Main Area and Open Discussion > General Software Discussion
Firefox not safe at all
Carol Haynes:
It is an interesting approach to security though - which apps have know issues? Surely it is the unknown issues that are the problem!
f0dder:
You need to comment on patched as well as unpatched bugs - a lot of users don't upgrade their software (even if auto-update is turned on). That said, where is Internet Explorer in the "report"? The fact that it's entirely missing makes me assign no credibility whatsoever to it.
Also, when looking at vulnerabilities, count is nothing - severity of the vulnerabilities is everything. And the severity labels that various security firms give aren't always correct, imho. Sure, a cross-site scripting bug is bad, and it might even be "severe". But it's a shitload less critical than something that can lead to automated remote code execution.
Hint: IE has had a lot of remote code execution, FireFox has had a lot less. But of course the attack vector is often flash or java (java, not javascript) which works pretty much the same in all browsers.
Bottom line: FireFox is still a bunch more secure than IE, and because it still doesn't have market dominance it isn't targeted as much as IE either, giving an even bigger advantage.
It is an interesting approach to security though - which apps have know issues? Surely it is the unknown issues that are the problem!-Carol Haynes (January 07, 2009, 03:07 PM)
--- End quote ---
Yes and no. "Unknown" issues means that generally only a few people know of the bugs - the kind of people who're interested in keeping this knowledge to themselves, so they can attack really specific systems. Once exploits are used for zombie botnet purposes, they get known really fast - and it's the automated zombie-harvesting attacks we need to worry about.
Ehtyar:
What a joke. Can we change the topic to 'IE Zealot Trashes Firefox For No Apparent Reason'?
Ehtyar.
Hirudin:
I must say, putting quotes around the word "report" thoroughly amuses me.
Sorry I don't have anything meaningful to add to the topic.
Ehtyar:
Sorry I don't have anything meaningful to add to the topic.
-Hirudin (January 07, 2009, 05:54 PM)
--- End quote ---
Well neither did I, but that's no excuse to reserve your opinion :P
Ehtyar.
Navigation
[0] Message Index
[#] Next page
[*] Previous page
Go to full version