Mozilla adds security holes
Posted by Michael on Thursday November 7, 2002 @02:23AM
from the browser-wars dept.
Squid writes: The Mozilla Project, Netscape’s open-source underdog browser, announced six new security holes today. According to their press release, “These new security holes should go a long way toward closing the gap between Mozilla and Internet Explorer.”
This is just part of the Mozilla Project’s plan to become a serious competitor for IE. “Along with many more bugs and security flaws, we plan to add features that make it impossible to remove Mozilla from a computer,” according to a source within the project. Microsoft is not worried: “Thanks to ActiveX and a tighter integration with Windows, no software can match the insecurity of Internet Explorer,” said a Microsoft spokesman. “Except perhaps IIS.”
Subject:No Subject Given
I heard that Mozilla also is planning to post your IP adress on the toolbar for ease of use with an option to to send it to remote servers to truly beat IE.
Comment by vanguard — November 13, 2003 @ 2:11 am
Subject:Re: No Subject Given
http://www.texturizer.net/firebird/extensions/#pasteip
MozillaFirebird already has an extension that allows you to paste your IP into a textbox. Although that needs to be set to automatic and also needs to be part of the broswer itself and not an extension. Also should be impossible to turn off.
Comment by no one — December 20, 2003 @ 4:11 am
Subject:No Subject Given Either
Third post!
Comment by Hentre Levagin — March 18, 2004 @ 8:48 am
Subject:Ignorant Anti-M$ Fools
Geez you Anti-M$ punks really are lame. The only reason IE is thought to be less secure is that everyone and their mom are trying to find security problems with M$ products. I use Mozilla, Firefox and IE and often find myself reverting back to IE because of problems that come up with Mozilla. Mainly performance issues among other things.
Read the security posts on securityfocus.com and get educated.
Here are just a few issues that popped up this year.
2004-04-15: Mozilla Messenger Remote Denial Of Service Vulnerability
2004-04-08: Mozilla Browser Zombie Document Cross-Site Scripting Vulnerability
2004-04-08: Mozilla Browser Cookie Path Restriction Bypass Vulnerability
2004-04-08: Multiple Vendor S/MIME ASN.1 Parsing Denial of Service Vulnerabilities
2004-03-10: Mozilla Browser Script.prototype.freeze/thaw Arbitrary Code Execution Vulnerability
2004-03-10: Mozilla Browser Proxy Server Authentication Credential Disclosure Vulnerability
2004-02-02: Multiple Browser URI Display Obfuscation Weakness
2004-01-20: Mozilla Browser Cross Domain Violation Vulnerability
Comment by Someone who knows — May 5, 2004 @ 9:42 am
Subject:Re: Ignorant Anti-M$ Fools
it's always so cute when people don't get satire.
Comment by Matthew — May 13, 2004 @ 10:24 am