PDA

View Full Version : Geeks with Firefox please update


PapaSkin
12-20-2006, 11:11 AM
- (Threat Score: 5) Multiple vulnerabilities reported in Mozilla
Firefox, Thunderbird and SeaMonkey

Good time to hit the Help button and click "Check for updates" Only takes a few minutes and is painless

Don't got it? Want it? Go http://en-us.www.mozilla.com/en-US/firefox/all.html

Nutter
12-20-2006, 12:08 PM
thats why I use opera. for those of you who dont want to deal with those issues. http://opera.com

Enjoy...

steelcityskin
12-20-2006, 12:44 PM
haha, is it bad that i use firefox, opera, and sometimes IE? i like to keep my options open:biggrin:

PapaSkin
12-20-2006, 01:35 PM
thats why I use opera. for those of you who dont want to deal with those issues. http://opera.com

Enjoy...

hrmmm...
Opera Found: 241 Secunia Security Advisories
Firefox Found: 139 Secunia Security Advisories

Just because I don't post vulnerabilities for Opera, doesn't mean they don't exist! haha

although Opera kicks ass as a browser, I just like to point that shit out cause Nutter and I always argue this browser war! haha

Loathe
12-20-2006, 04:25 PM
haha, is it bad that i use firefox, opera, and sometimes IE? i like to keep my options open:biggrin:

I know what you mean, shit I'd like to find a decent safari emulator just to check some of my CSS and JS shit.

Mike
12-21-2006, 01:15 AM
I use Safari and Firefox because of all the add-ons, extensions and plug-ins you can use for web dev, etc.

I never seen an security update for OSX that had a Firefox patch in it, do some of you Linux guys know if there are vulnerabilities in Firefox on OSX.

For years we NEVER had to worry about virii, email bugs, or any of that stuff and I have never had one ever on a Mac, but with the Free BSD kernel and Linux being the base architecture for OSX I think the door might be a little more open to such security problems than it used to be.

I also know that for the longest time since Macs only had about a 2-7% marketshare most virii writers wouldn't even bother with Macs. Why write virii or bugs for Macs when MS Windows had 90-95% of the market, thus they could potentially infect many more computers?

steelcityskin
12-21-2006, 01:32 AM
I know what you mean, shit I'd like to find a decent safari emulator just to check some of my CSS and JS shit.
if you find one, lemme know. that'd be kinda cool cause i never get to fuck with macs.

I use Safari and Firefox because of all the add-ons, extensions and plug-ins you can use for web dev, etc.

I never seen an security update for OSX that had a Firefox patch in it, do some of you Linux guys know if there are vulnerabilities in Firefox on OSX.

For years we NEVER had to worry about virii, email bugs, or any of that stuff and I have never had one ever on a Mac, but with the Free BSD kernel and Linux being the base architecture for OSX I think the door might be a little more open to such security problems than it used to be.

I also know that for the longest time since Macs only had about a 2-7% marketshare most virii writers wouldn't even bother with Macs. Why write virii or bugs for Macs when MS Windows had 90-95% of the market, thus they could potentially infect many more computers?

i know for linux there are firefox vulnerabilities, i just haven't gotten around to patching mine up yet.
yer going to see more virii and shit like you mentioned as the open source gains popularity. it's like if open source was huge and windows wasn't, we'd probably see way more exploits and such. guess that's just the way the beast works.

Mike
12-21-2006, 01:43 AM
i know for linux there are firefox vulnerabilities, i just haven't gotten around to patching mine up yet.
yer going to see more virii and shit like you mentioned as the open source gains popularity. it's like if open source was huge and windows wasn't, we'd probably see way more exploits and such. guess that's just the way the beast works.

hmmm...makes sense, every now and then on some Mac or OSX forums I will see a rumor or report of an "exploit" that was written for OSX and then later it will either be discredited or found to not a true.

I know there are definitely hacks written for Macs because I used to test our Mac networks at work with them, but hacks are different than virii or bugs and take some real software writing abilities to create them in my understanding versus a script kiddie on a PC misusing a canned script that someone else wrote.

PapaSkin
12-21-2006, 02:07 AM
What's actually being exploited in the browser is the fact they use Java as a plug-in and other various types of plug-ins - also Cross Site Scripting is O/S independant - can affect just about anyone if they get smart enough. I think it's just that Linux/BSD are better at jailing bad code than windows (spreads that windows love!)

Mike
12-21-2006, 02:11 AM
What's actually being exploited in the browser is the fact they use Java as a plug-in and other various types of plug-ins - also Cross Site Scripting is O/S independant - can affect just about anyone if they get smart enough. I think it's just that Linux/BSD are better at jailing bad code than windows (spreads that windows love!)

haha... Like the "Love Bug" email virus that took out thousands of PC networks worldwide?

Loathe
12-21-2006, 11:51 AM
haha... Like the "Love Bug" email virus that took out thousands of PC networks worldwide?

Shit man, there have been way worse days then that.

What was it 2002, 2003, when the two different electric blackouts occured and we had trojan after trojan in the wild, I was working for the Overseas Security Advisory Council for DSS at state then, and security was my main gig then. I mean, shit, there were still so many windows 2000 and earlier machines around, that patching maintenance and starup scripting was pretty much what I was doing full time. Web site defacements were through the roof.

Christ, the Pakistani crews, the Lebonese crews, they some real talent.

Good thing they have been mainly flushed out, plus from XP moving forward M$ has finally figured out that security needs to be integrated and constant.

BigBroMC
12-23-2006, 12:08 AM
kinda off topic and aside from the www, but I wonder what ever happened to gopher?

grouchybastid
12-23-2006, 12:26 AM
kinda off topic and aside from the www, but I wonder what ever happened to gopher?

Hahah...man, that brings me back! Most gopher servers got taken over by www servers once the web came to be and became ubiquitous. There actually *are* some gopher servers still running, and I'm pretty sure most browsers support gopher://

BigBroMC
12-23-2006, 12:31 AM
Hahah...man, that brings me back! Most gopher servers got taken over by www servers once the web came to be and became ubiquitous. There actually *are* some gopher servers still running, and I'm pretty sure most browsers support gopher://

I know IE doesn't any more. stupid IE

grouchybastid
12-23-2006, 12:34 AM
I know IE doesn't any more. stupid IE

Really? That's weak. Firefox does, I just hit a gopher server at MSU

BigBroMC
12-23-2006, 12:39 AM
Really? That's weak. Firefox does, I just hit a gopher server at MSU

I just found sdf.lonestar.org... it seems cool. I think I'm gonna spend the night surfing gopher... woo not spending money.