Slashdot Mirror


Thunderbird 2.0 Alpha 1, Firefox 1.5.0.5 Available

nuyorker and hdm wrote to mention the new releases for Thunderbird and Firefox. hdm writes "This release of Firefox fixes 12 security holes, many of which can be used to execute malicious code. The Browser Fun project has provided an online demonstration of one of these flaws. This demonstration is capable of executing code on Windows, Linux, and both architectures of the Mac OS X platform; you're going to want to upgrade today!"

16 of 164 comments (clear)

  1. Available? by fyrie · · Score: 5, Informative

    As in pushed out to you without asking you first. That was quite the surprise.

    1. Re:Available? by Anonymous+Crowhead · · Score: 5, Informative

      You can turn off auto updating in your prefs if you want.

      Preferences > Advanced > Update tab.

      Yeah, that kind of annoyed me the first time, but in retrospect it is good for the general public to have automatic be on by default.

    2. Re:Available? by smitingpurpleemu · · Score: 3, Insightful

      Yes, this smacks of what M$ does with its automatic update service and can be a privacy issue. But if they don't do this, the update will have a much smaller adoption rate and since they disclosed what security bugs they fixed, the hackers can easily exploit them on unpatched versions, of which there will be a greater percentage because people are lazy and don't update.

  2. Memory features by end15 · · Score: 3, Insightful

    Does anyone know if this latest release has gotten rid of some of the memory "features" that I've come to love in Firefox. I don't know what I would do if they got rid of them (other than have a smaller page file ;). Thanks!

    --
    All glory to the Hypnotoad!
  3. Re:So much for security... by Kesch · · Score: 5, Insightful

    Security holes were found. Security holes were fixed. I don't see a lack of attention to security.

    --
    If this signature is witty enough, maybe somebody will like me.
  4. Re:So much for security... by hritcu · · Score: 3, Interesting

    Probably this is a more general issue than just security. They should take the whole testing process more serious. Having millions of users it is not enough to ensure product quality, even if it helps to some extent.

    --
    If you don't fail at least 90 percent of the time, you're not aiming high enough. (Alan Kay)
  5. Finally! by angrytuna · · Score: 4, Informative

    I have really been waiting for this build of Thunderbird. It finally includes message tagging, which is something that I've been wanting natively in Thunderbird for a long time. Tagging now also apparently works with IMAP connections, although at least some users are having some problems with that feature. (Bug #344290).

    --

    It is a solemn thought: dead, the noblest man's meat is inferior to pork.

  6. Re:So much for security... by Sycraft-fu · · Score: 4, Interesting

    But that's what people give MS shit for, finding and fixing security holes. The attitude is that, had there been better design, the holes would not have existed in the first place. I've often seen it preached that OSS doesn't have the same problems since many eyes look at it and thus find all the bugs. That is, of course, not the case. I think the GP was simply pointing that out. some people feel like running Firefox is a magical security shield, that it doesn't have problem. Well, it does, they just don't seem to be getting exploited before there's a chance to fix them.

    Of course one has to wonder what will happen as it becomes more popular. Plenty of people installed it before it started auto updating. Not too long ago I came across a grad student's laptop that was still running a pre 1.0 version. They figured they were safe and there was no reason to update since what they had worked.

  7. a problem with firefox installs by doom · · Score: 4, Interesting
    Would anyone want to hear a semi-relevant complaint about Firefox? There's some major suckage in the installer as far as Linux is concerned. If you make the mistake of trying to put the new version of firefox where the existing version is, it's entirely too easy to end up blowing away an entire directory -- e.g. your "/usr/bin".

    Try to imagine writing a shell script that would cheerfully do a cd /usr/bin; rm *. Can you? Now look at this bug report: bug 234479

    One of the programmers (Andrew Schultz) can't imagine any way of dealing with version skew problems outside of completely erasing the installation directory in order to start from scratch.

    1. Re:a problem with firefox installs by gatzke · · Score: 3, Informative

      I personally like to install firefox / mozilla / whatever in /usr/local/application or /opt/application and include version numbers

      /opt/mozilla-1.3

      /opt/mozilla-1.4

      /opt/mozilla-1.5.2

      So you get the old version installed and kept as well.

      Then I get into /usr/bin and soft link the application there

      cd /usr/bin
      ln -s /opt/mozilla-1.5.2/bin/mozilla ./mozilla

      Sometimes I keep the old version as a softlink as well

      ln -s /opt/mozilla-1.4/bin/mozilla ./mozilla.old

    2. Re:a problem with firefox installs by John.Thompson · · Score: 3, Informative

      There's an installer for linux? :-)

      Seriously, I just use the tarball. I unpack it, then "mv firefox firefox-1.5.0.5" and "ln -s firefox-1.5.0.5 firefox" so that I retain the old installation (just in case) and automatically point users to the new location. Before I update I just have to delete the sym-link before unpacking the tarball.

  8. Re:So much for security... by Omestes · · Score: 5, Insightful

    Actually people complain about MS finding and then NOT fixing security holes. Look at the update record of their browser, compaired to FF, Firefox has about a week to a month fix rate, MS has about 1 year to never fix rate. People also complain that IE is UNFIXABLE due to its dependance on Active-X, which basically gives malware a pass to the kernel.

    Firefox finds bug, fixes bug, no news here.

    I really have no qualms about Firefox fixing a bug, it shows that their on it. Nobody claims that OSS is bug free, or security risk free, since this is impossible, from closed or open software. Code is a complex beast, like the hydra, you chop off one bug/security hole, and you probably open up more. That is intrinsic in coding, and design. The difference is the flexability of OSS, where bugs are easily seen, and easily remedied.

    When the market share hits critical mass, things should get fun, though. But the openess of OSS still will keep it from reaching IE proportions. And shame on those who think that Firefox = security, the internet is still a bad place, no matter what you run. Good software is no substitute for intelligence, ever.

    --
    A patriot must always be ready to defend his country against his government. -edward abbey
  9. Firefox Portable 1.5.0.5 & 2.0 b1: Works on US by CritterNYC · · Score: 3, Informative

    Portable Firefox is now Mozilla Firefox - Portable Edition (or, Firefox Portable among friends) and a new version has been released. This new version sports some handy new features, including: CD support (aka Firefox Portable Live), partial update support, in-place upgrade support, full compatibility with Wine running on your favorite *nix distro, and more. It's available in three different versions: 1.5.0.5 for everyday use, 2.0 Beta 1 for testing the latest Firefox beta and 1.0.8 for web developers to test pages against. Full details are on the Firefox Portable Release Page.

  10. I was going to post earlier... by Urtica+dioica · · Score: 4, Funny

    but my Firefox crashed. :(

  11. Re:You know it's true. by Teckla · · Score: 4, Insightful
    Ugh. Security holes? Malicious code? I knew there was a reason I switched to Firefox. This just proves IE is worthless. Oh wait, this is about firefox? Ummm... Hooray! Firefox is even more secure now!

    First, whoever rated you insightful should never be allowed to moderate again. Sheesh. You're trolling, pure and simple.

    Second, Microsoft makes one billion dollars in profit every month. In my opinion, they should be held to a higher standard.

    Third, you're grossly misrepresenting most Firefox users, who don't expect Firefox to be perfect.

    Fourth, Firefox is a safer browser to browse the web with, whether you like it or not.

  12. Very Deja Microsoft experience by redtail · · Score: 3, Interesting

    Just the other day I updgrade to 1.5 so I can use an extention. Unknow to me that turns on automatic updates. Turn my box on today and am told update is ready. Grumble, OK. Enter endless loop of Firefox unable to complete update (because I don't run as admin). Can't EVEN LOG OFF. Have to kill firefox from process list. I guess I'll run IE for an hour to feel better about Firefox again.

    --
    Redtail