Comments for Mozilla Security Blog http://blog.mozilla.com/security Window Snyder's Blog Tue, 07 Oct 2008 09:26:16 +0000 http://wordpress.org/?v=2.6.2 Comment on Feedback from Opera on Mozilla JavaScript fuzzer by Chris http://blog.mozilla.com/security/2007/08/06/feedback-from-opera-on-mozilla-javascript-fuzzer/#comment-88437 Chris Tue, 23 Sep 2008 18:04:23 +0000 http://blog.mozilla.com/security/2007/08/06/feedback-from-opera-on-mozilla-javascript-fuzzer/#comment-88437 Opera is a great company and browser. I completely believe in their product roll outs as well. I use Opera a my default. Never had a problem with sites, it's nice to see that they are so willing to help the competition! Let's bring the World together! Chris-Lakewood, Ohio Opera is a great company and browser. I completely believe in their product roll outs as well. I use Opera a my default. Never had a problem with sites, it’s nice to see that they are so willing to help the competition! Let’s bring the World together!

Chris-Lakewood, Ohio

]]> Comment on Low Risk Denial of Service in Firefox by Thomas Jedenfelt http://blog.mozilla.com/security/2008/07/30/low-risk-denial-of-service-in-firefox/#comment-83618 Thomas Jedenfelt Tue, 02 Sep 2008 14:54:34 +0000 http://blog.mozilla.com/security/?p=39#comment-83618 If this is the same security issue as in Firefox 2, then there is a temporary solution, as stated in [Mozilla Firefox 2.0.0.3 Release Notes, March 2007]. See also [Firefox 3 Knowledge Base / Session Restore]: "The Session Restore functionality provided in Firefox 2 will restore connections to services which use session cookies to maintain login state such as GMail. It is recommended that users with concerns about the privacy implications of this behavior change the value of browser.sessionstore.resume_from_crash to false." If this is the same security issue as in Firefox 2, then there is a temporary solution, as stated in [Mozilla Firefox 2.0.0.3 Release Notes, March 2007]. See also [Firefox 3 Knowledge Base / Session Restore]:
“The Session Restore functionality provided in Firefox 2 will restore connections to services which use session cookies to maintain login state such as GMail. It is recommended that users with concerns about the privacy implications of this behavior change the value of browser.sessionstore.resume_from_crash to false.”

]]> Comment on TippingPoint vulnerability patched in Firefox 3.0.1 and 2.0.0.16 by Gigi http://blog.mozilla.com/security/2008/07/16/tippingpoint-vulnerability-patched-in-firefox-301-and-20016/#comment-81965 Gigi Thu, 28 Aug 2008 16:20:23 +0000 http://blog.mozilla.com/security/?p=38#comment-81965 Some of us would prefer not seeing the childish use of potty words by your less mature users. Perhaps,you would consider blanking (yes, censor their little tirades) their nasty little comments, which add nothing of value to the message. I feel certain you do everything possible to keep up with all the latest virus threats, etc., and some of us do appreciate it. Some of us would prefer not seeing the childish use of potty words by your less mature users. Perhaps,you would consider blanking (yes, censor their little tirades) their nasty little comments, which add nothing of value to the message.
I feel certain you do everything possible to keep up with all the latest virus threats, etc., and some of us do appreciate it.

]]> Comment on Low Risk Denial of Service in Firefox by Window Snyder http://blog.mozilla.com/security/2008/07/30/low-risk-denial-of-service-in-firefox/#comment-76704 Window Snyder Thu, 31 Jul 2008 08:44:39 +0000 http://blog.mozilla.com/security/?p=39#comment-76704 Mook, the bug is here: https://bugzilla.mozilla.org/show_bug.cgi?id=448564 Jesse, I posted about this issue because Radware issued a press release and I wanted to make sure our users had enough context to understand that this is a low risk issue. Mook, the bug is here: https://bugzilla.mozilla.org/show_bug.cgi?id=448564

Jesse, I posted about this issue because Radware issued a press release and I wanted to make sure our users had enough context to understand that this is a low risk issue.

]]> Comment on Low Risk Denial of Service in Firefox by Mook http://blog.mozilla.com/security/2008/07/30/low-risk-denial-of-service-in-firefox/#comment-76673 Mook Thu, 31 Jul 2008 05:18:53 +0000 http://blog.mozilla.com/security/?p=39#comment-76673 Is there some sort of bug number we can refer to? (Even if the bug is private, so that we would be able to refer back to it once it has been removed from the group) Is there some sort of bug number we can refer to? (Even if the bug is private, so that we would be able to refer back to it once it has been removed from the group)

]]> Comment on Low Risk Denial of Service in Firefox by Jesse Ruderman http://blog.mozilla.com/security/2008/07/30/low-risk-denial-of-service-in-firefox/#comment-76652 Jesse Ruderman Thu, 31 Jul 2008 03:05:25 +0000 http://blog.mozilla.com/security/?p=39#comment-76652 What's special about this crash bug that merits a post on the Security Blog? Most such bugs are public and not treated as security holes. What’s special about this crash bug that merits a post on the Security Blog? Most such bugs are public and not treated as security holes.

]]> Comment on Low Risk Denial of Service in Firefox by Sam Hasler http://blog.mozilla.com/security/2008/07/30/low-risk-denial-of-service-in-firefox/#comment-76601 Sam Hasler Wed, 30 Jul 2008 21:22:06 +0000 http://blog.mozilla.com/security/?p=39#comment-76601 If the page that you crashed on is in the session won't you just crash as soon as you start up again though? If the page that you crashed on is in the session won’t you just crash as soon as you start up again though?

]]> Comment on Related Security Issue in URL Protocol Handling on Windows by Andrea http://blog.mozilla.com/security/2007/07/23/related-security-issue-in-url-protocol-handling-on-windows/#comment-75612 Andrea Sat, 26 Jul 2008 12:19:47 +0000 http://blog.mozilla.com/security/2007/07/23/related-security-issue-in-url-protocol-handling-on-windows/#comment-75612 I use IE on my personal computer but Firefox is common on the PCs at the internet cafes here in Prague. Many hotels also use Firefox as the browser of choice on their computers reserved for guests. It's my estimation that a problem occurring on both browsers on Microsoft should be fixed before we all chuck it and switch to those cool Apples that have just come out. Yeah! I use IE on my personal computer but Firefox is common on the PCs at the internet cafes here in Prague. Many hotels also use Firefox as the browser of choice on their computers reserved for guests.

It’s my estimation that a problem occurring on both browsers on Microsoft should be fixed before we all chuck it and switch to those cool Apples that have just come out. Yeah!

]]> Comment on Read past the headlines - Firefox is fixed faster by S.Walda http://blog.mozilla.com/security/2008/01/17/read-past-the-headlines-firefox-is-fixed-faster/#comment-74085 S.Walda Sat, 19 Jul 2008 20:48:50 +0000 http://blog.mozilla.com/security/2008/01/17/read-past-the-headlines-firefox-is-fixed-faster/#comment-74085 Hi Firefox. I am on the Internet since 1995! I have used Internet Explorer for the first 3/5 years, then Netscape 3, that was in 1996. Then Neoplanet, Opera and now Firefox. What a plesure working with Firefox. Started only in 1998 with Norton Virus scanner! Now using Trend-Micro for the past 5 years! The upgrades of Firefox are more frequently than IP! Thanks a lot from Newcastle, South Africa. Ps, first 9 years using the Net in the Netherlands. Hi Firefox. I am on the Internet since 1995! I have used Internet Explorer for the first 3/5 years, then Netscape 3, that was in 1996. Then Neoplanet, Opera and now Firefox. What a plesure working with Firefox.
Started only in 1998 with Norton Virus scanner! Now using Trend-Micro for the past 5 years!

The upgrades of Firefox are more frequently than IP!

Thanks a lot from Newcastle, South Africa.
Ps, first 9 years using the Net in the Netherlands.

]]> Comment on Firefox users most likely to run latest version of the browser by Donal Fitzgerald http://blog.mozilla.com/security/2008/07/02/firefox-users-most-likely-to-run-latest-version-of-the-browser/#comment-73877 Donal Fitzgerald Fri, 18 Jul 2008 10:09:16 +0000 http://blog.mozilla.com/security/?p=36#comment-73877 I started using Firefox within the last few months and the speed of the web page download response is amazing in comparison to Internet Explorer. I am able to modify the browsing experience with great add-ons, which improve my Internet surfing experience without slowing me down or crashing like Internet Explorer if I have multiple webpages download at the same time. Also to be able to shut down my computer and return a day later and restart firebox and restart my browsing where I left off previously at the same web pages that I was reading before, which is great. I now find myself with more time to do other things rather than sitting in front of the computer waiting for it to response and download or trying to find previous web pages that I have been to without much effort. I am now a fully fledge Firefox addict. Thanks for this amazing browser and keep improving it!! I started using Firefox within the last few months and the speed of the web page download response is amazing in comparison to Internet Explorer. I am able to modify the browsing experience with great add-ons, which improve my Internet surfing experience without slowing me down or crashing like Internet Explorer if I have multiple webpages download at the same time.
Also to be able to shut down my computer and return a day later and restart firebox and restart my browsing where I left off previously at the same web pages that I was reading before, which is great.

I now find myself with more time to do other things rather than sitting in front of the computer waiting for it to response and download or trying to find previous web pages that I have been to without much effort.

I am now a fully fledge Firefox addict.
Thanks for this amazing browser and keep improving it!!

]]>