EDIT: Ugh. Never mind my original reply here. I just found that if Mozilla runs across something on a web site it doesn't understand, it hands it to the operating system to deal with without user intervention. This in effect seems to mean that any exploits on the internet that use non-standard code to attack Windows can be passed through gecko-based browsers such as Mozilla and Firefox and accomplish their objectives even without IE.
This is not an issue with Opera, as it simply will ignore very badly written code it can't parse or code it doesn't understand and won't run any executables at all (you have to deliberately download it and run it yourself, and Opera washes its hands of the affair at that point). This means that some web sites won't have full functionality but it is either potentially unsafe functionality or just sloppy or lazy coding that the designer shouldn't have been allowed to get away with in the first place. Mozilla, in trying to stem complaints of the browser "not working" on poorly coded sites, seems to have introduced this "feature" (I call it a bug or an exploit) in order to gain more universal acceptance. However, they have in effect produced a browser that is potentially as unsafe as IE and potentially can be exploited to make it even less safe if I'm reading these things properly (since even IE will sometimes ask you what the hell you think you're doing when you click on something stupid).
Another edit: Mozilla has a fix here: http://www.mozilla.org/security/shell.html - though a couple Slashdot geeks are saying it's kind of a band-aid and the underlying problem is still there and waiting for hackers to get around. I'm not a developer and don't know if they're full of hot air or not but I'm not willing to gamble on it when I already have a browser that is more usable and enjoyable and is completely free of this issue.
Now, the Slashdot crowd are fanatical about free software so anything Windows does=bad (and they're very often right) and anything Linux or Mozilla does=good (50/50). In this case they're arguing that Mozilla has done nothing wrong and it's Windows' fault that people's machines can still be hijacked using Mozilla or Firefox. I call shenanigans and say this is absolutely unacceptable. In my myopic and unlearned view, a browser simply should not under any circumstances be allowed to run executables on a computer without the user having to jump through hoops to prove that they intend for this to happen. In other words, if you kill your own machine through your own actions that's your own lookout but if your browser allows it to be killed through inaction it's a bad browser and should be avoided.
For the casual user who just thought he was switching to avoid IE's security holes and doesn't know to go looking for patches for this "secure" browser, this is halfassed in my view. I've been poking around to see how decisions are made on what to include in Mozilla's products and it looks to me like this kind of thing could be a BIG problem again in the future. Firefox is off my machine and I will only recommend Opera until I know that Mozilla's oversight is improved. This was an incredibly stupid flaw to allow in a product that's been worked on for so long by so many people.
My original post follows, but I say "You get what you pay for" may be applicable here for the time being so my advice is to go with Opera and deal with the ad or pay the money if you can afford it:
Ah, but I keep forgetting one important deciding factor: Opera puts an ad in the corner - doesn't seem to bother most people but it's there. It costs $40 to get rid of it. I first paid for Opera back in when it was 4.something or so and each additional upgrade is $10 or $15 so I've been paying roughly $15 a year for the ad-free version. I am quite willing and able to pay for cool software I use a lot if I prefer it over the free alternatives but if you want or need the free thing and don't want the ads this may be the dealbreaker. Just trash IE, okay?
Recommended Posts
Jason P
EDIT: Ugh. Never mind my original reply here. I just found that if Mozilla runs across something on a web site it doesn't understand, it hands it to the operating system to deal with without user intervention. This in effect seems to mean that any exploits on the internet that use non-standard code to attack Windows can be passed through gecko-based browsers such as Mozilla and Firefox and accomplish their objectives even without IE.
This is not an issue with Opera, as it simply will ignore very badly written code it can't parse or code it doesn't understand and won't run any executables at all (you have to deliberately download it and run it yourself, and Opera washes its hands of the affair at that point). This means that some web sites won't have full functionality but it is either potentially unsafe functionality or just sloppy or lazy coding that the designer shouldn't have been allowed to get away with in the first place. Mozilla, in trying to stem complaints of the browser "not working" on poorly coded sites, seems to have introduced this "feature" (I call it a bug or an exploit) in order to gain more universal acceptance. However, they have in effect produced a browser that is potentially as unsafe as IE and potentially can be exploited to make it even less safe if I'm reading these things properly (since even IE will sometimes ask you what the hell you think you're doing when you click on something stupid).
Another edit: Mozilla has a fix here: http://www.mozilla.org/security/shell.html - though a couple Slashdot geeks are saying it's kind of a band-aid and the underlying problem is still there and waiting for hackers to get around. I'm not a developer and don't know if they're full of hot air or not but I'm not willing to gamble on it when I already have a browser that is more usable and enjoyable and is completely free of this issue.
Now, the Slashdot crowd are fanatical about free software so anything Windows does=bad (and they're very often right) and anything Linux or Mozilla does=good (50/50). In this case they're arguing that Mozilla has done nothing wrong and it's Windows' fault that people's machines can still be hijacked using Mozilla or Firefox. I call shenanigans and say this is absolutely unacceptable. In my myopic and unlearned view, a browser simply should not under any circumstances be allowed to run executables on a computer without the user having to jump through hoops to prove that they intend for this to happen. In other words, if you kill your own machine through your own actions that's your own lookout but if your browser allows it to be killed through inaction it's a bad browser and should be avoided.
For the casual user who just thought he was switching to avoid IE's security holes and doesn't know to go looking for patches for this "secure" browser, this is halfassed in my view. I've been poking around to see how decisions are made on what to include in Mozilla's products and it looks to me like this kind of thing could be a BIG problem again in the future. Firefox is off my machine and I will only recommend Opera until I know that Mozilla's oversight is improved. This was an incredibly stupid flaw to allow in a product that's been worked on for so long by so many people.
My original post follows, but I say "You get what you pay for" may be applicable here for the time being so my advice is to go with Opera and deal with the ad or pay the money if you can afford it:
Ah, but I keep forgetting one important deciding factor: Opera puts an ad in the corner - doesn't seem to bother most people but it's there. It costs $40 to get rid of it. I first paid for Opera back in when it was 4.something or so and each additional upgrade is $10 or $15 so I've been paying roughly $15 a year for the ad-free version. I am quite willing and able to pay for cool software I use a lot if I prefer it over the free alternatives but if you want or need the free thing and don't want the ads this may be the dealbreaker. Just trash IE, okay?
Edited by JackassLink to comment
Share on other sites
WordWolf
Why I've been liking FireFox during my shakedown....
A) It's my favourite price for software
B) More secure than IE, slightly faster than IE.
C) Close enough to IE from an ergonomics POV that I am pretty much
hitting the same keys and commands for the same functions.
D) Built-in popup blocker, plus easy-to-add extra features.
Eventually I'll have to get converted to the tabbed browsing
(which is built-in), but this way I can ease into it slowly.
============================
No fair rewriting your message while I'm responding! :D-->
Especially when you do a 180.
Thanks for the heads-up.
Link to comment
Share on other sites
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.