Macintosh Browsers

[leon03]

I reported a security problem to the Mozilla Foundation in May. It affects all Mozilla-based browsers under particular, though common configurations on Macintosh platforms. I am annoyed that it's still not fixed. I'm going to email them one more time, then I'm going to break the veil of secrecy

Comments

[lizbjrddnr]

"Break the veil of secrecy"?

[leon03]

Yes. For security related bugs, it's common practice to keep the details secret for a short period of time to allow the problem to be fixed. After a fix is available, it is then customary to have full disclosure.

Three months is pretty pathetic. Security problems are not supposed to be secret for that long.

[lizbjrddnr]

Maybe a dumb question - if the bug was available to lots of people without a security update thing, wouldn't that just open it up for hackers and screw up a lot of people's stuff?

Excellent handle on the jargon, I know ;)

[leon03]

That's why there is usually a short period of time of secrecy. Sometimes, though, commerical companies have been lax about getting fixes out, so there have been many bugs publicized in order to motivate the company to fix it.

Full disclosures are the best policy regardless. Computer criminals know of security holes better than your average tech guy, so really it's about educating everybody of the potential issues. It really better is to inform people.

[indurate]

Use Adblock with Firefox?

[leon03]

lol, I do use Privoxy, which helps, but doesn't get everything. Granted, the Mozilla's interpreter that runs the more obnoxious animated ads is dang inefficient, but worse is that Firefox runs these ads in the background even when the browser isn't focused or the page is open in a tab that's not being viewed.