Slashdot Mirror
Mozilla Firefox 1.5.0.3 Released
Mini-Geek writes "Mozilla Firefox 1.5.0.3 has been released. As with previous 1.5.0.x patches, 1.5.0.3 can be downloaded as a small, incremental download. From the article: 'This update fixes a publicly disclosed denial of service weakness. All users are encouraged to upgrade to this version.
The bugfixes previously planned for Firefox 1.5.0.3 were shifted to 1.5.0.4, and a quick update was released shortly after the recent to address the publicly reported issue.'"
Seriously, who finds this interesting? This is a minor point release to fix a small security hole, not front page news.
I can't wait to see what passage we will have from the Book of Mozilla.
The readings are always so inspiring and applicable to our modern lives.
Heybiff
Even the Sun goes down.
Gotta love the small update size. More software should work this way and instead of giving us everything each time, just give the changes. Well... more windows software needs to do it, other platforms seem to manage it ok.
I think security is a perfectly valid argument if you work from the premise that no software is bug-free. I'm more interested in the response of a company to a security hole than I am about the hole itself. In this case, I think it's pretty obvious that the Mozilla Foundation responds to and fixes security holes much faster than Microsoft does.
Blah bla blah the world revolves around me and it should therefore conform to my every wish.
A denial of service attack? On a browser?
I thought that was just called a "crash."
the coolest club on
Amazing! That's the same combination I have on my luggage!
I've not found any technical details about the "incremental update" mechanism.
One would wonder how can this be accomplished with binary distributions (like DEB and RPM.) DLLs?
For the sources it means that the original complete source code is already available!
Maybe it is just a download manager a-la Acrobat Reader (for Windows).
Maybe Computers will never be as intelligent as Humans.
For sure they won't ever become so stupid. [VR-1988]
Shouldn't we just take this for granted by now? You never really see a vendor come out with a new version of something that some users are discouraged from upgrading to.
"Here everyone, have some bug fixes and optimizations... but not that one guy, or you people over there, or that lady with the sideburns.."
Slashdot Burying Stories About Slashdot Media Owned
The javascript console bug has an annoying ass problem of spewing out tons of debug information for CSS errors, which no one cares about because you have to do so many hacks to get styles to look right in all browsers. Console2 was to fix this, but it hasn't been worked on in forever and isn't compatable with 1.5.X. 100 CSS errors every time you load a page gets annoying when you are searching for a few JS errors
What are you on about, the world DOES revolve around me!
Now, about that stupid ass update message, every other program manages to check for updates when starting up and doesn't bug me halfway through working so why can't firefox?
I want to keep uptodate, but I'm very tempted to disable it totally and not bother checking.
(apart from antivirus, but then again thats a background process anyway)
liqbase
A question, which is off topic, but not entirely:
Does anyone else have the problem that occurs sometimes when everything you type into the browser, every single character goes into the form, but it also pops up the "search" functionality and puts the character in there. It also loses focus, so you have to reclick back into the form field, and type the next character.
I have no idea what causes it, but I have to close my browser, and restart it.
If you don't know what I'm talking about you don't have it.
Get your own free personal location tracker
And people wonder why open source projects have such a hard time getting real momentum and acceptance with end users?
You're far too trusting. Letting random strangers automagically execute code on your machine?
But isn't the ability of the end-user to customise the software to their exact preference/need one of the biggest advantages of Open Source?
Yes! However, it's the attitude of "figure it out moron" from some people that is the problem with open source projects.
Yup, I got the update notification while sitting here at work and installed the new version and soon as I restarted Firefox there was a story posted on Slashdot about the update.
It's definately a role model that other software venders could learn from. For friends and family that I used to have to babysit their browser updates now all I have to do is let Firefox do it's thing. Seems to work well in Thunderbird too. It really does make it a lot easier for non-technical people to keep up-to-date and truth be told it makes it easier for a geek boy like me too.
The only other Windows program I have that seems to work as well is Azureus which is also opensource.
At what price learning? At what cost wisdom? The price is a man's peace of mind, and the cost is his life.
What a fool believes, he sees, no wise man has the power to reason away.
Haha! It gave me the restart notice as I was reading this article. Gotta love automatic updates...
What a fool believes, he sees, no wise man has the power to reason away.
You are saying its an advantage to have to fork the entire firefox project, reproduce the source tree, make the change, compile it, then STILL have to watch for firefox to be updated since now my new project will be updating from my repository not theirs (I've forked it remember...), then check nothings broken when remerging the tree, fix any changes, recompile and update.
:)
All that because I don't like to be disturbed whilst I work?
The old update mechanism they used to use (the blue update throbber) worked PERFECTLY for me, I knew where it was and when I saw it I handled it, just like the petrol light in my car.
All this crap has made up my mind anyway, I'm disabling the updates
liqbase
I get a note periodically from my friendly local security admonisher suggesting I deinstall Firefox unless I have a "business need" to run it. Otherwise, please upgrade because "security vulnerabilities" have been found. Funny, he never suggests the same for IE, which I guess is very secure by comparison.
/. description and wondered how my browser could be hijacked to participate in a DOS attack. Only by following the link (um, thanks) did I learn the bark was worse than the bite.
Labelling something that can crash the browser as a "DOS attack" misleads the uninformed and the unknowing, who all to often populate the IT departments where so many of us work. They in turn impose unnecessary work on the rest of us. And you're stressing them out, which isn't very nice.
Besides, misleading is misleading. I read the
so, if i'm restarting ff once a week, when i'm supposed to get to know about an update?
root of all...
Besides, what most people are reporting as "memory leaks" in Firefox are generally due to normal memory usage (which is about what other browsers, such as IE and Opera, use), caching, memory fragmentation, memory leaks in extensions and plugins, and blaming any random problems on memory leaks. Yes, Firefox can leak away lots of memory, but it usually takes many days to eat up enough to be noticeable. This problem should be mostly fixed in Firefox 3.
What a fool believes, he sees, no wise man has the power to reason away.
Install the Quality Feedback Agent and turn it on when Firefox crashes. That will give Firefox developers the information they need to fix the crashes. Try Firefox 1.5.0.4 when it comes out. It should be far more stable than earlier 1.5 versions.
What a fool believes, he sees, no wise man has the power to reason away.
Aww, and the teeming masses were just hanging on your every word, hoping to jump ship to whatever secret and superior browsing software the great Joebert uses...
Thank you.
I had tried looking, but my bugzilla foo wasn't working.
liqbase
Watch out. You're going to see a Seamonkey and a Thunderbird in other places on that site. I know it's hard identifying different products by their individual logos. Car shopping must be a world shattering nightmare for you.
"Beware of he who would deny you access to information, for in his heart, he dreams himself your master."
Neither of those statements are true, assuming that by "people" you mean a significant proportion of the people aware of Firefox and what it offers. Unless something drastic has happened while my back was turned I am pretty sure that almost no-one who uses firefox would consider it less secure than Internet Explorer.
As for being "riddled" with bugs, even if it were determined that Firefox had as many or more identified bugs of a comparable or worse severity than Internet Explorer, that still wouldn't change that fact that safe browsing is a lot more reliant on sensible behaviour than browser stability. The lack of ActiveX in Firefox is the real saviour as far as drive-by spyware installations are concerned. And for the slightly savvier user, Javascript whitelisting via the NoScript extension eliminates cross-site scripting exploits, without crippling necessary or useful functionality on trusted sites.
(1.21 gigawatts) / (88 miles per hour) = 30 757 874 newtons
My work computer was updated yesterday morning, and I updated my home computer last night. Thunderbird also updated itself last night.
Beware of Sleestak
Far be it from me to rain on anyone's parade, but it's a valid point. It's nice to be able to auto-update software, but that process should remain as unobtrusive as possible. Let Firefox download the fix, keep it ready, and do an install next time I run the browser from scratch. Where's the harm in it?
GetOuttaMySpace - The Anti-Social Network
You can be sure SeaMonkey won't be dropped, the community takes care. For some users (mostly power users) SeaMonkey is much more useful, just look at the cookie manager or the preferences. Besides the SM/Mail has advantages over Thunderbird, I first had to write an extension (Folder selection) to make TB sort of usable for me. Sure enough it's good to be able to choose.
O. Wyss
See http://wyoguide.sf.net/papers/Cross-platform.html
Can you explain how you consider the Mozilla Corporation a "random stranger"?
I would want to know if he also consider Microsoft Corporation a "random stranger". :)
Why is my parent post a troll?
(1.21 gigawatts) / (88 miles per hour) = 30 757 874 newtons
I'm flattered you think so highly of me.
I'd love to explain the mechanics of how grains of sand comprise a desert, however I think I've said enough allready.
Wanna fight ? Bend over, stick your head up your ass, and fight for air.
That's being changed. See Ben Goodger's document about Firefox 2.0 and also bug 334767 in bugzilla.mozilla.org.
I've changed that setting and it STILL leaks hundreds of megabytes. Until it bogs my machine down to the point of unusability and crashes. Hows THAT for "denial of service"?
Ian Ameline
Yet exactly Firefox is the counter sample since it's the most successful OpenSource application (market share above 10%). But you are right, usability is the worst problem OpenSource projects face these days (see the first top inhibitor for Linux desktop adoption in http://www.osdl.org/dtl/DTL_Survey_Report_Nov2005. pdf). Unfortunately very few understands this and probably several years have to pass until appropriate measure steps are taken.
O. Wyss
See http://wyoguide.sf.net/papers/Cross-platform.html
This extension has changed my life - it is as common to have a computer connected to the intenet as it is to have USB ports enabled - and you cannot lose a GSpace.
Providing an extensible framework is genuinely useful and I expect to see more of the same - never mind point releases.
...Opera? :D
Damn, you got me. =)
(I should get into marketing, who do you know that can get others to advertise for them ? =P )
Wanna fight ? Bend over, stick your head up your ass, and fight for air.
I still don't understand what this memory leak business is all about. The highest Firefox on my XP machine goes is to about 50MB of RAM, even with ten or more tabs on different sites with downloads going and FastBack enabled; totally acceptable. In Linux, it's more like 100MB at most. I don't understand where everyone gets this Firefox taking up a gig of memory and all that stuff. Firefox never leaks any memory for me; It's apparently been documented, yeah, but it doesn't affect me, any computer I've installed it on, or anyone else I've installed it for, so, Firefox continues to be my browser of choice.
Screw the rules, I have green hair!
I ran "Check for updates" in 1.5.0.1/win and it has chosen to download 6.1MB (even if .1->.3 is not available, FF could have downloaded incremental .2 version first...)
Because then someone would complain that it's automatically downloading updates and they never got any notification.
Screw the rules, I have green hair!
http://portableapps.com/apps/internet/browsers/po
Also added in a few new features in the recent releases:
Portable versions of Firefox, GIMP, LibreOffice, etc
Can someone explain why there's now four levels of release numbers (e.g. 1.5.0.3), when there were only three before 1.5 (e.g. 1.0.6)?
And what happened to 1.1 through 1.4?
Is there something about release numbering make all software developers retarded?
I admit, this is a lame topic.
Most people don't even think inside the box.
If I may add to the discussion of the great and all-poweful joebert, and I hope I'm not digressing or veeering into the netherworld of off-topicness, but after taking a quick peek at the vision of joebert at his or hers extremely well-thought out web site at
http://www.joebertvision.net (do take a peek, now, if you don't mind)
I'd like to state, IMHO, that NOT ONE PERSON IN THE WORLD HAS THE PATIENCE FOR ANY WEB SITE THAT IS UNDER CONTRUCTION!
I feel much better now, thank you.
"Let us raise a standard to which the wise and honest can repair" - George Washington
Wow. Looks like the moderators can't stand hearing that their precious Firefox might, just might not be perfect. Unbelievable.
Bonsai Kitten: TNG
Where does it say "under construction" ?
I'll have to make sure to take that off of there.
Wanna fight ? Bend over, stick your head up your ass, and fight for air.
In related news...the blink tag AND the marquee tags stopped working!
Oh NOES~!! My webpage stoped moving is my fruntoage borked 2?!?!
Seriously, though, if you are using those characters check the char set and DTD your site is using. It may be that you've had that set to the wrong thing all along and Fx just didn't care but now they've fixed that. Try using the char set iso-8859-2. I use that with a strict xhtml dtd and the few unicode chars I use on my site display properly.
blah blah blah
If all that's available is a .jar file for the extension, I've read that it can be decompressed with unzip, edited, and recompressed; and then it will work.
Contribute to civilization: ari.aynrand.org/donate
Others have already addressed the fact that your settings change does nothing to stop Firefox's bloat, but you miss the larger point: why should I have to tell it not to be a hog? Especially when alternative browsers are lean and mean out of the box?
Even Jon Hicks, the talented graphic designer who designed Firefox's logo and icon, switched to Safari a while back after getting fed up with Firefox's sluggish performance, not to mention its wretched user interface and terrible rendering. He now maintains this site for extensions to Safari. When will you make the switch? Or is mediocrity "good enough" for you?
Bonsai Kitten: TNG
Please fix the crashing!
On what webpages? What does one have to do to reproduce the crash?
That would be undouted, wholehearted yes. By all means, keep an eye out for updates that will patch vulnerabilities. But research them (both from the company's page and out on the interwebs) before installing. This may save you from the following problems:
1) Loss of necessary function in existing program (intentional or not)
2) Conflicts involving said program and others on your system
3) The (though currently unlikely) introduction of a vulnerability whereby a virus can spoof the auto-update routine.
Sometimes when I open a JPG file or an html with lot of jpegs (or one BIG jpg), the browsing gets very slow, and everytime i move the mouse around, it jitters and kinda freezes.
Has it happened to anyone of you guys?
Since you're on a Mac, why are you using Firefox when you could be using Safari instead? Honest question.
People accustomed to PC-world mediocrity may find Firefox satisfactory for their tastes, but Firefox pales in comparison to the legions of Cocoa-native Mac browsers. Even Jon Hicks, the talented graphic designer who designed Firefox's logo and icon, switched to Safari a while back after getting fed up with Firefox's sluggish performance, not to mention its wretched user interface and terrible rendering. He now maintains this site for extensions to Safari. Hope this helps.
Bonsai Kitten: TNG
I use an extension called Mrtech Install that lets you overide other extensions version limits. Very handy as spellbound doesn't work otherwitse on the newer point releases.
Interesting responses to your post, between the (-1: Flamebait) and the post.
Also interesting in light of the amount (none) of vitriol and inflammatory language in your post.
The living have better things to do than to continue hating the dead.
> The EMACS key bindings on a textarea are gone.
That's a system-level preference for all GTK2 apps. Change your GTK2 preferences accordingly if you want Emacs keybindings.
(Of course, I do agree that anyone who offers "figure it out yourself moron" is hurting the cause more than helping. Fortunately I haven't run into too many of those.)
That was common in the comp.os.linux.* newsgroups a few years back. I don't know if it is any better now.
Just because it CAN be done, doesn't mean it should!
http://kb.mozillazine.org/Browser.sessionhistory.m ax_total_viewers
Ian Ameline
This is sorta off topic, but relavant because of the new update.
.exe file for 1.5.0.3 if I can figure out a way to have that auto-installed on the 35 machines here.
Where I work, I've been pushing hard to get the company to use Firefox instead of IE. I've got most people using it every day. However these are normal office workers, they don't click on the update icon (They don't even wonder about it), and I find that they're running an older version. Does anyone know of a way to add the update to a login script, so it is silently installed when they login? I've googled around, and maybe I'm not using the right search phrases, but I'm not finding anything useful. I'm even willing to download a whole new
... And so it comes to this.
Just what I was going to say. However, if anyone wants to turn this on for themselves, they can set the pref "app.update.silent" to true.
I'm not too terribly happy at the moment, but life isn't pefect.
I would urge caution to possibly NOT update to this release as the extention scrubbing fix will probably be released within a few days.
many throw up a dialog that steals focus.
I think the worst must be the Norton dialogs that pop up even when you have a full-screen game running, stealing focus and dropping you back to the desktop so that it can tell you that it just updated its virus definitions.
I *think* I've disabled all the notifications for things that it's going to do automatically anyway, but we'll see...
No, the big attraction is that it's free. Kinda like how people spew bullshit about rights and artists and blah blah blah then pirate music and movies, providing no compensation for the people who worked on them.
I mean, look around this site. What do you think the percentage of people that can actually program is? 25% tops, I say. People are just cheap. That's the big attraction of open source.
Slashdot - where whining about luck is the new way to make the world you want.
I happen to use that site every day to check what the date is....
Yes, ok, I got good answers this time around. But I don't see why asking questions here should get dumped into the bit-bucket(level 0).
So should I report this as abuse?
what do you think?
And a BIG Thank-You to the nice people that helped me.
I should have ended my last post with aTdHvAaNnKcSe.
I want a fully functional flash/php/pearl/java/css knock my socks off site in 24 hours or bad things will happen to you - especially if you eat at McDonalds!
Keep the date thingie - that works for me.
"Let us raise a standard to which the wise and honest can repair" - George Washington
What a fool believes, he sees, no wise man has the power to reason away.
If we're calling anything that locks your browser a DOS now, then how come this bug, which is over 3 years old and seems dead simple to fix, is not? I can make a browser DOS on any web page I want:
<script>
while(true) alert('Boom!');
</script>
Such a piece of code does not trigger the "script is taking a long time" message because it fires alerts. And the alerts are content-modal so you can't do *anything* to close the browser or tab causing the alerts. You have to kill it off.
No different from the "denial of service" bug mentioned in this posting.
I didn't see a reply, the following two links might prove usefull:
e ases/1.5.0.3/update/win32/en-US/I nstalling_a_MAR_file
ftp://ftp.mozilla.org/pub/mozilla.org/firefox/rel
http://wiki.mozilla.org/Software_Update:Manually_
I noticed some odd behavior after this update. Some pages had missing images. Clearing my cache fixed it. Not sure if it's the browser or a actual problem with the web sites. I only noticed a problem AFTER the update installed in the background AND went to the page. After restarting, I cleared cache and it's updated. One thing I wish would happen is that Linux distros would give us the choice of updating via the Firefox way or the Linux way (apt, yum or whatever).
Gorkman
Here ya go.
http://www.frontmotion.com/Firefox/index.htm
If you wanna get rich, you know that payback is a bitch
What's your bugzilla bug number for this change?
No SIG for you!
https://bugzilla.mozilla.org/show_bug.cgi?id=32046 5
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
Maybe I'm doing this the hard way, but I have a perl script crawl our (40) systems to get file stats for firefox.exe (via \\system\c$). It compares the version (or size+date) of each system's firefox.exe to stats I get from an updated system.
I send out an email to everyone telling them how to do the update (with recycled instructions). After a reasonable amount of time, I rerun the script and start bugging the stragglers.
I sometimes get complaints, but I remind them that the alternatives are either 1) I go around and kick them off the systems to do the updates, or 2) I force them to log off at night (which they don't like because they lose all of their settings and command histories). They prefer to do the updates on their own terms.
I find this is easily modified to monitor Real, Quicktime, Adobe and such which have interactive updates.
Everyone is entitled to his own opinions, but not his own facts.
I could do that, but they get really ornery when I interrupt their work. It would be better to have the login script do it (As soon as I can find out how to do that). Thanks to all who replied.
... And so it comes to this.
nice...
Just leave it running until the system runs out of memory.
Seriously, if I forget to reboot my box every night, by mid-afternoon the next day, my browser is sucking back nearly a gig of RAM.
This is with almost no extensions (AdBlock +, Compact Menu) and very little (if any) flash usage.
I mostly look at PNGs (not those kinds) and read GMail.
Drives me friggin' nuts.
Do daemons dream of electric sleep()?
You never really see a vendor come out with a new version of something that some users are discouraged from upgrading to.
Often new versions of a product have increased system requirements compared to the old version. This is part of why many companies maintain the current and previous version of a product, because many people would rather switch to a competitor than buy new hardware outside the normal replacement cycle.
While I got suspicious if that ip was a spyware on my comp,well its mozila's site - virtual-fxfeeds.mozilla.org = [ 207.126.111.225 ]
http://samspade.org/t/whois?a=virtual-fxfeeds.mozi lla.org;server=auto
Why does yahoo do this
I'm flattered you think so highly of me.
Actually, I believe he was using sarcasm to indicate that you are a tedious cocksucker with opinions that nobody cares about.
Is that any clearer?
1.5.0.1 -> 1.5.0.3 is 6.1MB also.
Because Camino still suffers from Gecko's shitty text rendering and non-native widgets in pages.
Bonsai Kitten: TNG
Do you still get the problem if you remove the extensions?
I'll probably be modded down for this...