Attack code out for old Firefox bug

TalkBack 24 of 33:

Next »

« Previous

• Thread View
• Flat View

Wrong (corrected post - hopefully)

"On the other hand, IE is hard-coded into Windows, so whatever flaws the OS has, IE picks up, and vice versa."

This is wrong. If you have any proof of this, please share.

Then, there's the issue of corporate accountability. In the open source model that Firefox follows, there's no real reason to hold back on releasing a fix. As soon as it's developed, it goes out the door (whether the door in question belongs to one of the developers or one of the many contributors). On the other hand, when IE has a bug, there's lots of money and corporate reputation at stake, so the fixes are much slower in coming, and Microsoft isn't very eager to let people know about it until there is one."

If this is true, they why do the mozilla developers continually downplay vulnerabilities? The [url=http://www.mozilla.org/security/announce/mfsa2005-50.html]vulnerability[/url] this exploit taps was rated as "moderate" by the Mozilla team. Would you call remote code executuion "moderate"? In Microsoft's case, it's "corporate image" and in Mozilla's case it's "ego", but the result seems to be the same to me.

"Finally, you have to realize that some of IE's exploits are self-proliferating, in the sense that you can get attacked through IE and have your Outlook slam other users. That doesn't happen in Firefox, because Firefox doesn't have the same hooks into Windows."

Wrong again. A remote code execution vulnerability in Firefox can do anything it can do in IE.

Posted by: toadlife   Posted on: 12/14/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now
• Reducing Server Total Cost of Ownership with VMware Virtualization Software VMware VMware virtualization enables customers to reduce their server TCO and ... Download Now
• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now