Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Name: Wombat
Secunia Research has discovered two vulnerabilities in Mozilla, Mozilla Firefox, and Camino, which can be exploited by malicious web sites to obtain sensitive information and spoof dialog boxes.
http://secunia.com/advisories/12712/
Purgamentum initium, exitus purgamentum

Same here Kevin, I never have liked tabbed browsers, I've given them all a go. I'll stick to IE6 it serves me well.
Purgamentum initium, exitus purgamentum

NO ...I insist ... LMFAO <-- :)
Bout time FF was given a real world work out. It should get a baptizism of fire as it rises majestically out of BETA status ;)Anyone wondering why the delay in 1.0 RC1 release -- that's one of em.
See the iDiOt walk
See the idiot TaLkWaLk IdIoT WaLk

IE suffers from the first vulnerability, except not with tabs. I could link to a secure page just like they did for the Firefox proof-of-concept, but have it open in a new window because IE people use windows like Firefox people use tabs, then do the Javascript popup thing.
The second one would be worth more attention if the text went into forms on both pages. Don't you think most people would notice when the text they're typing doesn't echo and other form elements don't work at all?
IE, however, has numerous real vulnerabilities, and clicking links rather than typing URLs to secure sites is far more dangerous in IE than Mozilla.
I think Mozilla will always be more secure than IE simply because it isn't integrated into the OS, thus exploits tend to do significantly less damage.

Hook, Line and sinker....
I knew a firefox love would jump in sooner or later. Why do you think I placed my... LMAO at the end of the post.
Takes awhile sometimes but the fish almost always bite.
KTTD

And just to show I'm not picking on Firefox, here's the link for Opera users...
http://secunia.com/advisories/12713/
And one for Netscrape 7x...
http://secunia.com/advisories/12714/
Purgamentum initium, exitus purgamentum

Come on Wombat ...show the disgrace list for IE too.
By tomorrow, I expect at least a 45 sided, A4 essay paper filled, document. With ALL IE TechNet security beefytin "I's" and "T's", crossed and trubplicated.
At least offer the undecided the promise of untampered dwarf porn and heavenly "burdened" virgins -- malware free, somewhere along this dodgy Internet highway.
Jeeez.
See the iDiOt walk
See the idiot TaLkWaLk IdIoT WaLk

Lol, here we go! I love Firefox, but I quite honestly have been waitng for this to happen. I also have high doubts these are the only issues too. But now Kevin, before you go jumping out of your seat with glee, you have to admit that IE has FAR more troubles.
This is off-topic, but I saw at PCWorld today where a flaw was in Windows that allowed people to put programs on your computer and screw you through the copy and paste function----even with SP2 and a fully patched system.
Man, I tell ya, no matter how much you patch, use security programs, or whatever, somebody still always manages to find a freaking hole in Windows. You can switch to a different OS, but Linux has taken hits and it seems that people are starting to have a field day with Macs now.
I say we all switch to MSNTV units (don't throw things, it was a joke). Lol, sadly I've been there, hated it, but admittedly never had a virus, a hacked computer, or any other crap I've had to put up with a computer.

dw226,
Yes, IE has more known flaws because it is the most popular, we know this as fact. When another browser becomes the defacto it will then have the most flaws.
Yes we can all patch have anti-virus, anti-trojan and both hardware and software firewalls and you can run any OS in this world and there are a lot of OS'es out there. To many to even count and none of them are 100% secure.
Yes, I will admit that at the current time if you are using Firefox over IE you are less at risk but I have been using IE since 1996 and have never had a problem but then again I have been a computer professional since 1989.
I also have to note, what I do for myself I do not always do for my clients. A lot of my clients are not running SP2 and will not be for a long time. I just make sure the systems are secure in other ways.
KTTD

this is what the Ie lovers would say when the Ie was and is still being ripped apart from the underground.Its because Ff is more popular now thats why it has vulnerabilities..Ie is like golf,which one has more holes.FORDDDDDDDDDD!!!!!LOL!!!!!LMAO

Helix,
What kind of responce was that? Firefox is far from the most popular browser at the moment and it will be sometime if it ever overtakes IE.
It was painful to read your responce is all I have to add.
KTTD

i just had a couple of beers.burrrrpppp!!! and i felt the urge.Ie is like a drunk,one to many.LOL!!!LMAO!!!
here is a couple of juicy ones for the ie security experts.
http://news.com.com/Why+I+dumped+Internet+Explorer/2010-1032_3-5391063.html
http://slate.msn.com/id/2103152/
http://www.washingtonpost.com/wp-dyn/articles/A6746-2004Jun25.html
http://www.oreillynet.com/pub/wlg/5199
http://reviews.cnet.com/4520-3513_7-5515107-1.html
ive got more juicy ones if ya need them.LOL!!!!!!and you guys like ie.LOL!!!!!!!!

"When another browser becomes the defacto it will then have the most flaws."
Only if that browser is integrated into the shell and has stupid, insecure features like ActiveX. Apache is more secure than IIS despite being more popular.
"I have been using IE since 1996 and have never had a problem but then again I have been a computer professional since 1989."
So you know what sites to avoid and what not to download. You wouldn't have problems then. The people that need Firefox for security don't know any better. People like me use Firefox for the features, and not just tabbed browsing and popup blocking, but mouse gestures, adblock, etc.
Do you guys like solving people's hijacking problems? Is that why you're trying to scare them away from secure browsers?

good point Jake.Most people that come here are all ie users,but you barely hear of any security experts respond with excellent info by changing browsers that have less spyware and all of the rest of the ie goodies.I usally go to the target range and ie reminds me of how many times the Ie exploits hit the bullseye.i would be one sharp shooter.LMAO!!!LOL!!

Ok, I said I would not respond but I was called out so I have too.
Jake,
As much as I want to respond to you I cannot. To much of a legal risk on my part. IE is a good browser. Just remember this. A computer is only as smart as the person sitting infront of it.
KTTD

When another browser becomes the defacto it will then have the most flaws.
This is not necessarily true. In the world of web servers, Apache dominates, while Micro$oft IIS has nowhere near its presence. Guess which one has more vulnerabilities and is defaced or hacked more often. :) Food for thought.

Glitchman,
go and read this...http://weblogs.asp.net/michael_howard/archive/2004/10/15/242966.aspx
I a computerprogrammer and I support this statement: "When another browser becomes the defacto it will then have the most flaws." That is because then there is a reason to look for them.
To Jake the following comment:
"insecure features like ActiveX", there is nothing insecure with activeX, it all depends on how you use it. And it actually is on of the best ways to build a high security web application.
Let's all stick to IE, in that way we have the best compatibility.
Wim

While there may have been more vulnerabilities found in Apache 2.x, they have certainly done a better job of patching them, as opposed to IIS.
I would be more interested in seeing figures of how often each type of site has been defaced or compromised. Every now and then, I come across a defaced site as I'm randomly surfing the web. When I find one that is obviously defaced, I make sure to fire up good ol' Lynx and see what type of server they are using with the = key. In all cases so far, they have been IIS servers. I am sure everyone would like to see a more scientific study of this.
I also can program (in ten languages, actually) and know that no software can ever be perfect. From experience, the holes in MS's software tend to be more critical. I can point out several sites that will immediately infect IE (even with latest patches), but it might be against the policies here. As for "sticking with IE", no thanks. Version 4.0 forever opened my eyes and I'll never use IE, even if my life depended on it.

![]() |
Monitoring & Surveill...
|
Info on Log-on and BLAZEF...
|

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |