On BNET: Ten ways to spot a dead-end job
BNET Business Network:
BNET
TechRepublic
ZDNet
TalkBack 17 of 34:
Next »
« Previous
the bug is in the download dialog window
that is common in Mozilla suite 1.7.3 Linux, Mozilla 1.7.5 Windows, Firefox 1.0, and Thunderbird 1.0 since they all use the same source for the dialog box. So you could get it from email using Tbird or Mozilla mail, or from a dirty website using Mozilla or FF.

Here is the bug report from mozilla.org:
https://bugzilla.mozilla.org/show_bug.cgi?id=275417

you can check out the attachments and compare how the URL in the download dialog box compares to IE's download dialog box.

Essentially, since the bug is in the download dialog window, *some* user intervention is required (such as a right-click, save as). As I understand (probably incompletely) the bug report, it comes down to how IE devs decided to truncate long URL's and how Mozilla truncates long URL's in the download dialog.

Personally, I tend to agree with those that think this is not a serious threat because of the interactive nature. But on the other hand, my job is to provide net admin and pc support for small businesses and individuals, many of whom are computer users and not techy's. These people, quite a few of whom I have migrated to FF and TB, wouldn't know how to check the download and could therefore be lured into installing some form of malware that I would then have to contend with and clean up. Because of this possibility, I have concerns over this bug.
Posted by: bobjones68@...   Posted on: 01/08/05 You are currently: a Guest | Members login | Terms of Use
Reply to Story Reply to Message

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

I'm surprised it took this long for ZDNet to report this  Michael Kelly | 01/07/05
Sounds pretty thin  Roger Ramjet | 01/07/05
Your hypochracy knows no bounds!  ShadeTree | 01/07/05
Your hypochracy knows no bounds!  Squawkbox | 01/07/05
I'm not sure anybody would be faster or slower ...  George Jay | 01/08/05
Ummm SHADETREE did you happen to read this  Squawkbox | 01/07/05
IE's flaw does not excuse Firefox's flaw  Michael Kelly | 01/07/05
I never said that Firefox should be excused.  Squawkbox | 01/07/05
Doesn't matter  Michael Kelly | 01/07/05
Stupid users will be stupid users.  The King's Servant | 01/24/05
Time for a Change!  soulcircus | 01/07/05
Nothings better than Linux  FilledOut | 01/08/05
How about a period every now and then?  ejhonda | 01/10/05
User action required  PA-ITGuy | 01/07/05
User education required  Anti_Zealot | 01/07/05
OK...  PA-ITGuy | 01/07/05
the bug is in the download dialog window  bobjones68@... | 01/08/05
to truncate, or not to truncate...  linuxoverwindows | 01/08/05
In my Firefox version 1.0 I see the site as....  The King's Servant | 01/24/05
giving out your password  linuxoverwindows | 01/08/05
Security?  Rodney Davis | 01/07/05
Slight correction  AmusedAtItAll | 01/07/05
You said:  Rodney Davis | 01/07/05
Rodney Said, Bill Said  BXLE | 01/08/05
Not nearly as easy.  The King's Servant | 01/24/05
Not completely disagreeing but...  IT Scion | 01/08/05
ive seen...  linuxoverwindows | 01/08/05
Not looking back  BXLE | 01/08/05
Top 11 New Firefox Extensions  Squawkbox | 01/09/05
Extensions  SC-man | 01/10/05
MS Apologists? Where are you?  boomslang_z | 01/10/05
They have their hands full  Squawkbox | 01/10/05
Alternate Browsers  k9skip@... | 01/26/05
Alternate browsers  k9skip@... | 01/26/05

What do you think?

SponsoredWhite Papers, Webcasts, and Downloads

advertisement
advertisement

Meet Doc

  • Here to help you with your Document Management Needs
  • Doc is an enigma. Born to a Russian ballerina and a German electrical engineer, he grew up in various locations in the United States. He’s seen the insides of more brands, versions, and generations of printer and printer-related hardware than almost anyone.
  • To learn more about this mysterious figure check out his blog on ZDNet and his Workspace on TechRepublic. You’ll be glad you did.
  • Produced by
    ZDNet and