's why it's called a homograph attack. :)
Sadly, this update doesn't fix the crashes I've been experiencing lately. Firefox crashes with me on certain URLs, especially those crappy xanga/myspace pages that are heavily-laden with video and sound. Before 1.0, I never experienced a crash. I make sure to submit the crash reports, though, so hopefully someone can figure out what's on.
It's just not on some mirrors.
Why not use the torrent?
It's only an insult if it's not true.
Windows users who have problems with Mozilla software (Firefox, Thunderbird or Suite) being too slow or using too much memory and CPU, check out the Moox optimized builds.
One of my friends reported having constantly about 100 MB more free memory after switching to Moox M2 in his Athlon XP. A bit of a warning though: I tried to install original 1.0.1 over Moox M2 1.0, and it now crashes every time I press enter in the URL bar. Now typing in Internet Explorer, I'm anxiously waiting for Moox optimized 1.0.1 builds to come out and solve the situation.
To show International Domain Names in Unicode, set the "network.IDN_show_punycode" preference to false.
Please tell me to do it there's a more intuitive way to do that in the GUI.
Irritable, left-wing and possibly humorous bumper stickers and t-shirts
Wow. This statement epitomizes everything that has gone wrong with slashdot!
Interesting. I do not have that plugin installed, however I do have another (adblock) that overlays flash animations with a clickable tab. Perhaps that could be what is causing the problem.
That's, um, not exactly a popup. That's a picture of a windows popup, in the webpage itself.
Somehow the illusion is less convincing when you use a Macintosh and you find yourself looking at a Windows XP window border...
Irritable, left-wing and possibly humorous bumper stickers and t-shirts
Don't worry about the cache, as IIRC it's encoded such that it only means something to the browser
Not so. Type in "about:cache" (not the quotes). From there there are links to view the contents of the cache.
Seriously, you need to spend a little more quiet time with google. +firefox +popup +blocking +tutorial
It's not hard. I see nothing except for the odd tiny fraction of css crap.
Fix it yourself because - 'they' - will never hold your hand until it works just nice and peachy the way you personally want.
If a site you like has more advertising than actual content, then maybe you need to go elsewhere. The net is a pretty big place, apparantly with lots of duplication...
Here is an example how Firefox 1.0.1 shows IDN names.*
Click the Fake and Real link to see the difference.
The Fake site will not work with Internet Exporer with the latest service pack.
*Requires Firefox 1.0.1
I'm a virgo and on Slashdot. Coincidence? Yes.
How is this going to affect the download stats? Will we now have double the numbers because everyone has to download it again?
True, some people seem a bit worried that Slashdot.org is turning into FireFoxNews.org. But I'm with you
Remember that it's not just one geek-friendly browser we're talking about here - the future of the entire internet's at stake. The popularity of this one browser could be the only thing that prevents the web turning into a microsoft-dominated proprietary system a few years down the line, destroying any chance linux might have had on desktop machines.
And if that's not an exciting and important Slashdot story, I don't know what is.
Firstly, don't plagarise. Cite your sources. Your list is an exact copy of http://www.squarefree.com/burningedge/releases/1.1 .html.
Secondly, if you do plagarise, make sure you steal the right frigging document! You posted a changelog for the not-yet-released Firefox 1.1. This is Firefox 1.0.1. Its changelog can be found at http://www.squarefree.com/burningedge/releases/1.0 .1.html.
Actually you don't need 1.0.1 to see how it works; spoofstick on 1.0 displays the bogus URL as xn--blah-blah-blah...
All's true that is mistrusted
You can also simply set the number of days in the History option under privacy to 0. An even better idea is to start firefox with the -profilemanager commandline paramater, create a special profile called somthing such as "noprofile", and set all the cache, history, cookies etc... to not be stored. You can then make a script/shortcut file that runs "firefox -profile noprofile" which will load that profile.
You can do things such as put an obviouly diffrent skin on it to make sure you arn't running the wrong profile and install flashgot to allow you to grab entire image/movie gallerys.
You can have a custom adblock filter list to remove nonrelevant images such as those backgrounds, banners and image borders that sites have which slows down your browsing.
Under linux I have everything setup to use an highly encrypted filesystem so nothing can be accessed without the password, if you have your images, firefox profile, and its starting script in there then noone will beable to find anything also because its encrypted and only accessable by you, you can leave the history to be saved and create bookmarks etc. Just remember to unmount the filesystem and clear the loopback device.
cat
I've been seeding these for about 1/2 hour with only 30mb uploaded (--max_uploads 100) - I'm sure there's a lot of people seeding, but it would have been great to see a link to the BitTorrent mirror page in the news post to spare the mirrors. I can't figure out why more slashdot news posts aren't edited when there is a BitTorrent link added for the content referred to in the item (especially when its an official torrent provided by the content creators!)
I wonder if they thought of using bittorrent to download the latest update. Or does bittorrent not scale to 27m users? :)
You could always have a seperate tracker for each country or each major region.
Liberty freedom are no1, not dicks in suits.
by Anonymous Coward on Thursday February 24, @10:35PM (#11773968) Firefox Sucks! It's so slow to load. Much slower than IE. It doesn't even render pages properly. IE has always been perfect. What's this about Firefox vulnerabilities? IE with SP2 is much safer. Who uses Firefox? Only Linux zealots, hippies, and Mac users. Real computer users use IE. Us real computer users that actually have jobs will not deal with third-class software like Firefox. The moderating system did not hinder me from posting this. -Computer Expert.
Rofl
Who comes up with this stuff?
As Bittorrent has become so popular one has to wonder why FF doesn't support it natively or via plug-in as a download method.
Memory cache device
c he
Number of entries: 208
Maximum storage size: 31744 KiB
Storage in use: 7436 KiB
Inactive storage: 7127 KiB
List Cache Entries
Disk cache device
Number of entries: 312
Maximum storage size: 50000 KiB
Storage in use: 18025 KiB
Cache Directory: C:\Documents and Settings\Development\Application Data\Mozilla\Firefox\Profiles\fd8vwgvl.default\Ca
Liberty freedom are no1, not dicks in suits.
Just so you know, if you're going to reinstall from scratch, I already read the EULA and no; there's no $1000 prize.
CowsAnonymous: We're here to help moo.
...Make us download the files from the same place as the unwashed masses? Man, go back to linking to rough and ready nightly CVS snapshots ok! :-) ;-)
:D heheh :D have a good day everyone.
Congrats FF peeps, I hope the popup blocking works now... will install at work, fusk that pute first, then try at home.
#hostfile 0.0.0.0 primidi.com 0.0.0.0 www.primidi.com 0.0.0.0 radio.weblogs.com
I could be way out of line if it is partly Firefox's fault, so sorry if that's the case...
Of course FireFox patches only fix Firefox, becuase that is all it is. That also means any problems in it only affect Firefox.
Ask anyone with a clue about computer security and they will tell you that is a good thing, unlike IE flaws causing problems all over the place becuase it is integrated into windows. It isn't like using Firefox stops you using windows update you know.
It definately is slower to start, as IE is loaded up when windows is. You don't notice IE's start up time as a seperate thing. As for spped in use, it depends on what the page is, images, script, CSS, complex layout and so on as too which one is faster.
I'm sure we will see lots of security updates for it, although so far it doesn't seem close to IE in terms of patches. I've never seen anyone claim it wouldn't need security updates. The argument has always been as open source the security would be better and the updates quicker.
I do suspect you a really a troll.
...they also had a big advert in the most important german newspaper "faz". http://www.zeitform.de/download/041202-firefox-faz -anzeige.pdf
--
moz1.8 rulez ;)
Wouldn't it make more sense to do it the other way around? Make the update available first, then after some time make the new, complete package available.
By releasing packages before the update is made available, you are almost asking for current users of Firefox 1.0 to download the full 1.0.1, which will result in a higher load on your servers.
Now Peter Torr can trust it!
It is usually caused by installing over an unpacked .zip build.
You need to delete <install directory>/components/autocomplete.xpt and try again.
The fix is checked in for Firefox 1.0.2
So do they allow you to upgrade from 1.0 to 1.0.1? All I read is this:
"Prior to installing Firefox 1.0.1, please ensure that the directory you've chosen to install into is clean and doesn't contain any previous Firefox installations."
So why do I want to uninstall my old version prior to installing a new version? Can they not handle a simple upgrade?
(Seriously, I'm asking a question. I like Firefox, so this isn't flaimbait.)