Comments on: Firefox Users Are The Safest http://hackademix.net/2008/07/01/firefox-users-are-the-safest/ Giorgio Maone's answers to the Web, the Universe, and Everything Tue, 06 Jan 2009 02:13:14 +0000 http://wordpress.org/?v=2.2.3 By: Giorgio http://hackademix.net/2008/07/01/firefox-users-are-the-safest/#comment-9200 Giorgio Tue, 02 Sep 2008 16:00:32 +0000 http://hackademix.net/2008/07/01/firefox-users-are-the-safest/#comment-9200 @<b>Show your boxes with color or border</b>: Here we're talking about making upgrades as seamless as possible for the majority of users, i.e. those who install software in its default location. @Show your boxes with color or border:
Here we’re talking about making upgrades as seamless as possible for the majority of users, i.e. those who install software in its default location.

]]> By: Show your boxes with color or border http://hackademix.net/2008/07/01/firefox-users-are-the-safest/#comment-9199 Show your boxes with color or border Tue, 02 Sep 2008 14:29:15 +0000 http://hackademix.net/2008/07/01/firefox-users-are-the-safest/#comment-9199 In fact, if you install FF in any folder other than Program Files, you do NOT need to be an administrator, also with Opera 9.5, you MUST be an administrator, as Opera 9.5 now insists on installing an .ocx and 2 .dll files in the Windows folder (annoying and COMPLETELY unecessary, and in fact LESS secure than when you could install Opera any damn foler you wanted and all its files would only go in THAT folder). Learn Windows, Georgio, you do not know that much about it. In fact, if you install FF in any folder other than Program Files, you do NOT need to be an administrator, also with Opera 9.5, you MUST be an administrator, as Opera 9.5 now insists on installing an .ocx and 2 .dll files in the Windows folder (annoying and COMPLETELY unecessary, and in fact LESS secure than when you could install Opera any damn foler you wanted and all its files would only go in THAT folder). Learn Windows, Georgio, you do not know that much about it.

]]> By: franco http://hackademix.net/2008/07/01/firefox-users-are-the-safest/#comment-8630 franco Sun, 13 Jul 2008 06:50:44 +0000 http://hackademix.net/2008/07/01/firefox-users-are-the-safest/#comment-8630 Giorgio, you are doing a great job to make firefox a safer browser and I've often thought to switch back to it (I've been a Phoenix 0.2 user) just for NoScript. But Opera is simply a better browser. Leaner, smoother, ecc.. As for the survey, there's a logical error in it. Most updated could only mean more secure INSIDE ITS family. Any other conclusion outside it can be drawn only taking into account the specific vulnerabilities. Giorgio, you are doing a great job to make firefox a safer browser and I’ve often thought to switch back to it (I’ve been a Phoenix 0.2 user) just for NoScript. But Opera is simply a better browser. Leaner, smoother, ecc..
As for the survey, there’s a logical error in it.
Most updated could only mean more secure INSIDE ITS family. Any other conclusion outside it can be drawn only taking into account the specific vulnerabilities.

]]> By: Adrian http://hackademix.net/2008/07/01/firefox-users-are-the-safest/#comment-8594 Adrian Wed, 09 Jul 2008 17:45:27 +0000 http://hackademix.net/2008/07/01/firefox-users-are-the-safest/#comment-8594 Alright, sorry for not typing the 0.01. Firefox is nice, which many of its extensions e.g. Firebug and Fireftp are very useful. But I want to point out that, I hate some of the firefox fanboys try to advertise Firefox by pissing off the others (and it isn't true), which is really a bad attitude, and I think the atmosphere in Opera is much better. Everyone has they way of browsing, which I prefer Opera. (There are also fanboys for Opera in Opera community, operawatch and more) p.s. Opera does also has anti XSS-like extension http://adn.exofire.net/stuff/arioso.js Alright, sorry for not typing the 0.01.
Firefox is nice, which many of its extensions e.g. Firebug and Fireftp are very useful.
But I want to point out that, I hate some of the firefox fanboys try to advertise Firefox by pissing off the others (and it isn’t true),
which is really a bad attitude, and I think the atmosphere in Opera is much better.
Everyone has they way of browsing, which I prefer Opera.
(There are also fanboys for Opera in Opera community, operawatch and more)

p.s. Opera does also has anti XSS-like extension
http://adn.exofire.net/stuff/arioso.js

]]> By: Giorgio http://hackademix.net/2008/07/01/firefox-users-are-the-safest/#comment-8591 Giorgio Wed, 09 Jul 2008 16:52:26 +0000 http://hackademix.net/2008/07/01/firefox-users-are-the-safest/#comment-8591 @<b>Adrian</b>: <blockquote>Can you find any critical vulnerability on Opera 9.5?</blockquote> <blockquote cite="http://www.opera.com/docs/changelogs/windows/951/#security"> <h3><a href="http://www.opera.com/docs/changelogs/windows/951/#security" rel="nofollow">Opera 9.51 Changelog</a></h3> <strong>Changes from 9.5</strong> <ol> <li>Fixed an issue where <canvas> functions could reveal data from random places in memory, as reported by Philip Taylor. See our advisory.</li> <li>Fixed an issue that could be used to <strong>execute arbitrary code</strong>, as reported by Billy Rios. Details will be disclosed at a later date.</li> <li>Security status is now correctly set when navigating from HTTP to HTTPS.</li> <li>Corrected an issue related to OCSP and CRLs that would lower security.</li> </blockquote> And yes, Firefox users are safer <em>also because</em> NoScript is available for Firefox: XSS is everywhere and most browser vulnerabilities, no matter the vendor, are exploitable either through JavaScript or plugins... @Adrian:

Can you find any critical vulnerability on Opera 9.5?

Opera 9.51 Changelog

Changes from 9.5

  1. Fixed an issue where <canvas> functions could reveal data from random places in memory, as reported by Philip Taylor. See our advisory.
  2. Fixed an issue that could be used to execute arbitrary code, as reported by Billy Rios. Details will be disclosed at a later date.
  3. Security status is now correctly set when navigating from HTTP to HTTPS.
  4. Corrected an issue related to OCSP and CRLs that would lower security.

And yes, Firefox users are safer also because NoScript is available for Firefox: XSS is everywhere and most browser vulnerabilities, no matter the vendor, are exploitable either through JavaScript or plugins…

]]> By: Adrian http://hackademix.net/2008/07/01/firefox-users-are-the-safest/#comment-8589 Adrian Wed, 09 Jul 2008 16:44:39 +0000 http://hackademix.net/2008/07/01/firefox-users-are-the-safest/#comment-8589 Most updated != Safe && having a lot of firefox fanboy != safe Opera's probably doing a better job in security.(can you find any critical vulnerability on Opera 9.5 ?) Firefox does even have vulnerability problem on the day they release 3.0. http://dvlabs.tippingpoint.com/blog/2008/06/18/vulnerability-in-mozilla-firefox-30 Yea, problem doesn't affect NoScript. So does it means Firefox sucks without extensions ? Most updated != Safe && having a lot of firefox fanboy != safe

Opera’s probably doing a better job in security.(can you find any critical vulnerability on Opera 9.5 ?)

Firefox does even have vulnerability problem on the day they release 3.0.
http://dvlabs.tippingpoint.com/blog/2008/06/18/vulnerability-in-mozilla-firefox-30
Yea, problem doesn’t affect NoScript. So does it means Firefox sucks without extensions ?

]]> By: Giorgio http://hackademix.net/2008/07/01/firefox-users-are-the-safest/#comment-8588 Giorgio Wed, 09 Jul 2008 16:29:47 +0000 http://hackademix.net/2008/07/01/firefox-users-are-the-safest/#comment-8588 @<b>Adrian</b>: you realize (don't you?) that the HACKERS you're pointing at (0x000000) is just Ronald, whose love for Mozilla is well known <a href="#comment-8459" rel="nofollow">here</a> :) @Adrian:
you realize (don’t you?) that the HACKERS you’re pointing at (0×000000) is just Ronald, whose love for Mozilla is well known here :)

]]> By: Adrian http://hackademix.net/2008/07/01/firefox-users-are-the-safest/#comment-8587 Adrian Wed, 09 Jul 2008 16:20:09 +0000 http://hackademix.net/2008/07/01/firefox-users-are-the-safest/#comment-8587 Most updated != Safe And lets see what HACKERS think about it: http://www.0x000000.com/?i=592 Most updated != Safe

And lets see what HACKERS think about it:

http://www.0×000000.com/?i=592

]]> By: Ronald http://hackademix.net/2008/07/01/firefox-users-are-the-safest/#comment-8570 Ronald Tue, 08 Jul 2008 00:31:36 +0000 http://hackademix.net/2008/07/01/firefox-users-are-the-safest/#comment-8570 Not sure what version of Opera you use, but I get alerts when a new version of Opera is available. @Giorgio, well I didn't know Opera was vulnerable to it. I have hunch that it was a variant of the bug, Usually I test all browsers when I find some quirky thing, this time I didn't try Opera. Not sure what version of Opera you use, but I get alerts when a new version of Opera is available.

@Giorgio, well I didn’t know Opera was vulnerable to it. I have hunch that it was a variant of the bug, Usually I test all browsers when I find some quirky thing, this time I didn’t try Opera.

]]> By: AndrewC http://hackademix.net/2008/07/01/firefox-users-are-the-safest/#comment-8509 AndrewC Sat, 05 Jul 2008 09:27:51 +0000 http://hackademix.net/2008/07/01/firefox-users-are-the-safest/#comment-8509 This is probably partly influenced by Gmail, Google Docs and Youtube's annoying habit of often not working properly in Opera when the user agent is set to Opera. This causes many Opera users to set their user agent to Firefox for all Google related sites, although there are user javacript fixes for these issues. That being said, I have noticed that the available stats for many websites show an alarmingly large number of Opera users do use outdated versions, some extremely outdated. Is opening the help menu and clicking "Check for updates" really that hard? This is probably partly influenced by Gmail, Google Docs and Youtube’s annoying habit of often not working properly in Opera when the user agent is set to Opera. This causes many Opera users to set their user agent to Firefox for all Google related sites, although there are user javacript fixes for these issues. That being said, I have noticed that the available stats for many websites show an alarmingly large number of Opera users do use outdated versions, some extremely outdated. Is opening the help menu and clicking "Check for updates" really that hard?

]]>