Slashdot Mirror
Thunderbird 2.0 Alpha 1, Firefox 1.5.0.5 Available
nuyorker and hdm wrote to mention the new releases for Thunderbird and Firefox. hdm writes "This release of Firefox fixes 12 security holes, many of which can be used to execute malicious code. The Browser Fun project has provided an online demonstration of one of these flaws. This demonstration is capable of executing code on Windows, Linux, and both architectures of the Mac OS X platform; you're going to want to upgrade today!"
As in pushed out to you without asking you first. That was quite the surprise.
Does anyone know if this latest release has gotten rid of some of the memory "features" that I've come to love in Firefox. I don't know what I would do if they got rid of them (other than have a smaller page file ;).
Thanks!
All glory to the Hypnotoad!
Security holes were found. Security holes were fixed. I don't see a lack of attention to security.
If this signature is witty enough, maybe somebody will like me.
Probably this is a more general issue than just security. They should take the whole testing process more serious. Having millions of users it is not enough to ensure product quality, even if it helps to some extent.
If you don't fail at least 90 percent of the time, you're not aiming high enough. (Alan Kay)
I have really been waiting for this build of Thunderbird. It finally includes message tagging, which is something that I've been wanting natively in Thunderbird for a long time. Tagging now also apparently works with IMAP connections, although at least some users are having some problems with that feature. (Bug #344290).
It is a solemn thought: dead, the noblest man's meat is inferior to pork.
Aww, you must feel so left out. How about the memory corruption bug instead which neither Firefox nor IE suffered from. Feel better now?
But that's what people give MS shit for, finding and fixing security holes. The attitude is that, had there been better design, the holes would not have existed in the first place. I've often seen it preached that OSS doesn't have the same problems since many eyes look at it and thus find all the bugs. That is, of course, not the case. I think the GP was simply pointing that out. some people feel like running Firefox is a magical security shield, that it doesn't have problem. Well, it does, they just don't seem to be getting exploited before there's a chance to fix them.
Of course one has to wonder what will happen as it becomes more popular. Plenty of people installed it before it started auto updating. Not too long ago I came across a grad student's laptop that was still running a pre 1.0 version. They figured they were safe and there was no reason to update since what they had worked.
URL: about:config, filter for: memory, adjust relevant options. -1 for capacity indicates automatic.
Heh, since Patrick V. got it out on Slackware yesterday, I guess you must be talking about it.... finally Slackware considered bleeding edge....
The online update only works if you use the offical binaries. Also, your user account has to have write access to the installation directory (or do it as root, but you should never run a browser as root).
"It ain't a war against drugs.it's a war against personal freedom" --Bill Hicks
Try to imagine writing a shell script that would cheerfully do a cd /usr/bin; rm *. Can you? Now look at this bug report:
bug 234479
One of the programmers (Andrew Schultz) can't imagine any way of dealing with version skew problems outside of completely erasing the installation directory in order to start from scratch.
Uhh... no. People give MS shit for finding and not fixing security holes. Since we're talking about browsers, I give you IE6, which hasn't received a serious overhaul in over half a decade and has proved to be an extremely insecure application.
Microsoft has a history of leaving known (as in having exploits in the wild) security flaws unpatched. Some argue they do this because hackers can then reverse-engineer patches and create exploits of the bugs, but that logic is a bit dubious to me. If your software has security problems, they should be addressed. Period. And this is exactly what Mozilla does.
About your last point, that's one of the key improvements in version 1.5. Updates are downloaded and installed automatically. Users will be up to date unless they specifically set it otherwise. Users of previous versions still have to upgrade manually, but I think in time most will.
Favorite quote: "
I have version 1.5.0.5 installed on my windows machine and the online demo still crashes my browser. I will await version 1.5.0.6. :)
Actually people complain about MS finding and then NOT fixing security holes. Look at the update record of their browser, compaired to FF, Firefox has about a week to a month fix rate, MS has about 1 year to never fix rate. People also complain that IE is UNFIXABLE due to its dependance on Active-X, which basically gives malware a pass to the kernel.
Firefox finds bug, fixes bug, no news here.
I really have no qualms about Firefox fixing a bug, it shows that their on it. Nobody claims that OSS is bug free, or security risk free, since this is impossible, from closed or open software. Code is a complex beast, like the hydra, you chop off one bug/security hole, and you probably open up more. That is intrinsic in coding, and design. The difference is the flexability of OSS, where bugs are easily seen, and easily remedied.
When the market share hits critical mass, things should get fun, though. But the openess of OSS still will keep it from reaching IE proportions. And shame on those who think that Firefox = security, the internet is still a bad place, no matter what you run. Good software is no substitute for intelligence, ever.
A patriot must always be ready to defend his country against his government. -edward abbey
Portable Firefox is now Mozilla Firefox - Portable Edition (or, Firefox Portable among friends) and a new version has been released. This new version sports some handy new features, including: CD support (aka Firefox Portable Live), partial update support, in-place upgrade support, full compatibility with Wine running on your favorite *nix distro, and more. It's available in three different versions: 1.5.0.5 for everyday use, 2.0 Beta 1 for testing the latest Firefox beta and 1.0.8 for web developers to test pages against. Full details are on the Firefox Portable Release Page.
Portable versions of Firefox, GIMP, LibreOffice, etc
but my Firefox crashed. :(
Hmmm... I think that pr0n link is broken.
ART on dA
First, whoever rated you insightful should never be allowed to moderate again. Sheesh. You're trolling, pure and simple.
Second, Microsoft makes one billion dollars in profit every month. In my opinion, they should be held to a higher standard.
Third, you're grossly misrepresenting most Firefox users, who don't expect Firefox to be perfect.
Fourth, Firefox is a safer browser to browse the web with, whether you like it or not.
Looks like Firefox 1.5.0.6 will be released very quickly to fix a bug in some streaming media links in 1.5.0.5. Specifically, Windows Media ".wmv" when called using "mms://", maybe real using "rm://", does not work. Breaks streamining video links on http://mlb.com/ Release candidates for Firefox 1.5.0.6 are already on the way.
Wonder why Seamonkey gets close to nil attention here, thinking ./ users would want the extra functionality/control of Seamonkey over FF's pretty face.
ALways wonder why if both use Gecko, FF supports horizontal scrolls while SM doesn't. Plus touchpad zoom 'just works' in FF and even IE, and 'just doesn't' in SM.
Just the other day I updgrade to 1.5 so I can use an extention. Unknow to me that turns on automatic updates. Turn my box on today and am told update is ready. Grumble, OK. Enter endless loop of Firefox unable to complete update (because I don't run as admin). Can't EVEN LOG OFF. Have to kill firefox from process list. I guess I'll run IE for an hour to feel better about Firefox again.
Redtail
After reading the 'what's new' for the a-release and its bug fixes, it still boils down to one thing: Thunderbird still can't let you add address book records using LDAP. I was hoping this issue would get resolved soon enough but no dice. Someone, PLEASE tell me how wrong I am. I beg you!
This is frustrating because in my experience, Outlook is such an irrational piece of software when it comes to IMAP/LDAP and Thunderbird (to me anyway) only provides a superior IMAP portion. Still does wonders for me but how would a small office synchronize their address book otherwise?
Luckily there is a Thunderbird plugin that performs that trick by using regular files -- SyncMab.
When are we going to stop writing large programs in C? For small things where potability is critical and lines of code are low, C can be a good choice for a certain class of application where low-level access and/or high efficiency is needed. However, with something massive like Firefox, it isn't possible to keep tabs on things. The result is a number of security holes surfacing constantly -- Not an ideal situation. Why not move to a more secure language like Cyclone? Programmer portability in such a situation is high and entire classes of bugs would disappear. The performance penalty would be minimal.
Why aren't more people using such language? Why not use Cycling, or even higher level languages where they can reduce lines of code and keep things more maintainable in less performance critical sections? I can only attribute it to laziness and blubism:
"As long as our hypothetical Blub programmer is looking down the power continuum, he knows he's looking down. Languages less powerful than Blub are obviously less powerful, because they're missing some feature he's used to. But when our hypothetical Blub programmer looks in the other direction, up the power continuum, he doesn't realize he's looking up. What he sees are merely weird languages. He probably considers them about equivalent in power to Blub, but with all this other hairy stuff thrown in as well. Blub is good enough for him, because he thinks in Blub." - Paul Graham