Skip to main content

Finally, someone has the courage to challenge Firefox

Microsoft employee Peter Torr has started a flame war in his own blog today. Torr claims that the distribution and code signing of Firefox isn't up to scratch. Torr provides screenshots of the latest XPSP2 protection IE but fails to mention the poor protection in IE 6 SP1 which many more users are still using. Nevertheless if you enjoy battling it out about Firefox vs IE then this is a read for you. Here's a snip:

Recently, a lot of volunteers donated money to the Firefox project to pay for a two-page advert in the New York Times. If only they had spent some of that money on improving the security of their users by, say, purchasing a VeriSign code signing certificate.

"But the thing that makes me really not trust the browser is that it doesn't matter how secure the original code is if the typical usage pattern of the browser requires users to perform insecure actions.

· Installing Firefox requires downloading an unsigned binary from a random web server
· Installing unsigned extensions is the default action in the Extensions dialog
· There is no way to check the signature on downloaded program files
· There is no obvious way to turn off plug-ins once they are installed
· There is an easy way to bypass the "This might be a virus" dialog

Via How can I trust Firefox?
Via Neowin

Popular posts from this blog

How to Download Contacts from Facebook To Outlook Address Book

Facebook users are not too pleased with the "walled garden" approach of Facebook. The reason is simple - while you can easily import your Outlook address book and GMail contacts into Facebook, the reverse path is closed. There's no "official" way to export your Facebook friends email addresses or contact phone numbers out as a CSV file so that you can sync the contacts data with Outlook, GMail or your BlackBerry. Some third-party Facebook hacks like "Facebook Sync" (for Mac) and "Facebook Downloader" (for Windows) did allow you to download your Facebook friends' names, emails, mobile phone number and profile photo to the desktop but they were quickly removed for violation of Facebook Terms of Use. How to Download Contacts from Facebook There are still some options to take Friends data outside the walls of Facebook wall. Facebook offers the Takeout option allowing you to download all Facebook data locally to the disk (include
Read more

Digital Inspiration

Digital Inspiration is a popular tech blog by  Amit Agarwal . Our popular Google Scripts include  Gmail Mail Merge  (send personalized emails with Gmail ),  Document Studio (generate PDFs from Google Forms ) and   File Upload Forms ( receive files  in Google Drive). Also see  Reverse Image Mobile Search , Online Speech Recognition and Website Screenshots , the most useful websites on the Internet.
Read more

PhishTank Detects Phishing Websites by Digg Style Voting

OpenDNS, a free service that helps anyone surf the Internet faster with a simple DNS tweak , will announce PhishTank today. PhishTank is a free public database of phishing URLs where anyone can submit their phishes via email or through the website. The submissions are verified by the other community members who then vote for the suspected site. This is such a neat idea as sites can be categorized just based on user feedback without even having to manually verify each and every submission. PhishTank employs the "feedback loop" mechanism where users will be kept updated with the status' of the phish they submit either via email alerts or a personal RSS feed . Naturally, once the PhishTank databases grows, other sites can harness the data using open APIs which will remain free. OpenDNS would also use this data to improve their existing phishing detection algorithms which are already very impressive and efficient. PhishTank | PhishTank Blog [Thanks Allison] Related: Google
Read more