Critical flaws found in Firefox - RedsZone.com - Cincinnati Reds Fans' Home for Baseball Discussion

pedro · 05-10-2005, 11:45 AM

link

Critical flaws found in Firefox

The Mozilla Foundation has said it is "working aggressively" to fix two flaws in its open source Firefox browser.

The vulnerabilities, reported on Saturday, were identified as "very critical", but no cases had been reported of them being exploited. Several security firms identified the flaws which could let websites run malicious code on a person's computer.

Mozilla has responded by changing its update service and says people should temporarily turn off JavaScript code.

Manual downloads

The first flaw reported fools the browser into thinking software is being installed by a legitimate, or safe, website.

The second flaw happens when the software installation trigger does not properly check icon web addresses which contain JavaScript code.

A hacker could potentially take advantage of the security flaws to secretly launch malicious code or programs.

Mozilla advised people to download add-ons to its software manually from the Foundation's site.

Danish security firm Secunia said called the flaws "extremely critical" because cookie and history information could be used to get access to personal information or gain access to sites previously visited.

The Mozilla Foundation, which developed the browser, said it was working hard to provide a comprehensive and more permanent fix for the problems.

Main competition

Last week, Firefox celebrated its 50 millionth download since its official launch in November.

Firefox is Microsoft Internet Explorer's (IE) main rival in the browser market. Many like it because it is easily customised, and others say it has fewer security flaws than IE.

Being open source means people can adapt the software's core code to create innovative features, such as add-ons, RSS news feed readers, or extensions to the program.

The Mozilla Foundation was set up by former browser maker Netscape in 1998. Netscape dominated the browser market in the early 1990s.

Microsoft releases its next-generation IE7 later this year which promises to be more secure

jmcclain19 · 05-10-2005, 03:21 PM

thanks for this pedro. Good to know.

I love Firefox - would recommend it to any users of IE. Tabbed browsing is the way to go.

Jaycint · 05-10-2005, 03:57 PM

I'm a definite convert to Firefox. I'd never even consider going back to IE even if version 7 is more secure than previous versions.

Joseph · 05-10-2005, 04:41 PM

I love love love the tabbed browsing aspect and that alone is enough to keep me from using IE ever again.

pedro · 05-10-2005, 06:03 PM

I'm never going back either.

macro · 05-10-2005, 09:07 PM

Another Firefox user here, since January. Head and shoulders better than IE.

RBA · 05-10-2005, 09:14 PM

Firefox will be come a victim of it's own success. Before it really wasn't worth hacker's time to mess with it. But as it becomes more popular the more it becomes vulnerable to spreading trojans, virius, and associated mischief.

GAC · 05-10-2005, 09:17 PM

So whre does one go to get these download updates?

05-10-2005, 10:43 PM

Quote:

Originally Posted by GAC

So whre does one go to get these download updates?

I'm wondering the same thing. I think I saw on slashdot (no, I don't post there, LOL) that the Firefox group said it would make the patch(es) available to the public in due time.

05-10-2005, 10:47 PM

I love Firefox, guys, and don't think that this recent vulnerability is a good enough reason to switch browers; however, Opera 8 is looking like a really good browser. It's pretty quick, has tabs. The only thing I couldn't figure out about Opera 8 (the adware version) is how to add folders to the browser favorites without going to a child window to to "manage" the favorites. Both Firefox and Opera are going to completely shut out IE within a couple of years, IMO (ISP's should start bundling Firefox and Opera with their internet connection software), AND Opera has probably the best support for the CSS specification out there.

TRF · 05-10-2005, 10:52 PM

in the upper right hand corner of firefox, there is a link to the firefox homepage. Also they sometimes have a link announcing updates to their software there.

Brutus_the_Red · 05-11-2005, 01:38 AM

Another great feature of the firefox browser is the user-submitted extensions. You can add on all kinds of extensions to the program to make life even easier.

Here are some of the best ones I have:

forecastfox

This specific extension integrates weather.com into your browser. You simply input your city and state, press ok, and it puts pictures of the current forecast and tomorrows forecast in the lower left corner of the browser. Move your cursor over the picture, and it gives the weather details for the picture.

biblesearch

This one incorporates a toolbar for searching biblegateway.com, a site i frequent pretty often.

foxytunes

This one adds buttons to the bottom of your browser window to control mp3 playback. Just open your normal music player (it works with all the major ones, WMP, RP, Winamp, etc.), let it run in the background, and you can skip , stop, pause, eject from firefox without having to alt-tab or mess with other windows.

There's a whole bunch of these cool extensions that enhance firefox and make it even better. I spent close to 3 hours looking through them.

Here's a link to the extensions homepage

firefox extensions

05-10-2005, 11:45 AM	#1
pedro Please come again Join Date: Mar 2002 Location: portland, oregon Posts: 14,716	Critical flaws found in Firefox link Critical flaws found in Firefox The Mozilla Foundation has said it is "working aggressively" to fix two flaws in its open source Firefox browser. The vulnerabilities, reported on Saturday, were identified as "very critical", but no cases had been reported of them being exploited. Several security firms identified the flaws which could let websites run malicious code on a person's computer. Mozilla has responded by changing its update service and says people should temporarily turn off JavaScript code. Manual downloads The first flaw reported fools the browser into thinking software is being installed by a legitimate, or safe, website. The second flaw happens when the software installation trigger does not properly check icon web addresses which contain JavaScript code. A hacker could potentially take advantage of the security flaws to secretly launch malicious code or programs. Mozilla advised people to download add-ons to its software manually from the Foundation's site. Danish security firm Secunia said called the flaws "extremely critical" because cookie and history information could be used to get access to personal information or gain access to sites previously visited. The Mozilla Foundation, which developed the browser, said it was working hard to provide a comprehensive and more permanent fix for the problems. Main competition Last week, Firefox celebrated its 50 millionth download since its official launch in November. Firefox is Microsoft Internet Explorer's (IE) main rival in the browser market. Many like it because it is easily customised, and others say it has fewer security flaws than IE. Being open source means people can adapt the software's core code to create innovative features, such as add-ons, RSS news feed readers, or extensions to the program. The Mozilla Foundation was set up by former browser maker Netscape in 1998. Netscape dominated the browser market in the early 1990s. Microsoft releases its next-generation IE7 later this year which promises to be more secure

05-10-2005, 03:21 PM	#2
jmcclain19 Smells Like Teen Spirit Join Date: Apr 2004 Location: Phoenix Posts: 6,486	Re: Critical flaws found in Firefox thanks for this pedro. Good to know. I love Firefox - would recommend it to any users of IE. Tabbed browsing is the way to go.

05-10-2005, 03:57 PM	#3
Jaycint The Mad Monk Join Date: Dec 2004 Location: Northern Kentucky Posts: 1,283	Re: Critical flaws found in Firefox I'm a definite convert to Firefox. I'd never even consider going back to IE even if version 7 is more secure than previous versions.

05-10-2005, 04:41 PM	#4
Joseph Tired of talk. Win! Join Date: Jan 2005 Posts: 8,127	Re: Critical flaws found in Firefox I love love love the tabbed browsing aspect and that alone is enough to keep me from using IE ever again. __________________ Championships for MY teams in my lifetime: Cincinnati Reds - 75, 76, 90 Chicago Blackhawks - 10 University of Kentucky - 78, 96, 98, 12 Cincinnati Bengals - None Chicago Bulls - 91, 92, 93, 96, 97, 98

05-10-2005, 06:03 PM	#5
pedro Please come again Join Date: Mar 2002 Location: portland, oregon Posts: 14,716	Re: Critical flaws found in Firefox I'm never going back either.

05-10-2005, 09:07 PM	#6
macro Just The Big Picture Join Date: Jun 2000 Location: The Bluegrass State Posts: 6,150	Re: Critical flaws found in Firefox Another Firefox user here, since January. Head and shoulders better than IE. __________________ *Help stamp out, eliminate, and do away with redundancy.*

05-10-2005, 09:14 PM	#7
RBA CELEBRATION TIME Join Date: Apr 2000 Location: San Marcos, CA Posts: 13,940	Re: Critical flaws found in Firefox Firefox will be come a victim of it's own success. Before it really wasn't worth hacker's time to mess with it. But as it becomes more popular the more it becomes vulnerable to spreading trojans, virius, and associated mischief.

05-10-2005, 09:17 PM	#8
GAC What Me Worry? Join Date: Apr 2001 Location: Bellefontaine, Ohio Posts: 26,421	Re: Critical flaws found in Firefox So whre does one go to get these download updates? __________________ "panic" only comes from having real expectations

05-10-2005, 10:47 PM	#10
ws1990reds Guest Posts: n/a	Re: Critical flaws found in Firefox I love Firefox, guys, and don't think that this recent vulnerability is a good enough reason to switch browers; however, Opera 8 is looking like a really good browser. It's pretty quick, has tabs. The only thing I couldn't figure out about Opera 8 (the adware version) is how to add folders to the browser favorites without going to a child window to to "manage" the favorites. Both Firefox and Opera are going to completely shut out IE within a couple of years, IMO (ISP's should start bundling Firefox and Opera with their internet connection software), AND Opera has probably the best support for the CSS specification out there.

05-10-2005, 10:52 PM	#11
TRF Vavasor Join Date: Apr 2000 Location: Amarillo, TX Posts: 12,680	Re: Critical flaws found in Firefox in the upper right hand corner of firefox, there is a link to the firefox homepage. Also they sometimes have a link announcing updates to their software there. __________________ "don't end up with a grandson with a dog collar."

05-11-2005, 01:38 AM	#12
Brutus_the_Red Member Join Date: Dec 2002 Location: Dayton Posts: 383	Re: Critical flaws found in Firefox Another great feature of the firefox browser is the user-submitted extensions. You can add on all kinds of extensions to the program to make life even easier. Here are some of the best ones I have: forecastfox This specific extension integrates weather.com into your browser. You simply input your city and state, press ok, and it puts pictures of the current forecast and tomorrows forecast in the lower left corner of the browser. Move your cursor over the picture, and it gives the weather details for the picture. biblesearch This one incorporates a toolbar for searching biblegateway.com, a site i frequent pretty often. foxytunes This one adds buttons to the bottom of your browser window to control mp3 playback. Just open your normal music player (it works with all the major ones, WMP, RP, Winamp, etc.), let it run in the background, and you can skip , stop, pause, eject from firefox without having to alt-tab or mess with other windows. There's a whole bunch of these cool extensions that enhance firefox and make it even better. I spent close to 3 hours looking through them. Here's a link to the extensions homepage firefox extensions __________________ "It is much easier to fight for one's principles than to live up to them." - Alfred Adler

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode