Slashdot Mirror


Fear of Porn URL Exposure Discourages Firefox 3 Upgrade

Barence writes "Mozilla's Security team has disclosed a very interesting piece of research which suggests people refused to upgrade to Firefox 3 because they were afraid the browser would expose their porn collection. Mozilla's research found that the number one reason for not upgrading was the new location bar, and the fact that it delved into people's bookmark collections to suggest sites as they typed. 'When we expanded the capabilities of the location bar to search against all history and bookmarks in Firefox 3, a lot of people contacted us to say that they had certain bookmarks they didn't really want to have displayed,' Firefox's principal designer, Alex Faaborg, tactfully explains. 'In some cases users had intentionally hidden these bookmarks in deep hierarchies of folders, somewhat similar to how one might hide a physical object.'"

44 of 673 comments (clear)

  1. Browse safely by 0racle · · Score: 5, Funny

    That's why I use IE.

    --
    "I use a Mac because I'm just better than you are."
    1. Re:Browse safely by CarpetShark · · Score: 4, Funny

      Ahh, but you won't be using IE for much longer. Now, Mozilla have finally put the last nail in IE's coffin. Now, you MUST upgrade to Firefox 3, or be branded a pervert.

    2. Re:Browse safely by Alzheimers · · Score: 4, Insightful

      Yeah, but Chrome doesn't even have Print Preview

      At least IE has some nice page formatting options.

    3. Re:Browse safely by AlphaBit · · Score: 5, Funny

      That's why I use IE.

      "I use a Mac because I'm just better than you are"

      Your ability to combine those two statements into a single post makes you one of the most irresistable trolls I've seen...

    4. Re:Browse safely by commodore64_love · · Score: 5, Funny

      If two Anonymous Cowards speak to one another, does anyone hear them?

      --
      "I disapprove of what you say, but I will defend to the death your right to say it." - historian Evelyn Beatrice Hall
    5. Re:Browse safely by TheRealMindChild · · Score: 5, Interesting

      Sadly, you can get bit by this in Firefox too. The real bitch is, when I got infected, IE had never been explicitly opened and I don't "browse" the web with said machine. It turned out to be a flash, which was loaded by an ad banner from a hacked ad server, that was being served on a legitimate site.

      In general, IE has tons more vectors for drive-by malware, but Firefox isn't immune, if for any other reason, because third party plugins can be the attack vector.

      --

      "When life gives you lemons, don't make lemonade. Make life take the lemons back!" -- Cave Johnson
  2. To be more specific by 93+Escort+Wagon · · Score: 4, Funny

    I'm guessing "they were afraid the browser would expose their porn collection" at work.

    --
    #DeleteChrome
    1. Re:To be more specific by SOdhner · · Score: 5, Insightful

      That would certainly be a problem, but I think for most people porn and work are kept separate and yet they still have those concerns:

      1. Maybe you don't want your wife and kids to have porn urls popping up on the browser

      2. Maybe you don't want slashdot popping up at work, thereby allowing them to realize that it's not blocked like every other site.

    2. Re:To be more specific by CannonballHead · · Score: 4, Insightful

      Oh stop with the morals and ethics stuff. I should be able to do whatever I want to do, regardless of what I promised or said I'd do or what is good for my relationships with other people or what is good for other people. And, by the way, all this corporate and political corruption is really getting on my nerves, why can't they be good, ethical, moral, scientific, non-hypocritical promise-keeping citizens like me?

      [/sarcasm]

    3. Re:To be more specific by Brigadier · · Score: 4, Insightful

      forget porn, the last thing I need is my boss over my shoulder instructing me to type in a link and my prevalent searches of hot jobs, career builder and our competitor sites career section to pop up.

    4. Re:To be more specific by TooMuchToDo · · Score: 4, Insightful

      Wrong. Maybe you just need a wife who is into porn as well. Having a healthy sex drive is not a fault.

    5. Re:To be more specific by Facegarden · · Score: 4, Insightful

      Maybe you don't want your wife and kids to have porn urls popping up on the browser

      Maybe if you're married & have children you shouldn't be looking at porn, then you wouldn't have that problem...

      Hah, are you kidding me!? I date girls that don't care if I look at porn because they like it too, and I'm not gonna marry anyone so prudish that she cares, because it's just porn! My only concern would be my kids finding it, but really I'd just have my own user account or my own computer so it wouldn't be a big deal.

      You seriously are ridiculous if you think that being married means you can't enjoy porn, with or without your wife.
      -Taylor

      --
      Worldwide Military budgets: $2100 billion. Worldwide Space Exploration budgets: $38 billion. Really, world? Really?
    6. Re:To be more specific by TooMuchToDo · · Score: 4, Interesting

      It's not an either/or. You can do both. For more fun, you can do both at the same time (whether those you're watching are on a video or in person is a function of how adventurous you are). My wife and I are young still though (I'm 26 and she's 25) so we haven't had all those old people stigmas kick in yet.

    7. Re:To be more specific by MightyYar · · Score: 4, Funny

      Maybe if you're married & have children you shouldn't be looking at porn, then you wouldn't have that problem...

      I don't hide my porn browsing from my wife, but I still don't want it popping up every time someone starts to type something into the address bar. I always cringe when a guest comes over and types "a" into the address bar and "Amateur Porn Blog" comes up as the first item in the list.

      --
      W..w..W - Willy Waterloo washes Warren Wiggins who is washing Waldo Woo.
    8. Re:To be more specific by MightyYar · · Score: 4, Insightful

      Is watching others have sex instead of having sex with your spouse healthy?

      I don't know about "healthy", but a bottle of wine and some porn can often lead to "sex with your spouse", quite the opposite of what you imply.

      --
      W..w..W - Willy Waterloo washes Warren Wiggins who is washing Waldo Woo.
    9. Re:To be more specific by interkin3tic · · Score: 4, Funny

      It's not an either/or. You can do both. For more fun, you can do both at the same time

      Carefull: you can propose to do both at the same time and end up doing neither. ... I probably shouldn't have suggested the paper bag

    10. Re:To be more specific by jawtheshark · · Score: 4, Insightful

      My experience says that it's the female sex drive that ceases.

      Besides, I don't see an issue: I have my account on the computer, she has hers.... She doesn't know my password. I surf anything I want and she won't know.

      Every user on a computer should have their own account... no excuses...

      --
      Ahhh...the great dumpster continuum. Many a free computer will be found there. -- sowth (748135)
    11. Re:To be more specific by jawtheshark · · Score: 4, Insightful

      Two words: "Guest Account"

      I do not get this, in the day and age of computers that are finally pretty much all multi-user capable... nobody uses it.

      --
      Ahhh...the great dumpster continuum. Many a free computer will be found there. -- sowth (748135)
    12. Re:To be more specific by ottothecow · · Score: 4, Insightful

      where's the porn-block extension for autocomplete? Can we get a system that ties into one of those child protecting porn blockers but instead of blocking the content, it just hides it (no history, autocomplete, etc)? Who wants to switch to private browsing mode everytime a questionable link catches your eye and you think it might be time for a little R&R...lets put these content filters to work for us!

      --
      Bottles.
    13. Re:To be more specific by Lumpy · · Score: 4, Insightful

      My wife and I are 41 and 43. That "old fart" stigma is not related to age but to how far a stick is up their rectum.

      Naked bodies are not "dirty" sex is not "dirty" Those that believe it is have a serious emotional problem or physiological disorder. and yes I know this goes against the grain of the Puritanical popular stance that has overtaken the United states.

      Who cares, My wife and I have sex with the windows open in the summer when it's a nice night out, and she is one hell of a screamer.

      I can watch a movie where someone gruesomely tortures people to death in a public theater, but god forbid should we watch two people love each other in a sexual moment.

      --
      Do not look at laser with remaining good eye.
    14. Re:To be more specific by MBGMorden · · Score: 4, Insightful

      That would certainly be a problem, but I think for most people porn and work are kept separate and yet they still have those concerns

      For the most part I'd agree. I know personally that though I surf a decent amount of porn, and I surf a lot of "non work related" sites at work (gotta break up the monotony somehow), I know very well not to touch porn sites with a 10 foot firewall when at work. It's just not something a smart person does. They'll forgive you for playing solitaire at work. They'll forgive you for Slashdot. They'll even forgive you for Myspace. You get caught surfing porn at work though and 99% of the time you're gone, no questions asked. Still, every so often we'll catch some idiot doing it, much to my amazement.

      --
      "People who think they know everything are very annoying to those of us who do."-Mark Twain
    15. Re:To be more specific by WED+Fan · · Score: 5, Funny

      Why don't we have a mod for "I'm obviously lying, but here's my story anyway..."?

      --
      Politics is the art of looking for trouble, finding it everywhere, diagnosing it incorrectly and applying the wrong fix.
    16. Re:To be more specific by mcbutterbuns · · Score: 5, Funny

      Maybe if you're married & have children you shouldn't be looking at porn, then you wouldn't have that problem...

      Wrong. Maybe you just need a wife and children who are into porn as well. Having a healthy sex drive is not a fault.

      There, fixed that for you.

    17. Re:To be more specific by KylePflug · · Score: 4, Insightful

      Trust issues much? I haven't used a non-shared password on a home computer since I left a dorm. My wife knows every password I have, and so do some trusted friends.

      The old adage that social engineering is the best security hole in the world goes both ways; a little bit of trust is a hell of a lot better than a lifetime of looking over your shoulder. If you're afraid of your wife seeing things, maybe you should (a) not do those things, or (b) talk to your wife about why you think it shouldn't be a problem, or (c) remain single. Hiding shit is not a good long-term plan.

    18. Re:To be more specific by geminidomino · · Score: 5, Funny

      ...not related to age but to how far a stick is up their rectum.

      Hey, if that's what they're into, who are you to judge?

    19. Re:To be more specific by Delkster · · Score: 5, Funny

      where's the porn-block extension for autocomplete?

      Or a porn-get extension with autocomplete?

    20. Re:To be more specific by Fulcrum+of+Evil · · Score: 4, Insightful

      For all you people who would usually just take offense to his question, instead show him proof that pornography is not an unhealthy addition to a relationship.

      Is there any evidence that it is? Aside from the morality brigade, that is.

      --
      "We returned the General to El Salvador, or maybe Guatemala, it's difficult to tell from 10,000 feet"
  3. Umm .... by krou · · Score: 4, Insightful

    Then making it a configurable option: Enable/disable. Or am I missing something?

    --
    'If Christ had tweeted the sermon on the mount, it might have lasted until nightfall.' - John Perry Barlow
    1. Re:Umm .... by Hatta · · Score: 4, Insightful

      What you're missing is that the FF developers think they know better than you. Personally, I hate the "awesomebar" because it's slow. If I have to wait for an auto complete function to catch up with my typing, something is very wrong. Auto complete should always be faster than manual entry.

      --
      Give me Classic Slashdot or give me death!
    2. Re:Umm .... by Knara · · Score: 4, Informative

      Technically, it is configurable (about:config has a property that disables the bookmark searching), just not with a neat radio button.

      Easy to find with a little googling, as well. I'd think that anyone trying to "hide" bookmarks in this way would have already figured it out.

  4. Scary by Kell+Bengal · · Score: 4, Insightful
    It's a scary thing when what you think is gone and hidden can suddenly be dredged up by accident at inopportune times. Same goes for files recovered from harddrives after deletion. Already, google finds those embarrassing photos from university days you thought were behind you.

    As time goes on, will we learn to be more circumspect, or will society change to accept that people are not perfect?

    --
    Scientists point out problems, engineers fix them
    altslashdot.org: The future of slashdot.
  5. Wait...what? There's PORN on the Internet? by Anonymous Coward · · Score: 5, Funny

    Why didn't someone tell me about this sooner? I wouldn't have wasted all this time on Slashdot, Digg, and Fark.

  6. Some things never changed by istartedi · · Score: 4, Interesting

    When I was in tech support 10 years ago, "How do I get rid of things in the drop-down?" was a common Netscape support question.

    Some of them were very cool and didn't say why they wanted to get rid of it. Some said "I accidently hit this link". I think I may have had one or two guys who were honest about it during my entire time there.

    --
    For all intensive purposes, "whom" is no longer a word. That begs the question, "who cares"?
  7. Changing autocomplete behavior using about:config by JacobSteelsmith · · Score: 4, Informative

    From http://kb.mozillazine.org/Disabling_autocomplete_-_Firefox To prevent entries from History or bookmarked items from appearing but show those that you have specifically typed into the Location Bar (url bar), use about:config to toggle browser.urlbar.matchonlytyped to true. To completely disable the Location Bar autocomplete function in Firefox 3, modify the preference browser.urlbar.maxRichResults to 0 (zero). [1]

  8. Simple Answer by rehtonAesoohC · · Score: 5, Insightful

    Use different browsers for different purposes.

    For example, use Google Chrome for your porn browsing, and then Firefox for your legit browsing.

    In other words... Don't cross the streams!!

  9. Nothing to do with Porn, it's the Awfulbar again. by Tackhead · · Score: 5, Insightful

    When we expanded the capabilities of the location bar to search against all history and bookmarks in Firefox 3, a lot of people contacted us to say that they had certain bookmarks they didn't really want to have displayed,

    Translation: People who typed "en." to bring up the last few times they'd visited en.wikipedia.org, "fi" to bring up the last few times they'd visited "finance.google.com", or "fa" for either "fark.com" or "failblog.org", were sick and tired of having to deal with "English, ASCII, and Unicode", "How to manage a thousand Files of data", and "The Awfulbar is a Failure because it mixes URLs, "TITLE" fields in bookmarks and TITLE headers all into one giant mishmash of UI hell."

    It's got nothing to do with pr0n, it's got everything to do with the fact that some people want a URL bar to act as a Bar with URLs, and the Firefox Design Team wants the "Location" bar to deal with "everything you ever visited, ever, with ever-changing menus".

    What's the first thing experienced Windows users do when they sit down in front of a new machine? They turn off the "Disable infrequently-used menu options" option in the Start Menu, and again in all of the MS Office apps.

    Software that automatically changes menus or frequently-used options around as a "favor" to the user was bad UI practice five years ago in Windows and Office, and it's bad UI practice today in Firefox. Unfortunately, it's such a clever bad idea that it'll never go away.

  10. Re:about:config by The+MAZZTer · · Score: 5, Informative

    You need to use about:config for 3.0, but in 3.5 they included the option to disable location bar searching in options... that's the whole point of this story, Mozilla took user feedback based on users who wouldn't upgrade to fix the issues they had with 3.0.

    It's very easy to find now, under Privacy in Options at the bottom.

  11. Re:Nothing to do with Porn, it's the Awfulbar agai by timster · · Score: 4, Interesting

    Hey, I like the awfulbar -- but I think I may have its only solid use case. When bored, I typically go through the alphabet with the location bar to find some site which I've visited before, but is not in my usual rotation, to see if there is something interesting and new posted there.

    With the awfulbar, I get a much greater cross-section of weirdness with each letter. Just the letter C, for instance, could have Camera-related sites, Cinemark, and for no reason at all the Washington Post.

    Two-letter combinations are even better. "GH" gives me Ghostbusters, and a random Mac vs Linux thread. "EW" gives me BBC News and a review of Ponyo. The wonders never cease.

    SHOULD a major interface element behave in a random and bizarre fashion? Well, probably not.

    --
    I have seen the future, and it is inconvenient.
  12. Re:Nothing to do with Porn, it's the Awfulbar agai by ShakaUVM · · Score: 4, Insightful

    It's got everything to do with the fact that some people want a URL bar to act as a Bar with URLs, and the Firefox Design Team wants the "Location" bar to deal with "everything you ever visited, ever, with ever-changing menus".

    Amen, brother.

    I didn't install Firefox 3 until there was a plugin to kill the Awesomebar. It really was a dealbreaker for me.

    I hate UIs that try to be helpful but end up distracting or otherwise messing up a clean interface.

    The old Google autocomplete was a great example of this - it'd type directly into the search bar while you typed in your search term, which means that if you typoed and needed to delete the last key entered, you'd delete the autocomplete instead, which broke, you know, typing. It was also distracting seeing text appear where you're typing, not only because it was constantly flashing words before your eyes, but also because if you're a touch typist you use the text up there to make sure you haven't typoed, and seeing an 'f' appear on the screen when you're about to type an 'm' triggers that correction reflex.

    The current design is much better, with the dropdown box at least off to the side while you type in your search term.

  13. Re:Changing autocomplete behavior using about:conf by srjh · · Score: 4, Informative

    There is no "browser.urlbar.matchonlytyped". At least not in Firefox 3.5.2...

    Turns out it's got something to do with the "browser.urlbar.default.behavior" entry, which consists of:

    1: history
    2: bookmarked
    4: match tag
    8: match title
    16: match URL
    32: match typed

    So to kill the annoying bookmark/tag/title matching, set it to 1+8+16+32 = 49

    I've also been told you can modify "places.frecency.unvisitedBookmarkBonus", but every time I do that Firefox changes it back.

    So much for user friendliness...

  14. Easy workaround in 3.5 by Ian+Alexander · · Score: 5, Informative

    Go to the preferences dialog, go to "Privacy" tab. There's an option which allows you to pick what kinds of data the Location Bar should look through.

    Select "nothing" and it won't look through either your history or your bookmarks.

  15. take it or leave it by Wansu · · Score: 4, Insightful

    I saw quite a few complaints about this behavior early on. The response was essentially that's tough, take it or leave it. Apparently a number of users left it.

    --
    Wansu, th' chinese sailor
  16. Re:HistoryBlock by Eil · · Score: 5, Insightful

    History Block fixes this problem very nicely. It let's you setup a block list of urls that should not appear in the history.

    So if someone snoops around in your browser, they would see an addon called "HistoryBlock" which contains a list of all the sites you didn't want them to know you visit.

    Classic.

  17. Re:HistoryBlock by xtracto · · Score: 4, Funny

    History Block fixes this problem very nicely. It let's you setup a block list of urls that should not appear in the history.

    So if someone snoops around in your browser, they would see an addon called "HistoryBlock" which contains a list of all the sites you didn't want them to know you visit.

    Classic.

    Duh, that's the reason the extension ExtensionBlock exists. You can configure it to hide any extension you do not want other people to see (HistoryBlock, refspoof, firefusk, etc).

    --
    Ubuntu is an African word meaning 'I can't configure Debian'