|
|
User Controls
|
New User
|
Login
|
Edit/View My Profile
|
|
|
|
ActiveMac
|
Articles
|
Forums
|
Links
|
News
|
News Search
|
Reviews
|
|
|
|
News Centers
|
Windows/Microsoft
|
DVD
|
ActiveHardware
|
Xbox
|
MaINTosh
|
News Search
|
|
|
|
ANet Chats
|
The Lobby
|
Special Events Room
|
Developer's Lounge
|
XBox Chat
|
|
|
|
FAQ's
|
Windows 98/98 SE
|
Windows 2000
|
Windows Me
|
Windows "Whistler" XP
|
Windows CE
|
Internet Explorer 6
|
Internet Explorer 5
|
Xbox
|
DirectX
|
DVD's
|
|
|
|
TopTechTips
|
Registry Tips
|
Windows 95/98
|
Windows 2000
|
Internet Explorer 4
|
Internet Explorer 5
|
Windows NT Tips
|
Program Tips
|
Easter Eggs
|
Hardware
|
DVD
|
|
|
|
Latest Reviews
|
Applications
|
Microsoft Windows XP Professional
|
Norton SystemWorks 2002
|
|
Hardware
|
Intel Personal Audio Player
3000
|
Microsoft Wireless IntelliMouse
Explorer
|
|
|
|
Site News/Info
|
About This Site
|
Affiliates
|
ANet Forums
|
Contact Us
|
Default Home Page
|
Link To Us
|
Links
|
Member Pages
|
Site Search
|
Awards
|
|
|
|
Credits
©1997/2004, Active Network. All
Rights Reserved.
Layout & Design by
Designer Dream. Content
written by the Active Network team. Please click
here for full terms of
use and restrictions or read our
Privacy Statement.
|
|
|
|
|
|
|
|
Time:
14:44 EST/19:44 GMT | News Source:
Yahoo News |
Posted By: Chris Hedlund |
Yahoo said late Wednesday that it has released a test version of its toolbar for the Mozilla Firefox Web browser.
Toolbars from companies such as Yahoo enable users to go directly to particular services, such as e-mail or Web search, by simply clicking on an icon.
Yahoo says on its download page that people can customize and access the toolbar from any PC.
Amazon.com's A9.com search unit also offers a toolbar for Firefox, an open-source browser that is gaining in popularity as an alternative to Microsoft's dominant Internet Explorer.
|
|
#1 By
3653 (68.54.224.219)
at
2/10/2005 4:48:30 PM
|
Why does the Yahoo toolbar come with an installer? Seems like it would be faster if Yahoo simply installed their toolbar via one of the many security vulnerabilities found in Firefox this week.
|
#2 By
37 (24.183.41.60)
at
2/10/2005 5:56:47 PM
|
Moores...that is the FUNNIEST thing I have heard on these comment boards in YEARS!
ROFLMAO!
|
#3 By
37 (24.183.41.60)
at
2/10/2005 5:57:58 PM
|
LinuxIsTheft...why would Firefox let such security issues go untouched for so long? I would have assumed that since it's open source anyone could have fixed the issue by now since it is indeed open to everyone. Yahooglefoxfireser?
This post was edited by AWBrian on Thursday, February 10, 2005 at 18:03.
|
#4 By
29903 (4.245.182.111)
at
2/10/2005 6:10:03 PM
|
mooresa56 wrote:
Why does the Yahoo toolbar come with an installer? Seems like it would be faster if Yahoo simply installed their toolbar via one of the many security vulnerabilities found in Firefox this week.
Which security vulnerabilities would those be, Elmer FUD?
The vulnerabilities which allow Web sites to install spyware/trojans/etc through IE, without user interaction, do not work in Firefox.
http://secunia.com/graph/?type=cri&period=all&prod=11
http://secunia.com/graph/?type=cri&period=all&prod=4227
Perhaps you meant that they should install it more easily through IE.
This post was edited by 0nslaught on Thursday, February 10, 2005 at 18:12.
|
#5 By
37 (24.183.41.60)
at
2/10/2005 6:17:41 PM
|
onslaught, you must not read the latest on Firefox everyday....Firefox security holes are being exposed weekly. I think you better do a better job reading. One was just posted on AWIN.
I should see if my Firefox will automagically install the new yahoo toolbar..ROFL!
|
#6 By
29903 (4.245.182.111)
at
2/10/2005 6:26:27 PM
|
AWBrian wrote:
onslaught, you must not read the latest on Firefox everyday....Firefox security holes are being exposed weekly. I think you better do a better job reading. One was just posted on AWIN.
It looks like you too are unable to point out "the vulnerabilities which allow Web sites to install spyware/trojans/etc, without user interaction."
Seeing as how these are released weekly, it shouldn't be difficult for you to point it out. Be sure to return with some excuse though.
Perhaps it is more accurate to say that I read enough of the facts and you read too much of the FUD? Did you not read these sites?
http://secunia.com/graph/?type=cri&period=all∏=11
http://secunia.com/graph/?type=cri&period=all∏=4227
AWBrian wrote:
I should see if my Firefox will automagically install the new yahoo toolbar..ROFL!
Good luck with that. Be sure to update us on how (un)successfully that goes. Though, I did run across one site that attemps to trick you into opening Internet Explorer so that it can proceed with the installation of the spyware. You might run across something like that.
|
#7 By
37 (24.183.41.60)
at
2/10/2005 6:32:45 PM
|
It looks like you are in denial. Are you saying that there are no new, current and outstanding Firefox security issues??!
Post back when you figure that one out. Right now you get an E for effort.
|
#8 By
29903 (4.245.182.111)
at
2/10/2005 6:47:52 PM
|
AWBrian wrote:
It looks like you are in denial. Are you saying that there are no new, current and outstanding Firefox security issues??!
You failing, for a second time, to point out "the vulnerabilities which allow Web sites to install spyware/trojans/etc, without user interaction" is my denial?
It looks like the denial is on your part, and you are unable to accomplish this simple request.
This time, do not just read these sites, but make an effort to comprehend them as well:
http://secunia.com/graph/?type=cri&period=all&prod=11
http://secunia.com/graph/?type=cri&period=all&prod=4227
Why do you think the ratings for both of these browsers are so different? You are now claiming that Secunia is wrong?
Feel free to throw insults, make more unsubstantiated claims, or to make an attempt at changing the subject.
I request again: Show "the vulnerabilities which allow Web sites to install spyware/trojans/etc, without user interaction."
This post was edited by 0nslaught on Thursday, February 10, 2005 at 18:51.
|
#9 By
29903 (4.245.182.111)
at
2/10/2005 6:58:52 PM
|
AWBrian wrote:
Good call 511! We all await for onslaughts reply showing us that Firefox is security issue free.
I've never made the claim that "Firefox is security issue free." I've quoted my assertion a number of times now. How many times must I repeat it before you think you'll be able to comprehend it?
Remember this?
Show "the vulnerabilities which allow Web sites to install spyware/trojans/etc, without user interaction."
AWBrian wrote:
Good thing AWIN holds all the history...so we will know if he lies :)
You trying to change my claim to something else and then claim that I'm not supporting it wouldn't be *me* lying. It might be taken as someone *else* attempting to lie though.
Are you ignoring the following information?
http://secunia.com/graph/?type=cri&period=all&prod=11
http://secunia.com/graph/?type=cri&period=all&prod=4227
Would you also give me an estimation on the number of times you think the above would need to be repeated for you to properly comprehend it?
This post was edited by 0nslaught on Thursday, February 10, 2005 at 19:03.
|
#10 By
37 (24.183.41.60)
at
2/10/2005 7:07:15 PM
|
Maybe he will catch on? Maybe not?
As a quick detail, IE 6 has 17 unpatched and Firefox has 8 unpatched.
And with the latest IDN security breach, that would put it at 9 unpatched and growing.
Still waiting for your proper reply...let us know when your ready.
http://secunia.com/graph/?type=sol&period=all&prod=4227
|
#11 By
29903 (4.245.182.111)
at
2/10/2005 7:08:41 PM
|
AWBrian wrote:
Good call 511! We all await for onslaughts reply showing us that Firefox is security issue free.
By the way, if you had gone to the link that I had posted < http://secunia.com/graph/?type=cri&period=all&prod=4227 >, and comprehended it, it should have been very obvious that I was not making that claim. I don't see how you became confused.
Hint: The thing to look for here is the "Extremely." That would be the red. (Or even "Highly," which would be the orange.)
For comparison:
http://secunia.com/graph/?type=cri&period=all&prod=11
|
#12 By
37 (24.183.41.60)
at
2/10/2005 7:14:37 PM
|
L E T me S L O W this D O W N for you onslaught.
75% of Firefox's security issues are UNPATCHED, with a 9th one yet to be added to Secunia's database.
Let us know when you find out whom ever said "the vulnerabilities which allow Web sites to install spyware/trojans/etc, without user interaction"
Once you figure out who said the above, you might want to ASK them. Until then, we await your kind reply.
Just a reminder...9 UNPATCHED security issues with FIREFOX. Firefox is NOT secure. Again..Firefox is NOT secure.
|
#13 By
37 (24.183.41.60)
at
2/10/2005 7:17:21 PM
|
I wasn't thinking Googlefox...more like Yahooglefoxfireser. Currently one of the most insecure browsers on the web. 9 unpatched security issues. Opera 7 only has 3 unpatched. Firefox is very INSECURE.
|
#14 By
29903 (4.245.182.111)
at
2/10/2005 7:20:06 PM
|
LinuxIsTheft wrote:
#13 "the vulnerabilities which allow Web sites to install spyware/trojans/etc, without user interaction"
It depends what you mean by "user interaction".
http://news.com.com/Spyware+takes+aim+at+Mozilla+browsers/2100-7349_3-5569635.html
"Although the spyware is only installed if users agree to download a certain file, many users are likely to click through, as the download's dialogue box gives no indication of the file's malicious payload, Sjouwerman said.
You're saying that you don't understand if clicking a link and downloading the file to your PC is user interaction or not? So, if I agree to download Sub7, or just about anything else to my PC, that's an exploit in the browser and might not qualify as user interaction?
If I put up a link to a virus and you click the link and agree to download it that this is a security exploit? I guess I can go click on a link to a virus, download it, and report this exploit to secunia.com.
I would have to say that this example fails miserably and does not qualify as:
"the vulnerabilities which allow Web sites to install spyware/trojans/etc, without user interaction"
[snip]
http://secunia.com/graph/?type=cri&period=all&prod=11
http://secunia.com/graph/?type=cri&period=all&prod=4227
|
#15 By
11888 (64.230.35.124)
at
2/10/2005 7:39:07 PM
|
Could my account be deleted? It's too embarrassing to have one.
This post was edited by MrRoper on Thursday, February 10, 2005 at 19:40.
|
#16 By
29903 (4.245.182.111)
at
2/10/2005 7:39:44 PM
|
AWBrian wrote:
L E T me S L O W this D O W N for you onslaught.
This is a good idea, but only because you are slowing it down for yourself and getting your thoughts together.
AWBrian wrote:
75% of Firefox's security issues are UNPATCHED, with a 9th one yet to be added to Secunia's database.
You can understand the difference between amount and severity, can you not?
Once again:
http://secunia.com/graph/?type=cri&period=all&prod=11
http://secunia.com/graph/?type=cri&period=all&prod=4227
You seem as though you don't want to address this issue.
AWBrian wrote:
Let us know when you find out whom ever said "the vulnerabilities which allow Web sites to install spyware/trojans/etc, without user interaction"
There were two claims which seemd to be implying this. At the least, perhaps you can clear up, or retract, your own:
mooresa56 wrote:
Why does the Yahoo toolbar come with an installer? Seems like it would be faster if Yahoo simply installed their toolbar via one of the many security vulnerabilities found in Firefox this week.
Does this not equate to:
"the vulnerabilities which allow Web sites to install spyware/trojans/etc, without user interaction"?
And you seemed to be in agreement with mooresa56's insinuation at some level. You certainly didn't seem to disagree with it.
AWBrian wrote:
onslaught, you must not read the latest on Firefox everyday....Firefox security holes are being exposed weekly. I think you better do a better job reading. One was just posted on AWIN.
I should see if my Firefox will automagically install the new yahoo toolbar..ROFL!
Does this not insinuate a belief in "the vulnerabilities which allow Web sites to install spyware/trojans/etc, without user interaction"?
If you were not replying to this comment of mine, then what was your reply about?
AWBrian wrote:
Once you figure out who said the above, you might want to ASK them. Until then, we await your kind reply.
Okay, so what exactly did you mean by your reply?
AWBrian wrote:
Just a reminder...9 UNPATCHED security issues with FIREFOX. Firefox is NOT secure. Again..Firefox is NOT secure.
You can understand the difference between amount and severity, can you not?
Once again:
http://secunia.com/graph/?type=cri&period=all&prod=11
http://secunia.com/graph/?type=cri&period=all&prod=4227
|
#17 By
37 (24.183.41.60)
at
2/10/2005 7:42:43 PM
|
....waiting...good thing I have patience. Post back when you have a reply Onslaught...that addresses the 9 oustanding security issues that make Firefox an insecure browser.
|
#18 By
37 (24.183.41.60)
at
2/10/2005 7:44:28 PM
|
MrRoper..if your serious, I can have your account deleted. Please confirm via email at brian@activewin.com
|
#19 By
3653 (68.54.224.219)
at
2/10/2005 7:44:51 PM
|
onslaught, you are funny in a helplessly clueless kind of way...
Let's review your original message. Pay attention here.
---------
Why does the Yahoo toolbar come with an installer? Seems like it would be faster if Yahoo simply installed their toolbar via one of the many security vulnerabilities found in Firefox this week.
Which security vulnerabilities would those be, Elmer FUD?
The vulnerabilities which allow Web sites to install spyware/trojans/etc through IE, without user interaction, do not work in Firefox.
---------
I noticed you added "without user interaction" even though I didn't mention it. Were you trying to speak for me? No thanks.
|
#20 By
37 (24.183.41.60)
at
2/10/2005 7:48:07 PM
|
mooresa56....grrrrrrrrrrrrrrrrrrr...i have been giving him clues to figure that out on his own...and now you ruined it.
Oh well.
|
#21 By
3653 (68.54.224.219)
at
2/10/2005 7:48:39 PM
|
Just saw your last note onslaught. you said:
---------------
Why does the Yahoo toolbar come with an installer? Seems like it would be faster if Yahoo simply installed their toolbar via one of the many security vulnerabilities found in Firefox this week.
Does this not equate to:
"the vulnerabilities which allow Web sites to install spyware/trojans/etc, without user interaction"?
---------------
The answer is NO. But don't let that stop you.
|
#22 By
29903 (4.245.182.111)
at
2/10/2005 8:21:40 PM
|
mooresa56 wrote:
onslaught, you are funny in a helplessly clueless kind of way...
Let's review your original message. Pay attention here.
Why does the Yahoo toolbar come with an installer? Seems like it would be faster if Yahoo simply installed their toolbar via one of the many security vulnerabilities found in Firefox this week.
[snip]
I noticed you added "without user interaction" even though I didn't mention it. Were you trying to speak for me? No thanks.
So, which "security vulnerabilities found in Firefox" would make it "faster" for "Yahoo" to "simply" install "their toolbar"? If it required just as much user interaction, how would it be any faster?
Are you saying there are no such "security vulnerabilities found in Firefox" that would make it "faster" for "Yahoo" to "simply" install "their toolbar," and that your comment has no point?
|
#24 By
29903 (4.245.182.111)
at
2/10/2005 8:32:27 PM
|
mooresa56 wrote:
By mooresa56 (1515 Posts) at 2/10/2005 7:48:39 PM
Just saw your last note onslaught. you said:
---------------
Why does the Yahoo toolbar come with an installer? Seems like it would be faster if Yahoo simply installed their toolbar via one of the many security vulnerabilities found in Firefox this week.
Does this not equate to:
"the vulnerabilities which allow Web sites to install spyware/trojans/etc, without user interaction"?
---------------
The answer is NO. But don't let that stop you.
Ah, all well and good. I guess this means you will now explain the "security vulnerabilities found in Firefox this week" would allow the Yahoo toolbar to be installed "faster."
I'm not sure how an install which requires "user interaction" would even be much an exploit, or how it would be any faster, but that's for you to explain!
|
#25 By
29903 (4.245.182.111)
at
2/10/2005 9:04:06 PM
|
LinuxIsTheft wrote:
By LinuxIsTheft (142 Posts) at 2/10/2005 8:48:10 PM
#21 "You're saying that you don't understand if clicking a link and downloading the file to your PC is user interaction or not?"
It depends. In the case of the Firefox vulnerability, not only does the file get downloaded, it gets executed and installed.
Have an example or a link to this vulnerability? Once again, you would have to choose to dowload this virus onto your computer. I would hardly call that "without user interaction." So, this virus can be defeated by my choosing not to install it? Well, I guess I just won't install it. I also don't go around installing other trojans on my PC either. What do you suggest? Taking away the ability to download anything at all?
LinuxIsTheft wrote:
As I quoted:
"Although the spyware is only installed if users agree to download a certain file, many users are likely to click through, as the download's dialogue box gives no indication of the file's malicious payload, Sjouwerman said.
"It's done in a way that people might not recognize as a normal install, and will work in Firefox," Sjouwerman said.
Hmmm. If I download a gif with Firefox and it downloads a bat file, I would suggest that the normal user interaction associated with downloading a bat file has been bypassed.
Maybe you wouldn't.
I will agree as soon as you show me a link to a .gif that Firefox will download onto my PC as a .bat file and then execute.
I find it interesting that secunia.com doesn't appear to be interested in this "exploit."
|
|
|
|
|