• Quick note - the problem with Youtube videos not embedding on the forum appears to have been fixed, thanks to ZiprHead. If you do still see problems let me know.

Firefox 1.5 Security Enhancements?

BPSCG

Penultimate Amazing
Joined
Mar 27, 2002
Messages
17,539
I've loaded Firefox 1.5.0.1, and notice on the home page, they brag that "Firefox 1.5 has an intuitive interface and blocks viruses, spyware, and popup ads."

Viruses and spyware? I looked around their site, couldn't find anything about that. Anybody know something I don't?
 
I've loaded Firefox 1.5.0.1, and notice on the home page, they brag that "Firefox 1.5 has an intuitive interface and blocks viruses, spyware, and popup ads."

Viruses and spyware? I looked around their site, couldn't find anything about that. Anybody know something I don't?

A few attacks are IE only. Generaly unpached IE.
 
I've loaded Firefox 1.5.0.1, and notice on the home page, they brag that "Firefox 1.5 has an intuitive interface and blocks viruses, spyware, and popup ads."

Viruses and spyware? I looked around their site, couldn't find anything about that. Anybody know something I don't?


Another security update? ;)

The only link I can find takes you to this page: http://www.mozilla.org/security/
 
Forget Firefox security, they need to fix the damn memory leaks. The browser is crashing 2-3x a day for me. I'm using 1.5.0.1.
 
I don't have an exact figure, but my desktop has been running w/ FF 1.5.X open for at least a month now with no crashes. I may have restarted it at some point or another, but it certainly runs for days at a time. Plus I use it for quite a bit of work.

I dunno when 1.5.0.1 came out, but I'm running it right now.
 
I only said it was an update! :D

For some reason on my system opear makes IE look fast. For some reason it makes writeing a letter to the owner of the webpage asking for a printed copy look fast.
 
Memory leak workaround

Forget Firefox security, they need to fix the damn memory leaks. The browser is crashing 2-3x a day for me. I'm using 1.5.0.1.


You can fix the memory leak issues by opening "about:config", adding a new Boolean line called config.trim_on_minimize, and setting it to "True". After that, minimizing all active Firefox windows will trim the memory usage.
 
For some reason on my system opear makes IE look fast. For some reason it makes writeing a letter to the owner of the webpage asking for a printed copy look fast.

Obviously you have a badly configured system....
 
Back On-Topic?

While memory leak is fascinating, it doesn't address the question in the OP, which asks how Firefox blocks viruses and spyware. The reply that FF hasn't been as popular a target of viruses as IE is not the same as claiming it blocks viruses.
 
Here's what i found from http://www.mozilla.org/support/firefox/faq.html

Is Firefox more secure than Internet Explorer? Yes, Firefox and all other Mozilla-based products are more secure. Why? Here is a list of the most important reasons:
  • It is not integrated with Windows, which helps prevent viruses and hackers from causing damage if they somehow manage to compromise Firefox.
  • There is no support for VBScript and ActiveX, two technologies which are the reasons for many IE security holes.
  • No spyware/adware software can automatically install in Firefox just by visiting a web site.
  • Firefox doesn't use Microsoft's Java VM, which has a history of more flaws than other Java VMs.
  • You have complete control over cookies.
I think the first point is probably the most important.
I presume, regarding the second point, VBScript and ActiveX can be disabled in IE
I don't understand how point 3 works in Firefox
Point 4, sounds reasonable, firefox must use the Sun Java VM?
I don't know about Point 5

I've used Firefox for about 2 years now and the only memory leak I had was not clearing the history of 2 weeks of porn after my girlfriend had been away, but this could happen with any browser.
 
FF helps to block spyware essentially through its "We're not Internet Explorer" feature. Opera has a similar feature, but I think they stole the code... or vice versa.

Anyway, the ActiveX controls and Active Scripting found in MSIE are somewhat suspect, and have been repeatedly abused+fixed+abused. Since FF/Opera don't use them, they don't get exploited. The .net framework is probably going to be the next target, but I believe MS has been careful up to this point with securing it. Cross your fingers and all that. IE also uses security zone features, allowing it to be trusted at a higher level than most applications. This is supposed to allow IE to become a platform for new applications. Essentially your company can roll out a new program, or version of a program for everyone to use through their browser. To save files and do other office work, it has to get access to your computer beyond what a traditional web page might get. Abused+fixed+abused.

As for viruses, I can only guess they're referring to Outlook, which is the Typoid Mary of the interweb and has a tight relationship with IE. Maybe FF blocks some virus entry points, such as spoof blocking or port controls.
 
As for viruses, I can only guess...
That's my point. If FF blocks viruses, why is Mozilla so cagey about it? Maybe I should send them a query: "You claim FF 1.5 blocks viruses. Since I am running FF 1.5, does that mean I can safely uninstall the Norton/McAfee/AVG/AntiVir/Avast!/WhatHaveYou antivirus software I now have installed?"

When I get the time...
 

Back
Top Bottom