Slashdot Mirror


Inquirer Blasts Mozilla for Microsoft-Style Bashing

DoubleWhopper writes "An article over at The Inquirer blasts Mozilla and "lead Firefox engineer" Ben Goodger for resorting to Microsoft-style bashing of Netscape for their recent flawed release. After posting excerpts if scathing comments from readers of Goodger's own blog, the author comments, "I wonder why should companies contribute or fund the Mozilla Foundation, if any derivative work or redistribution of the Foundation's browsers they create is going to raise the FUD mocking and anger of Mozilla's 'lead engineer'". This after Christopher Aillon's (of RedHat) reaction last week."

38 of 213 comments (clear)

  1. Bwuah? by stlhawkeye · · Score: 4, Insightful
    "I wonder why should companies contribute or fund the Mozilla Foundation, if any derivative work or redistribution of the Foundation's browsers they create is going to raise the FUD mocking and anger of Mozilla's 'lead engineer'."

    It's not FUD when it's true.

    --
    "I have never won a debate with an ignorant person." -Ali ibn Abi Talib
    1. Re:Bwuah? by aftk2 · · Score: 5, Insightful

      It doesn't matter if it's true, if it's neither relevant or nor politically expedient for him to make the remarks. I'm not sure what it gets the Mozilla project as a whole.

      See, this is one of the perils of individual/employee empowerment through blogs: yes, they give you a unique voice (and I do enjoy most blogs at Mozillazine, especially Dave Hyatt's), but, like it or not, there is a point at which what is written in a blog can cross the line, and become detrimental to the company or organization for which the person in question works.

      --
      concrete5: a cms made for marketing, but strong enough for geeks.
    2. Re:Bwuah? by molnarcs · · Score: 4, Insightful
      FUD doesn't need to be an outright lie. Quote from the article: As we reported, Goodger said of Netscape's v8.0 browser: ""If security is important to you, this demonstration should show that browsers that are redistributions of the official Mozilla releases are never going to give you security updates as quickly as Mozilla will itself for its supported products". He was referring to the fact that Netscape initially made v8.0 available, which was based on Firefox 1.03.

      There's one important fact that Mr. Goodger forgets... less than 24 hours after the initial Netscape v8.0 was posted, AOL made available version 8.01 which is based in Firefox 1.04 and hence fixes the three vulnerabilities present in Firefox 1.03. In fact, when I clicked the "download Netscape 8.0" link on early Friday in order to test it and write my review, I already got the fixed version 8.01. That does speak quite well of AOL's reaction time after the initial mishap of shipping their browser based on Firefox 1.03. Now that might qualify as FUD - but at any rate, it is a very close to it. Goodger presents his view in such a way that one gets the impression that only Mozilla Foundation can guarantee the security of (gecko based) browsers. True or not? Well, it is true, but this is not the result of these competitors being lazy or slow, it is partly the result of the lack of cooperation and coordination on the part of the Project. Yeah, I read all the apologies in the previous ./ thread - and I don't agree with them. It seems to me that some think that you can't be both a fan and critical of Mozilla Found. I think you can ... in fact, if you really are a fan, then it is prudent to criticize if you feel your fav. project is heading in the wrong direction.

      And it does ... take a step back and read the Inq. article - is it really unreasonable? I think it makes a lot of sense, especially if you read the paragraphs below the ones I quoted, and see where such arrogance might lead. (Yeah, arrogance the same arrogance you could see in their response to the apple/khtml "issue").

    3. Re:Bwuah? by RootsLINUX · · Score: 4, Insightful

      What's wrong with making personal remarks about it? If I try someone's product out (competitor or otherwise) and I think it sucks, what am I supposed to do? Give them a good old pat on the back, say "good job", and give them a thumbs up? The world isn't that sweet. Should I remain totally silent and keep my opinion to myself? Well, last time I checked negative criticism was still a legal and moral practice. In my opinion this whole bashing accusation is a load of crap.

      --
      Hero of Allacrost, a FOSS RPG for *NIX/*BSD/OS X/Win
    4. Re:Bwuah? by masklinn · · Score: 3, Insightful

      Maybe people should remember that part of what triggered that comment from Goodger was that Netscape put forward it's supposedly ultimate security, stability or whatever.

      --
      "The way we can tell it's C# instead of Haskell is because it's nine lines instead of two." -- wadler
    5. Re:Bwuah? by /ASCII · · Score: 3, Insightful

      It's a blog, it's not supposed to be politically expedient. It's not supposed to get the Mozilla project _anything_. The only problem I see with blogs is that people take them far to seriously. Jokes, ideas and brainfarts are taken to be the ultimate truth in sensationalist articles on Slashdot, OSnews and the Register.

      --
      Try out fish, the friendly interactive shell.
    6. Re:Bwuah? by stu42j · · Score: 4, Insightful

      There's one important fact that Mr. Goodger forgets... less than 24 hours after the initial Netscape v8.0 was posted, AOL made available version 8.01 which is based in Firefox 1.04 and hence fixes the three vulnerabilities present in Firefox 1.03.

      He didn't "forget" because it hadn't happened yet! The point is not that AOL took "less than 24 hours" to fix vulnerabilities. They released a product with vulnerabilities that had been known about for over a week, that's the problem. If AOL had known that they would be releasing 8.0.1 why didn't they just delay the release a day?

      Frankly, I wonder if they would have released 8.0.1 so quickly if it hadn't been for the bad publicity .

    7. Re:Bwuah? by jalefkowit · · Score: 4, Insightful
      There's one important fact that Mr. Goodger forgets... less than 24 hours after the initial Netscape v8.0 was posted, AOL made available version 8.01 which is based in Firefox 1.04 and hence fixes the three vulnerabilities present in Firefox 1.03. In fact, when I clicked the "download Netscape 8.0" link on early Friday in order to test it and write my review, I already got the fixed version 8.01.

      Would there have been a fixed version 8.01 so quickly if Goodger and co. hadn't blown the whistle?

      It's not like Firefox 1.04 wasn't released before Netscape 8 -- and the exploit that 1.04 resolved had been known for at least a week before that. AOL made the choice to launch with a product based on a version of Firefox they knew to be exploitable. Why not hold it until they could get it on the 1.04 level -- especially when the work can be done in a day?

      Someone at AOL had to have been presented with the fact that their browser was based on an exploitable version of Firefox -- and that person decided that hitting the ship date was more important than shipping a secure product. Had that decision not been called into the media spotlight, would there have been any particular rush to get that 8.01 patch out? What in AOL/Netscape's storied history of bungled releases makes you think so?

    8. Re:Bwuah? by stretch0611 · · Score: 3, Insightful
      If I try someone's product out (competitor or otherwise) and I think it sucks, what am I supposed to do? Give them a good old pat on the back, say "good job", and give them a thumbs up?

      Personally I would not call Netscape a competitor. Netscape is more like a partner. Criticising their product is also criticising your own product.

      It was the old netscape code that started the Mozilla foundation. Even if Netscape is no longer funding the Mozilla foundation it is still helping out by promoting their derivative work. By getting more Mozilla/Firefox based browsers out to the public more and more websites and web developers will be forced used more standards compliant coding. This will cause IE to lose its stranglehold and allow open-source browsers to level the playing field.

      --
      Looking for a job?
      Want your resume written professionally?
      DON'T USE TUNAREZ!!!
    9. Re:Bwuah? by Metzli · · Score: 2, Insightful

      Interesting comment. Using that same logic, why was Firefox 1.0.3 available for download when it was "a product with [known] vulnerabilities?" If one is going to attack AOL for releasing Netscape 8.0, then one should also give the same treatment to the Mozilla Foundation for allowing people to download a product with known flaws.

      --
      "It's too bad stupidity isn't painful." - A. S. LaVey
    10. Re:Bwuah? by Anonymous Coward · · Score: 5, Insightful

      If security is such a concern, how come I keep clicking the "Check now" button for updates on my plain old 8.0 install and it hasn't informed me of an 8.0.1 update?

      If security is such a concern, how come I keep clicking the "Check Now" button for updates on my Firefox 1.03 install, and that still hasn't told me about 1.04?

      Want to know why? Apparently because those idiots at Mozilla have blocked old Firefoxes from accessing updates.mozilla.org. Unfortunately the effect of that is that they can't find the Firefox update either. This does not imply to me that Firefox is more trustworthy than Netscape.

    11. Re:Bwuah? by GSloop · · Score: 2, Insightful

      Holy shit, I can't believe you actually wrote this.

      Your analogy, simply is inane.

      Netscape is based on Mozilla code. The base Mozilla code had a vuln. in it. It had been fixed for some time. Netscape development, at worst, knew of the problem and ignored it. At best, they didn't know - which simply says little about the dev team for Netscape.

      I presume that Mozilla didn't know of the vulns in 1.03 until they were found, at which point they fixed them and released 1.04.

      It would be more like you making a kit car based on the Pinto, which was prone to burst into flame and kill it's occupants when rear-ended, and then when Ford fixed/discontinued the Pinto line, you go out and commission the factory to make you some since the company doesn't.

      Sure, Ford should have avoided the mess in the first place, but it would be nearly unforgivable for you to keep producing such a monstrosity when warned of the problems.

      The "quick" fix sounds pretty whacky, if they were already planning to fix it, why not simply delay release 20 hours and never release a version with vulns in the first place?

      The conclusion I reach is this:
      Either
      A) The Netscape devs didn't care about security and shipped a product which had known vulnerabilites and known fixes to those volunerabilities.

      OR

      B) They are so totally clueless, that they somehow missed the whole notice about problems in 1.03 and cluelessly shipped the product.

      A, shows lack of care about security - indifference. B shows pure stupidity and ignorance.

      Lets see, would I rather be called "A reckless fool" or "Just plain stuipid?"

      Sheesh...

      Cheers

    12. Re:Bwuah? by shokk · · Score: 2, Insightful

      Sorry, but Netscape's crappy "way behind the times" browser updating can't be called anything but that. They have a responsibility to their users to provide the updates ASAP if they are claiming security as one of the features of their browser. It appears that all the branding and in-browser advertising gets in the way of pushing those updates out in time. Do they have dedicated staff for monitoring Mozilla code daily and coordinating with Firefox rollouts, or is this just something they do for fun?

      If someone grabs some open-source, and puts out a shitty version of it with an old unsecure release, are we supposed to coddle them and tell them what a good job they are doing, or are we supposed to push them towards best practices and proper code management/release? I don't see any problem with those remarks unless it's suddenly in fashion to be very thin skinned. Wha wha wha. Grow up folks.

      --
      "Beware of he who would deny you access to information, for in his heart, he dreams himself your master."
  2. The Inquirer by Anonymous Coward · · Score: 4, Insightful

    The Inquirer blasts Mozilla and "lead Firefox engineer"

    As if the Inquirer hasn't done any blasting themselves?

    As if the Inquirier is a reputable media source. How many time have they been sued?

    1. Re:The Inquirer by tveidt · · Score: 3, Insightful

      Exactly what I was thinking. The Sun among the IT sites wants to tell others how to behave... And Goodger's comments were justified. Netscape just acted unprofessional. Firefox 1.0.4 was out for days and Netscape released its new version based on Firefox 1.0.3, while they told their visitors at Netscape.com that their current browsers are outdated (even recent Firefox nightlies!) and that they should upgrade to the secure Netscape 8.

  3. rational people know by fishdan · · Score: 3, Insightful

    sometimes you have to seperate the art from the artist. e.e. cummings ended up saying some really nasty things, but his poetry is amazing. We should apply the same license to others we meet -- there *is* a difference between the art and the artist.

    --
    Nothing great was ever achieved without enthusiasm
  4. They have a point... by SkankinMonkey · · Score: 4, Insightful

    Even if you agree with the guy, Mozilla relies on donations from people and corporations to stay afloat. Most of that, I'm willing to bet, comes from corporations. If you disagree with the way a release is going you have a right to say something, but make it private instead of scathingly public, especially if it's against the person that pays your bills.

  5. Talk about sensationlist headlines... by wyldeone · · Score: 4, Insightful

    "Mozilla Foundation to ban Firefox derivative browsers?" is the headline for the second article. First of all, Mozilla Foundation can't, because of the license of their code (and if they were to relicense it, they likely would face an XFree86-like split). Secondly, they're not: this is just one developer (albeit a prominent one) making a comment on his blog about the security of Netscape's. I fail to see the big deal here.

    --
    In the beginning the universe was created. This made a lot of people very angry and is widely considered as a bad move.
    1. Re:Talk about sensationlist headlines... by Arctic+Dragon · · Score: 2, Insightful

      It doesn't seem like a big deal, but his comments can be taken out of context, which can lead to an ugly situation. Just look at the recent KDE VS. Apple bullshit. What started as a minor criticism exploded into a bash fest. The last thing the open-source community needs is a war between its developers.

    2. Re:Talk about sensationlist headlines... by maxpublic · · Score: 4, Insightful

      The last thing the open-source community needs is a war between its developers.

      No, the last thing the open source 'community' needs is a borg-like avoidance of conflict. Conflict is *good*; it spurs change, reveals flaws, and pushes people to either put up or shut up.

      People who clamor for an end to conflict with the tired 'let's just all get along' line are, in fact, poison to any endeavor which wants to remain vibrant and strong. It's unfortunate that anyone pays any attention at all to these losers, whose only real goal is to shut down any and all opposition to their own pet views of How The World Should Be(TM).

      No, let's NOT just all get along. Let's argue, fight, criticize, disagree and struggle whenever we feel that it's appropriate to do so. And if anyone comes along and whines about this state of affairs, let's bitch-slap the wannabe tin-potters into next week without so much as giving them the time of day.

      Max

      --
      My god carries a hammer. Your god died nailed to a tree. Any questions?
  6. Totally Justified by linuxci · · Score: 4, Insightful

    He was totally justified with what he said. Netscape released their version based on a release of Firefox with security holes when a patched version of Firefox already existed.

    It can create a bad impression on Mozilla applications if other apps that proudly boast that they're based on such apps don't release updates in a timely manner.

    On another note, it's quite possible that Netscape are breaking the Mozilla trademark guidelines. The application should have said something like based on Gecko rather than based on Firefox because after all the Netscape bloat adding it looks nothing like Firefox.

    Still nothing is as innovative as IE ;)

    1. Re:Totally Justified by molnarcs · · Score: 3, Insightful
      Now that is nitpicking at its worst - they don't sell their product under the brand Firefox. They merely state that their product is based on Firefox - is there anything wrong with that? At least it is more informative than saying that it is based on gecko - which can be the gecko present in Mozilla, Firefox, or any other derivative.

      The irony is, that this is exactly what the INQ. article is about. Furthermore:

      It can create a bad impression on Mozilla applications if other apps that proudly boast that they're based on such apps don't release updates in a timely manner.

      Have you read the article actually? It is exactly about the unneded mockery of Goodger, who fails to note that Netscape released an update as fast as humanly possible - less than a day after release. I think that qualifies as "timely manner".

    2. Re:Totally Justified by justins · · Score: 3, Insightful
      It can create a bad impression on Mozilla applications if other apps that proudly boast that they're based on such apps don't release updates in a timely manner.

      Yeah, it took them a day to bring out the 8.01 update. That's just not quick enough!
      --
      Now before I get modded down, I be to remind whoever might read this that what I am saying is FACT. - bogaboga
  7. Bashful by Doc+Ruby · · Score: 3, Insightful

    Why does "bashing" get such a bad rap these days? Is it because small groups pumping worthless products monopolize both their industries and access to the media? So powerful attacks - especially the most powerful, simple truth - are merely branded "bashing", and dismissed precisely for their power and accuracy. Competition is a bashing affair. We don't want competitors backing each other up, ignoring one another's shortcomings. That's known as a "cartel". Bash on, for the greater good!

    --

    --
    make install -not war

  8. Honesty is the best policy... by PenguinBoyDave · · Score: 2, Insightful

    Calling a spade a spade isn't necessarily a bad thing. Especially when you're right.

    --
    I'm not a troll, but I play one on Slashdot.
  9. Re:Double standards.kfynzdx by stlhawkeye · · Score: 4, Insightful
    sn't a "news" source supposed to do the bashing? That's kind of their job./

    I disagree. And this is why people are fleeing traditional news outlets. Where was a time when, when you asked people why they wanted to be journalists, they would recite a line about being interested in the truth. This isn't the case any more. Now they want to change the world and make a difference.

    Investigative journalism used to be about fact-finding and ferreting out the truth from a web lies woven by powerful people. Now it's about furthering an agenda (both the Left and Right are guilty of this, so don't think I'm attacking you and your political offiliation).

    The fact that you say here that it's the "job" of the news to bash stuff affirms this in my mind. I don't think the news is about criticism, it's about finding truth (yeah, we can wax philosophical here about the nature and unattainability of truth, just play along) and reporting it. Bias is inevitable, but recently our various media outlets have been found to be deliberately reporting lies or omiting specific truths to further an agenda. You've got the White House hiring reporters to write stories as though they were done by independent journalists. You've got the Department of Defense issuing carbon-copy letters for soldiers to "send home" to their newspapers praising the good work of Iraq. You've got NBC blowing up trucks, CBS issuing reports based on false documents, and dozens of reporters around the country being fired for just flat out manufacturing stories, quotes, and events.

    These crimes of journalism are committed by people who want to change the world, not discover and report truth. Whenever somebody says they want to "change the world" or "improve the human condition", you can bet that it's codespeak for "recreate society based on my idea of what a sociey should be." And we have a word for such authoritarian views of what people should want and be: fascism.

    --
    "I have never won a debate with an ignorant person." -Ali ibn Abi Talib
  10. Inq - out of context again by kbrosnan · · Score: 5, Insightful

    This was taken out of context.

    Ben was likely annoyed about Netscape.com's alert about Firefox 1.0.4 being out of date. The alert told users to install 8.0 which was based on Firefox 1.0.3 which had securtiy issues.

    Netcape.com has resolved the issue of telling Firefox users to update their browser.

    Asa's post about the alert with screen shot.
    http://weblogs.mozillazine.org/asa/archives/008178 .html

    --
    These people look deep within my soul and assign me a number based upon the order I joined. -Homer Simpson
  11. update by nuffle · · Score: 5, Insightful

    From TFA:
    The Mozilla Foundation got in touch with me to let me know that Ben Goodger currently is not an employee of this organization, something I've heard before. [...] It shouldnt be surprising then that due to Goodgers past at the Foundation and his involvement in leading the Firefox browser development, his words are often misinterpreted as representing the project.

    When an open-source project grows popular (and therefore its community gains some power) the press will begin to pay some attention and publicizing quotes and statements. Unfortunately, the press usually represents any community as monolithic entity. Often, it's not such a big problem, but here Mozilla is competing with giant corporations and so the press tends to equate the mozilla community with a corporation.

    Goodger make a perfectly valid statement which reflects his viewpoint of the Mozilla project. However, Goodger isn't a paid employee of the Mozilla Foundation. He is basically a highly involved community member. If the Register wants to report on his opinions, that's fine, but please don't presume that he is speaking for the community or the Mozilla Foundation.

  12. Netscape v. Firefox by d-e-w · · Score: 4, Insightful

    Well, he spoke the truth. If you want to be the most safe and secure, use Firefox and upgrade when security fixes are released. Netscape will always being running behind.

    Now, if I could only I could convince our IT managers that Netscape is a redistribution of Firefox, I'd be set. Getting yelled at for using Firefox and being told to use Netscape instead makes my head hurt.

    1. Re:Netscape v. Firefox by gcauthon · · Score: 2, Insightful

      You're still treating this like a black & white issue though. It's not like you're comparing a completely insecure product against a totally secured product. It's firefox 1.0.3 vs firefox 1.0.4. Saying if you want "safe and secure" then use this other product is kind of misleading. How much safer is 1.0.4 over 1.0.3? Were we all crazy for every using 1.0 or possibly even the release candidates? The underlying issue is, who cares if Netscape 8 had this particular vulnerability for a day? Firefox had it for a week. The same workaround applied for Netscape (disable javascript). No known exploits were ever found. Netscape 8.0 is still way more secure than IE 6 or probably even 7. Telling people not to use it is insane (and FUD).

  13. None by Groo+Wanderer · · Score: 5, Insightful

    Well, as a writer for the Inq, I can say that as far as I have seen, the answer is zero. We get nasty letters all the time, but nothing ever went to court, at least that I can recall.

    Then again, what does suits have to do with anything? Does getting sued make a company bad? That would mean car companies must be evil because they get sued all the time, same with IBM. Now, the flip side of that arguement is that people suing must be right and viruous, so that would make SCO a champion of the truth, eh?

    -Charlie

  14. The real question... by Espectr0 · · Score: 3, Insightful

    Why did AOL release a browser, based on a version of firefox that had security vulnerabilities, while a fixed version was available? Don't tell me it was because they developed especifically against 1.03, because they released a patch the next day.

    Why couldn't they simply wait a day? Instead of commenting back and forth about what the developer said, everyone should have asked that question.

    Basically, AOL did something stupid, a developer responded to it, and now this gets taken out of context.

  15. Right != smart. by Mr.+Underbridge · · Score: 5, Insightful
    Should I remain totally silent and keep my opinion to myself? Well, last time I checked negative criticism was still a legal and moral practice. In my opinion this whole bashing accusation is a load of crap.

    Something can be legal and moral and STUPID. Stating a truth isn't always smart or even necessary. For example, I don't go up to handicapped people and say "Pardon me, but you have no legs." Mainly because it accomplishes nothing.

    When one feels compelled to make criticisms about something, one might question what the motivation is. Self-aggrandizement generally isn't be best one. In this case, no one using Firefox or Mozilla did so after seriously questioning Netscape. Netscape mainly sucks. Anyone reading his article would almost certainly 1) know this, and 2) agree. So what did he accomplish? No one was educated. No one was swayed. Not only that, his comments have been revealed as rather disingenious, being that the bugs are Firefox/Mozilla's to begin with.

    Bottom line, he made himself look like a complete ass without accomplishing anything. Yes, as we all know and you really don't need to remind us, the 1st amendment protects his rights, but doesn't protect him from being an ass.

    1. Re:Right != smart. by knodi · · Score: 2, Insightful
      For example, I don't go up to handicapped people and say "Pardon me, but you have no legs." Mainly because it accomplishes nothing.


      Yes, and also because the overwhelming majority of handicapped people have legs (you insensitive clod).

      However, none of the leggy blind slashdotters will be able to defend themselves to you, thanks to this new craptcha thing.
      --
      Austin is more fun than Dallas.
    2. Re:Right != smart. by twifosp · · Score: 4, Insightful
      Informing a handicapped person of their lack of legs is completely different, because odds are they can't do anything about it. A better analogy would be if you were in school and you kept getting wrong answers. Should the teacher correct you, or just ignore what you've said?

      However, the parents point was more a long the lines of: "If it sucks, we're going to tell you, so maybe you'll do something about it".

      Whether he looks like a complete ass, or if he accomplished anything is up to debate. For instance, I bet the netscape development team is taking a long hard look at their next release now.

    3. Re:Right != smart. by hkmwbz · · Score: 4, Insightful
      "So what did he accomplish?"
      I'm not sure exactly how to explain this... But he accomplished "proving" to the Firefox fans reading his blog that "Firefox is still the best, so continue spreading the word. Don't accept cheap ripoffs", sort of. Heck, on his personal blog, he has this annoying message to people not using Gecko. What's this all about? I thought we were supposed to get a choice between browsers! (Even more interesting is the way Google, Ben's employer, always supports IE and Firefox, but seem to ignore Safari and Opera, at least in the first version of new services.)

      Now, I don't want to be too nasty about this, but I have noticed that Asa From the Mozilla Foundation seems to be "preaching to the choir about how Firefox is leading the way and that others are just following, and always implying that you shouldn't accept anything less, and Firefox always leads the way, etc.

      I wish some of the Mozilla people would stop trash talking other browsers, and focus on their own browser instead. You can talk about how excellent your product is without putting the rest down.

      The Inq article is a bit over the top in one way, but there are some good points, and this kind of attitude is incredibly damaging. I hope various Mozilla representatives will be more careful in the future.

      --
      Clever signature text goes here.
  16. Re:Internal/External Conflicts by vertinox · · Score: 2, Insightful

    However, one must remember that those who are indecisive and are arguing internally are often defeated by groups who put aside their differences to kill a common enemy.

    --
    "I am the king of the Romans, and am superior to rules of grammar!"
    -Sigismund, Holy Roman Emperor (1368-1437)
  17. Funny by Anonymous Coward · · Score: 1, Insightful

    The press lately has been picking up and running with any disharmony it can find in any open source project as proof of how "unprofessional" open source software is. Normally when so many people all suddenly start behaving the same way there is a common group behind it all.

    I see this as yet another FUD campaign by MS and Sun.

    You have more mainstream articles pointing out how unprofessionaly the open source squabbles are... even though there as many squabbles in closed source development. It's just that in closed source they don't publish everything the organization is doing onto 1000 websites and mailing lists.