Re: Mozilla Firefox

From: Fuzzy Logic (bob_at_arc.ab.caREMOVETHIS)
Date: 12/16/04 

Date: Thu, 16 Dec 2004 09:47:24 -0800

"C. A. Upsdell" <cupsdellXXX@-@-@XXXupsdell.com> wrote in
news:#Gw0Obx4EHA.2964@TK2MSFTNGP15.phx.gbl:

> "Bill Martin" <wylie@earthKILLSPAMlink.net> wrote in message
> news:MPG.1c2a82ae76621a85989769@msnews.microsoft.com...
>>> Three Firefox features you might like are: (a) a great popup blocker
>>> (with
>>> IE this is available only to those with XP SP2), (b) tabbed browsing
>>> (for many who use it, it is a godsend); (c) better security (really).
>>
>> Ok, I'll bite. Better security how? Fundamentally more secure design
>> somehow, or just a question of who did the better coding?
>
> From a Firefox FAQ (text in parentheses is mine):
>
>
> - It is not integrated with Windows, which helps prevent viruses and
> hackers from causing damage if they somehow manage to compromise
> Firefox.

This is probably the only REAL reason Firefox MAY be more secure. I say
may because even though this is often cited as an issue in the real world
I am not aware of any real life exploits of this.
 
> - There is no support for VBScript and ActiveX, two technologies which
> are the reasons for many IE security holes. (IE users may be able to
> disable them, but typical IE users are not techies, and just use IE as
> it is.)

These same users don't know they need to get updates for Firefox when
vulnerabilities are found in it. XP SP2 does a much better job of locking
these settings down.
 
> - No spyware/adware software can automatically install in Firefox just
> by visiting a web site. (A survey in 1Q 2004 found that, of about 1M
> PCs scanned, there were 300,000 incidences of "serious System Monitors
> and Trojans")

If IE is properly configured this can be prevented as well. Most spyware
is installed by users hitting OK to some prompt they don't understand or
downloading some 'freeware' that comes with more than than had
anticipated. Firefox won't help them there.

> - Firefox doesn't use Microsoft's Java VM, which has a history of more
> flaws than other Java VMs.

We wont mention the recent security patch for Sun Java that allowed a Java
application read/write access to the users machine:

http://sunsolve.sun.com/search/document.do?assetkey=1-26-57591-1

FWIW Since XP SP1 IE uses Sun Java.

> - You have complete control over cookies.

IE has this as well. I disable all cookies except for sites that I need.
 
> Techies might know enough to lock down IE: but, as pointed out above,
> most IE users are not techies.

I would argue that the biggest factor in browser/computer security is not
the software you are running but the person at the keyboard and how
familiar they are with their software settings and what to do/not do while
online.

Relevant Pages

  • Re: Mozilla Firefox
    ... from causing damage if they somehow manage to compromise Firefox. ... the reasons for many IE security holes. ... Techies might know enough to lock down IE: but, as pointed out above, most ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • RE: [Full-Disclosure] IE is just as safe as FireFox
    ... little happier running windows. ... Back on topic though, IE is no where near Firefox for security, however, ... More infinate wisdom there Rafel. ...
    (Full-Disclosure)
  • Re: OT: Computers
    ... We need a serious change in the security paradigm. ... remediate all 40 on his own weekend time just because he's the one stuck ... And Firefox alone has grabbed a *huge* chunk of Explorer's market over the past two years. ... PS: perhaps one of the shifts will be having PCs with locked hard drives that just contain the basics: the OS, a browser, etc... ...
    (rec.gambling.poker)
  • Re: Critical error 101 on MS AntiSpyware install
    ... Not to mention everyone and their brother that is on the firefox high ... low and behold - Windows Help opens up - hum, ... because the one thing that was on on my little browser was the little ... Just use windows security, and not ignore ...
    (comp.security.misc)
  • Re: Critical error 101 on MS AntiSpyware install
    ... Not to mention everyone and their brother that is on the firefox high ... low and behold - Windows Help opens up - hum, ... because the one thing that was on on my little browser was the little ... Just use windows security, and not ignore ...
    (comp.security.firewalls)
Loading