Outdoor Power Equipment (Lawn Mowers, Snow Blowers, Chain Saws and more) Discussions

I know a lot of you use this browser, I just stumbled across this warning article.

http://news.yahoo.com/s/pcworld/120756

I hope I posted this properly.

C

Nope you did not

OK, it is there now.

C

WOW! That is scarry! Good thing I only use firefox for this site, but alot of times I don't even do that lol. I usually am using Opera, but OPera does not allow the use of the toolbar so ya. Well, everbody be careful out there ok?

So what's it saying in english? Are they saying go to Mozilla's "update" or "addon" site and dowload patches? What's the whitelist? Do I have one?

Marshall,

I haven't researched this exhaustively  but what I have found is that Mozilla will be offering a patch but it is not ready yet. In the mean time, Mozilla recommends disabling Javascript until the patch is ready.

Myself, I'll go back to IE in the meantime. Without Javascript the web becomes more disinteresting and more labor intensive.

I found this article interesting in regards to Firefox Pros and Cons.  Nothing is perfect and one must use anything with caution and keep them up to date.

HTH

Emmo, Interesting article, makes sense.

These are the two things that I am wondering about. I read the part about the upcoming patches and understand it. But, I read something here and not sure what it means? Is this talking about new installation & downloads only?

"""In addition, the Mozilla Foundation has now made the flaws effectively impossible to exploit by changes to the server-side download mechanism on the update.mozilla.org and addons.mozilla.org sites, according to security experts."""


"""Mozilla Foundation said it has protected most users from the exploit by altering the software installation mechanism on its two whitelisted sites. However, users may be vulnerable if they have added other sites to the whitelist, it warned.

"We believe this means that users who have not added any additional sites to their software installation whitelist are no longer at risk," Mozilla Foundation said in a statement published on Mozillazine.org."""

I saw that too Marshall......My strategy was to just wait awhile and after they fix it. Uninstall it all from my system, clean the reg and then do a fresh install.  Less time consuming than for an illiterate like myself to try and figure out whether or not I reconfigured whatever it is they're talking about.

Emmo wrote:
You think like I do. LOL 

You think they'll post something on their website? I went there and didn't see any place for updates, etc.

Marshall wrote:

You noticed that too............

They don't provide much help in finding it.....not many links or mentions but here is where you would find them if/when available. I only found it by staggering around and tripping over it.  I probably should bookmark it because it took me a while to find it again this time.

http://www.mozilla.org/security/

There is also a place to have Firefox periodically check for updates.......go to tools ,click options, click advanced,(on the left), scroll down to software update and click the boxes for Firefox and extensions and themes, then click OK.

HTH 

Emmo, you be da man!

I knew you would take care of me. Thanks! 

Emmo, I just went to the updates area you pointed out in the brower itself. I said there was a critical update so I clicked to download it. It downloads a new updated Firefox and installs it while extracting the old one automatically. It's already done, took about 1 minute.

Thanks.

Marshall wrote:

I tried that when I was working on the post and it told me I was already up to date.  I'm confused......(What's new??)

I'm already running v 1.0.3 what version did you download?? I believe I've been running that version for a little while now.

It was 1.0.3 I think. I have never updated until now so I'm at your level now.

Help

About Mozilla Firefox

Scroll down for revision information. Thanks guys. You caused me to update too. I need to use Firefox. The writing on this site is way too small with IE. If I change the font, every other site is too big. IE with this site is OK on some machines, but not all. I don't think I have a crazy setup. IE6, Win2000, TFT 1400X1050 or so. Firefox is fine, IE is too small for the old eyes. Peter seemed to have a bee in his bonnet for Microsoft. So I gave up.

I remember vividly when this site was being literally created by Peter about the problems folks with IE had here.  I have always run IE here and never had the problems then or now other than the site still continueing to log me off after I have been offline for a few hours.  I have accepted the fact that if that is going to be my only problem I can live with it.  I don't know why my system has always done fine here but it does.  I do remember Peter not being a fan of IE.  If my memory serves me he called the entire Windows operating system a Beta program.

I am glad the info I found was helpful and hopefully spares all of you any aggravation.

C

ChrisS wrote:
Thanks Chris, you're a good man Charlie Brown!

Your welcome...

I am doing research for my finals due on Friday and I literally stumbled across that article and remembered you guys talking about how much you like that OS and I was like "holy crap Batman" I gotta let the guys and gals know about this!

C

I don't believe this statement was on the Mozilla website yesterday.......

Security Advisory (May 8, 2005) The Mozilla Foundation is aware of two potentially critical Firefox security vulnerabilities as reported publicly Saturday, May 7th. There are currently no known active exploits of these vulnerabilities although a "proof of concept" has been reported. Changes to the Mozilla Update web service have been made to mitigate the risk of an exploit. Mozilla is aggressively working to provide a more comprehensive solution to these potential vulnerabilities and will provide that solution in a forthcoming security update. Users can further protect themselves today by temporarily disabling JavaScript.

For more information about the vulnerabilities, see the advisory. Further information including the availability of updates will be posted at www.mozilla.org.

Very interesting. They must have read this thread. 

I've found this page from Mozilla that describes Firefox vulnerabilities and how to empty your "whitelist" and disable Javascript until the new fix comes in. HTH

Firefox 1.0.4 is now available

Security issues have been addressed.

Emmo, thank you Sir!

Thanks very much Emmo! I downloaded the new version and installed it. Version 1.04 ha? Well, lets hope its great and no more security holes! Mozilla should know better

Thanks, Emmo and Termy.  I have updated and it is just about flawless.  I got a Spellbound error but it has either been fixed or believe I know how to fix it.  Thanks for telling about this Chris. 

AJace wrote:

Sorry I missed this post AJ, hey, you are welcome and my pleasure, happy I came across it....

C