Link to home
Start Free TrialLog in
Avatar of jslayton01
jslayton01

asked on

Firefox and its on going releases...NOT SECURE

Its as equally as unsecure as IE. You know why? Think about it: Why is the Mozilla team releasing updates or new releases EVERY week? That tells me its very unstable and insecure more so than IE... It seems to me that the source code is not written very well. I mean think about. We will probably see 1.07 downloads by the end of this week, and probably were going to see 1.08 next week too...and so on. Its just driving me up the walls. Its not stable as we first thought it was. These CONSTANT on going releases means something is up...which means instabilty and insecurity. I would like to get more peoples input on this and tell me what they think...Are these on going releases (literally every week) tell you that its unstable???

Its probably that the fact that hackers are watching this browser like a hungry dog. And Im willing to bet that FF will be more insecure than IE is. I am 100 percent right about this.

Its either they have to rewrite the source code to stop these "every week" releases and stuff. Its nonsense. Its not secure. And theres my input.
Avatar of war1
war1
Flag of United States of America image

Greetings, jslayton01!

The reason 1.0.6 was release one week after 1.0.5 was because 1.0.5 broke some extensions.

There is no plan to release v1.0.7, where did you hear this?  The next schedule release is v1.5 in September. This release will include many new features.

Cheers!
Avatar of jslayton01
jslayton01

ASKER

Firefox also has the disadvantages that it is Open Source and allows for easy plugin use (ie the greasemonkey vulnerability). It benefited from being much lower-profile than IE, now that Firefox is gaining popularity it needs to grow up.

If you want to feel secure with a graphical browser (not to mention fullfilled with excellent benefits), use Opera. While Secunia shows 21 advisories for Firefox 1.x, it only has 5 for Opera 8, and Opera 8 has been out longer than Firefox 1.
jslayton01,

Every browser has its good and bad points. Opera free version has an ad banner and takes of about 10% of the viewing space.  Otherwise you have to paid for it.
Well I use both, I mean firefox and opera.

I know about those short update cycles for firefox, and using a new version number for almost each bugfix might not be the best idea. But I think the firefoxteam has to deal this way.

When firefox 1.5 will be published we will have this new updatefeature updating only those parts of the program needing a change. Then I see no difference to the every second tuesday in a month update cycle of microsoft.

Opera might be more secure, but it is missing 2 thinks I really enjoy while using firefox: the adblock and the flashblock extention. Both are unique and not matched by any workaround / tweak in opera. Adblock has this with-a-mouseclick-advertisement-block feature and flashblock pauses each flash (whitelist supported)

Tolomir


jslayton01-

Are you asking a question or presenting a point of view?

"Its probably that the fact that hackers are watching this browser like a hungry dog. And Im willing to bet that FF will be more insecure than IE is. I am 100 percent right about this."

On what grounds are you determining that FF is more insecure than IE?

There is a huge difference between a bug that causes an application to loose functionality than a bug that causes a security breech.

FF market share has grown quite a bit in the last year and as such has become a bigger target, so more of the application is getting used and abused by a larger crowd, consequently increasing the likelihood of issues being discovered. when you compare it with opera, what market share does opera have? some say, opera has only 1 percent of the market share and FF has 8.7, even if you doubled Opera's market share there are still fours times as many active users using FF.

So how many security advisories have been generated for FF vs. IE?

According to a keyword document search on http://www.cert.org FF= 24 vs. IE = 606 (Opera = 40).

Much of what I see on EE is opinion, but those opinions are usually offered by the community to help an individual solve a problem, what is your question and how may we assist you in solving your problem?

-t
It's wonderful that FF can make these releases so quickly! As indicated above in two links, IE has unpatched vulerablities, while FF is addressing the vulnerabilities straight away. The lack of ActiveX is also a major advantage when you think about overall security of IE vs FF. While you can turn off ActiveX scripting, you can also not install grease monkey, or other extensions. So it's not a valid argument when a 3rd party app is added to the browser. That app is at fault, not really the browser. IE has app add on's from 3rd parties also that are not secure. Opera is also a fine browser, and it does seem to have less vulnerabilities than the others, but when the IDN vulerabliity came out, opera also had to make a patch for their code, so no one is perfect. IE was immune to IDN because it doesn't support the standard, although the Secunia IDN tests do make IE display the spoofed "paypal.com" address in the address bar, however the content of the webpage is an error.

It's a tough case to make in either direction, for or against certain browsers. Some browsers have a large vulnerability that another will not have, or one had ton's of minor vuln's and the others have 1-2 big ones... It's realitive. What I think makes for a better case is actively patching and securing often is better than waiting for a huge roll up patch months down the road. In my opinion.
-rich

All IE supporters (I'm not included) are looking forward to IE7 that it seems will try to compete with Firefox and other browsers on similar grounds, or at least introducing (copying, adapting, whatever...) some of the most popular features available in other browsers.

Of course, knowing MS, the first couple of years will be spent troubleshooting and patching the original release. After all, aren't final users the Beta99 testers?

Zee
FF and IE are about equal in terms of security (look at the list of FF vulunerabilities - some of them quiet serious - if you think otherwise).  Both do their best to patch the vulnerabilities though however FF has the advantage in that it has a tiny market share...  so if you're a hacker which one will you target?  The one used by less than 10 percent of the internet population or the one with a 90% market share (especially since among that 90% are lots of people who have no concept of security).

If you really want top security, you'd use Lynx :-)


ASKER CERTIFIED SOLUTION
Avatar of bbao
bbao
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial