And look at the most recent Firefox fix - it's a temp fix which only disables the insecure feature.
There are a couple reasons for this. First, that patch was easy to make and test, and could be pushed out in, if my research is right, exactly 6 hours from the time it was on Full Disclosure to the time the patch was publicly available. The actual patch needed more than six hours to be made, tested, etc.
Also, several other security fixes are being put in to 1.0.7, which will be the patch for this.
They do. Everyone else's flaws are automagically patched the instant they're found. Since 12 hours have gone by, you can be sure that not only has this been patched already, but your version of firefox updated itself and you're now safe.
</sarcasm>Actually, if you're using a nightly, that probably will happen in a few hours. The new patching system is awesome. Binary diffs, so no downloading huge files, it downloads in the background so it doesn't disturb you, and installs when you restart firefox. It's amazingly convienient.
Actually, that's perfectly legitimate, as any high school student who's gone through the torture called "sig figs" can tell you.
The fixed number of digits after the decimal point implies that it's rounded, and is accurate to that level of precision. 100.000 is more precise than 100.00.
It's a troll, but I'll bite and see if I can get a free worm.
This is just wrong. A bit of research (http://weblogs.mozillazine.org/asa/, http://planet.mozilla.org/ shows that the developers, including Asa, routinely listen to users and often ask for comments. And from the point of view of an insider (bugs I've reported: 55), developers respond quickly and helpfully to anyone who isn't wasting their time, and even those who are but do it in a curteous way.
A few other specific points: the Mozilla Corporation is not for-profit. Nothing about a corporation says it has to be. It merely falls under business laws, making it easier for other businesses to interact with Mozilla.
And with respect to bug 18574, it's the one about MNG support. To quote a few things from the bug:
However, MNG inclusion won't even be considered until there is true reason to
include it. According to some numbers I believe I saw at libmng or
png.org/pub/mng, the number of MNG/JNG images ranges in the hundreds or the low
thousands. Period. Worldwide. Ever. Almost all of these images are also set
up as testcases, not as practical media on sites.
Its not something that'll
likely change going forward, unless MNG support is really low cost (i.e. not
200-300k). At 50-80k the case becomes stronger, of course. The "if you support
it, they will come" argument is weak, since we did support this for three years
and the content didn't come.
To clarify, though it's already been done, the animation you saw is a Flash animation. Flash does and always has run fine on Linux, though the releases are somewhat behind the windows and mac releases. Shockwave is an entirely different thing (by the same company), and there is no linux player. Last I checked (which was over a year ago) it worked with CrossOver, but that put up ads in the middle of what you were doing.
Since you asked, I use Gentoo, and it was about a day old (gotta love emerge --sync && emerge -Dtau world). Every once in a while, I report a bug to Macromedia about there not being a player. You should too.
An intelligent alien is not a member of the human species. An embryo is. Does that make it worse to kill that alien than the embryo? For that matter, a cat, dog, or mouse is not a memeber of the human species, but the embryo is. Yet the mouse, to all our observations, has a more developed emotional system than the embryo. Which is it worse to kill?
Vowel sound, not vowel. It makes it easier to pronounce. That's why you see "an honorary degree", but not "an hospital" (unless the person has a really weird accent and pronounces it "an 'ospital").
In "You have got mail", "have got" is the verb; the sentence is in the past perfect. (One could argue about whether or not "got" is correct, though.) In "You have mail" "have" is the verb; the sentence is in the present.
They're both correct, but have subtly different meanings.
At least you could have picked up a F/OSS browser to masquerade [as] Opera...
Actually, that's a really good idea... Seeing as Opera's rendering is correct most of the time, it's actually closer to Firefox's (which is also correct most of the time) than IE's (which isn't). And since more and more pages are learning about Firefox, chances are the user experience would be as good as or better if Opera masqueraded as Firefox.
I've gone with DreamHost* and I absolutely love it. 120GB/month for only $8**, with PHP, MYSQL, easy installs of wordpress and various other things I don't use, email, Jabber, etc.
Unless you absolutely need to pay under $8 a month, I've looked around quite a bit and it seems to be the cheapest and also one of the best out there.
*(disclaimer: link gets me money if you sign up with it:-)
** Can you say "overkill"? I use about 100MB of that, so I split with a friend and we each pay $4 a month.
Simple version: if you used the Firefox upgrade mechanism, they don't.
IIRC, it's slightly more complicated than that. Even so, the number is incredibly hard to guess: lots of people download more than once, and lots of people (think office rollouts or the like) download only once fore many machines. It's a guesstimate, and even if it were a good guesstimate it still is pretty meaningless, since it doesn't take into account how much people actually use the browser.
One of the people on http://planet.mozilla.org/ had a good post on this recently (that I can't find right now), what I've said here is pretty much a ripoff of my memory of what they said.
There are a couple reasons for this. First, that patch was easy to make and test, and could be pushed out in, if my research is right, exactly 6 hours from the time it was on Full Disclosure to the time the patch was publicly available. The actual patch needed more than six hours to be made, tested, etc.
Also, several other security fixes are being put in to 1.0.7, which will be the patch for this.
No, because they lack the fossil fuels.
I know, what's he talking about? I give myself A+s all the time, and put gold stars next to them!
Well getting automatic updates for windows would require that Microsoft actually ever patched their security bugs. ;-)
You didn't download 1.5, you dowloaded the 1.5 beta 1 release candidate . That's triply qualified as not 1.5.
It's not fixed yet, but when it is, you'll get it automatically when firefox updates itself (the new update system is awesome).
They do. Everyone else's flaws are automagically patched the instant they're found. Since 12 hours have gone by, you can be sure that not only has this been patched already, but your version of firefox updated itself and you're now safe.
</sarcasm>Actually, if you're using a nightly, that probably will happen in a few hours. The new patching system is awesome. Binary diffs, so no downloading huge files, it downloads in the background so it doesn't disturb you, and installs when you restart firefox. It's amazingly convienient.
I should try this with a real Model M. I seem to remember one in the house from years ago, it's probably up in the attic...
Actually, that's perfectly legitimate, as any high school student who's gone through the torture called "sig figs" can tell you.
The fixed number of digits after the decimal point implies that it's rounded, and is accurate to that level of precision. 100.000 is more precise than 100.00.
Go to about:config, right click and make a new boolean, name it wallet.crypto.autocompleteoverride, and set its value to 1 (or true).
The banks don't let it be the default, or even have it be a normal preference, but it's okay to have it be hidden like that.
It's a troll, but I'll bite and see if I can get a free worm.
This is just wrong. A bit of research (http://weblogs.mozillazine.org/asa/, http://planet.mozilla.org/ shows that the developers, including Asa, routinely listen to users and often ask for comments. And from the point of view of an insider (bugs I've reported: 55), developers respond quickly and helpfully to anyone who isn't wasting their time, and even those who are but do it in a curteous way.
A few other specific points: the Mozilla Corporation is not for-profit. Nothing about a corporation says it has to be. It merely falls under business laws, making it easier for other businesses to interact with Mozilla.
And with respect to bug 18574, it's the one about MNG support. To quote a few things from the bug:
Careful, they modded me "troll" for saying the exact same thing. (Even used the same word "ironic".)
To clarify, though it's already been done, the animation you saw is a Flash animation. Flash does and always has run fine on Linux, though the releases are somewhat behind the windows and mac releases. Shockwave is an entirely different thing (by the same company), and there is no linux player. Last I checked (which was over a year ago) it worked with CrossOver, but that put up ads in the middle of what you were doing.
Since you asked, I use Gentoo, and it was about a day old (gotta love emerge --sync && emerge -Dtau world). Every once in a while, I report a bug to Macromedia about there not being a player. You should too.
And rather ironic, isn't it, seeing as Shockwave doesn't even run on Linux.
An intelligent alien is not a member of the human species. An embryo is. Does that make it worse to kill that alien than the embryo? For that matter, a cat, dog, or mouse is not a memeber of the human species, but the embryo is. Yet the mouse, to all our observations, has a more developed emotional system than the embryo. Which is it worse to kill?
Oops, yeah.
Eeeh.. Slashdotted. What's it say?
That's in the past tense, so I'd expect he was already gone from the company when this happened.
Vowel sound, not vowel. It makes it easier to pronounce. That's why you see "an honorary degree", but not "an hospital" (unless the person has a really weird accent and pronounces it "an 'ospital").
In "You have got mail", "have got" is the verb; the sentence is in the past perfect. (One could argue about whether or not "got" is correct, though.) In "You have mail" "have" is the verb; the sentence is in the present.
They're both correct, but have subtly different meanings.
Actually, that's a really good idea... Seeing as Opera's rendering is correct most of the time, it's actually closer to Firefox's (which is also correct most of the time) than IE's (which isn't). And since more and more pages are learning about Firefox, chances are the user experience would be as good as or better if Opera masqueraded as Firefox.
I'm gonna go file a bug on that...
I've gone with DreamHost* and I absolutely love it. 120GB/month for only $8**, with PHP, MYSQL, easy installs of wordpress and various other things I don't use, email, Jabber, etc.
Unless you absolutely need to pay under $8 a month, I've looked around quite a bit and it seems to be the cheapest and also one of the best out there.
*(disclaimer: link gets me money if you sign up with it :-)
** Can you say "overkill"? I use about 100MB of that, so I split with a friend and we each pay $4 a month.
It's tri-licensed under the MPL, GPL, and LGPL. That means you can release code based on Mozilla under any one, two, or all three.
(Of course, it won't be accepted into the mozilla.org codebase unless it's also tri-licensed)
+1, First non "well duh" comment
Or it could mean that firefox's growth just isn't exponential, 'cause that would be pretty hard to keep up for very long...
Simple version: if you used the Firefox upgrade mechanism, they don't.
IIRC, it's slightly more complicated than that. Even so, the number is incredibly hard to guess: lots of people download more than once, and lots of people (think office rollouts or the like) download only once fore many machines. It's a guesstimate, and even if it were a good guesstimate it still is pretty meaningless, since it doesn't take into account how much people actually use the browser.
One of the people on http://planet.mozilla.org/ had a good post on this recently (that I can't find right now), what I've said here is pretty much a ripoff of my memory of what they said.