Mozilla Firefox 1.5.0.4

Posted by: [NT] on: 06/02/2006 07:51 AM [ Print | 55 comment(s) ] · 2547 views

Mozilla Firefox 1.5.0.4 is a stability-and-security update which also includes a number of fixes for other types of bugs.
BetasIntercom

Comment

MrFlibble Unregistered

#64737 Posted on: 06/04/2006 03:06 PM No, it looks like the head remains resolutely stuck up the arse.

Comment

TSThomas Junior Member Posts: 2 Joined: 2003-05-10

#64738 Posted on: 06/04/2006 04:47 PM You say it yourself on Firefox Myths; "Anyone who claims Internet Explorer cannot be secured from Auto-installing Spyware either doesn't know how or is lying." What were users of fully patched systems infected by zero-day, unpatched, vulnerabilities earlier this year? From what you say on Firefox Myths this is impossible to happen.

Comment

MrFlibble Unregistered

#64739 Posted on: 06/04/2006 05:22 PM The video of auto-installing malware proves that statement on Firefox Myths to be false. Mastertech is also on the record as stating that auto-installing malware in IE was impossibly at the very time that these exploits were in the wild and remained unpatched, at a time when he should have been warning IE users to exercise sensible precautions. These are not the statements of a 'Master Technician' but an IE-fanboy, whose constant repetition of dogma (IE=100%) security has led him to make a complete ass of himself. Apparently he's never heard the expression 'the best thing to do when in a hole is to stop digging' because he's still shovelling away furiously!

Comment

BetrayerX Unregistered

#64740 Posted on: 06/04/2006 10:11 PM I Format a PC, get it FUlly Patched with IE only. Get 2 firewalls (default and ZA) working and 2 antivirus (ZA suite and F-Prot). One does the normal everyday scan and the other does a full scan 2 times a week. Updates are set up daily The idiot returns me the machine one week later .... fully covered with spyware, almost unusable, ready for a fast reformat to get things done quickly. I install Firefox, make it main browser and delete all possible links to explorer. Same configuration. The idiot returns 1 month later with the same problem. The guy whom I am talking here is a total menace to the internet. COuld screw a machine faster than anyone could say spyware. If the time gap of him returning the machine in a similar state is not proof of anything, I dunno what else to say.

Comment

Mastertech Junior Member Posts: 2 Joined: 2005-04-13

#64741 Posted on: 06/04/2006 10:37 PM #1 you only need one Firewall and 1 antivirus. What idiot installs two of each? Just because YOU are incapable of setting up a machine properly does not mean it cannot be done. I do this for a living and have THOUSANDS of clients. When I set up a machine the only spyware anyone gets is from installing stupid spyware infected applications like Kazaa ect... You need to: 1. Fully update Windows with ALL updates, for XP SP2 is essential. 2. You need to make sure the XP firewall is enabled 3. Install 1 AntiVirus program like Avast. 4. Install Windows Defender 5. Uninstall MSJVM and install Sun's latest version of Java. <---- This step is the most important one that everyone who gets spyware does not do. 6. Install SpywareBlaster. This is an incredibly simple process that anyone can do. Now for people who download infected applications I recommend a program like Site Advisor that gives blatant warnings of dangerous sites. Firefox has NOTHING to do with preventing Spyware infection. YOUR complete lack of knowledge on how to properly setup a system is the real problem.

Comment

Mastertech Junior Member Posts: 2 Joined: 2005-04-13

#64742 Posted on: 06/04/2006 10:43 PM Read this on how to prevent Spyware infection. 1. Fully update Windows with ALL updates, for XP SP2 is essential. 2. You need to make sure the XP firewall is enabled 3. Install 1 AntiVirus program like Avast. 4. Install Windows Defender 5. Uninstall MSJVM and install Sun's latest version of Java. <---- This step is the most important one that everyone who gets spyware does not do. 6. Install SpywareBlaster. This is an incredibly simple process that anyone can do. Now for people who download infected applications I recommend a program like Site Advisor that gives blatant warnings of dangerous sites. Firefox has NOTHING to do with preventing Spyware infection. YOUR complete lack of knowledge on how to properly setup a system is the real problem. Now you can either learn something or be ignorant all your life. The choice is yours. I don't get infected with auto-installing spyware and neither do any of my thousands of clients. You can spread FUD all you want about all these people getting infected between patches but it is just not so. We saw absolutely no increase in infected clients during this time. Microsoft didn't either which is why the patch was not rushed out quicker. Your delilusion of something else is only to spread propaganda. I suggest you get out in the real world and get real some experience in the nonsense you try to spread.

Comment

Mastertech Junior Member Posts: 2 Joined: 2005-04-13

#64743 Posted on: 06/04/2006 10:45 PM I have seen no proof of this and I want a link to confirm this.

Comment

Nanobot Unregistered

#64744 Posted on: 06/04/2006 11:11 PM "thousands of clients"? Haha, what company do you work at? Given your history, I for one will not take your word on having thousands of "clients", or any relevant data for that matter. If you've never been infected with anything, then good for you. Lots of others have. Meanwhile, how many people have been affected by Firefox vulnerabilities? You can't give us a list of six big steps (hunting down and installing/uninstalling something big in each step) and expect the average user to do this. If you had a single client and a brain, you'd know this. Users want to grab one piece of software that does everything for them and never have to worry about it again. In the real world (not your little fantasy world), users are a lot more likely to install Firefox or Opera (once they're told to) than go through all of those six steps, and in the real world Firefox and Opera do go most of the way to the level of security your long advice gives (historically often more security, depending on current threats in the wild). Add one or two additional security tools and the security is beyond what you get from your recommendation, and in a fraction of the setup time and effort. Your total ignorance on this matter really makes me doubt your claims about your job. Or is it that you're simply a tech repair guy at some school or something and you're counting the students as your "clients"?

Comment

TSThomas Junior Member Posts: 2 Joined: 2003-05-10

#64745 Posted on: 06/05/2006 09:24 AM "5. Uninstall MSJVM and install Sun's latest version of Java. <---- This step is the most important one that everyone who gets spyware does not do." Firefox (& other non-IE based Browsers) do not use Microsoft's Java VM; therefore what you are saying is that Firefox *does* prevent spyware infection as it lacks the Microdsoft JavaVM attacks which according to you is "the most important one that everyone who gets spyware does not do".

Comment

Mastertech Junior Member Posts: 2 Joined: 2005-04-13

#64746 Posted on: 06/05/2006 12:22 PM Yes you manipulating what I am talking about does not change what I actually said and meant.

Comment

Mastertech Junior Member Posts: 2 Joined: 2005-04-13

#64747 Posted on: 06/05/2006 12:23 PM Yes you keep making these claims, yet during this time I repeatedly asked for ONE link to prove this but you had nothing. You never have anything just FUD.

Comment

Mastertech Junior Member Posts: 2 Joined: 2005-04-13

#64748 Posted on: 06/05/2006 12:24 PM I just gave you the information to become more educated. What you do with it is up to you.

Comment

Mastertech Junior Member Posts: 2 Joined: 2005-04-13

#64749 Posted on: 06/05/2006 12:30 PM I realize learning is beyond you. That is not my problem. I do have thousands of clients which is why I am able to provide REAL solutions to problems. While I do have thousands of clients I do not have millions - which is the number of Internet users so obviously there will be many who do not have a system set up by my company and no I will not tell you who this is. Installing Opera and Firefox DOES not provide protection. I see this on a daily basis, systems massively infected with Malware and Viruses but they have Firefox and Opera installed. This is the reality. If you actually had a REAL job in the REAL world with REAL clients you would see the same thing. I have just given your the solution for free, what you do with the information is up to you. You have a choice to learn something or remain ignorant. The choice is yours. The number of clients I have grows every day because I provide realistic solutions that work and are proven. But apparently even givening them away for free online does not prevent the rampant ignorance spread by the Firefox Fanboys.

Comment

Mastertech Junior Member Posts: 2 Joined: 2005-04-13

#64750 Posted on: 06/05/2006 12:31 PM It is a Myth on a fully patched version of IE. That vulnerability is patched.

Comment

Mastertech Junior Member Posts: 2 Joined: 2005-04-13

#64751 Posted on: 06/05/2006 12:34 PM I am still waiting on a link that can infect my fully patched version of IE with auto-installing spyware. This isn't complicated. You have yet to deliver. My clients had no infections during this time period from that exploit before it was patched. That is the reality = Deal with it.

Comment

Mastertech Junior Member Posts: 2 Joined: 2005-04-13

#64752 Posted on: 06/05/2006 12:38 PM No Sun's Java is not "secure" either but the reality is it is more secure than MSJVM and does not allow code execution with the latest version. The reality is that Java is a requirement of many web pages. If you have a more secure version of Java please let me know. FYI the "insecure" verion of Java you mention is also the same version used by Firefox.

Comment

TSThomas Junior Member Posts: 2 Joined: 2003-05-10

#64753 Posted on: 06/05/2006 01:27 PM "FYI the "insecure" verion of Java you mention is also the same version you recommend for IE".

Comment

TSThomas Junior Member Posts: 2 Joined: 2003-05-10

#64754 Posted on: 06/05/2006 01:30 PM So if your "clients" or yourself weren't infected by an exploit/vulnerability that means *no* other Internet users could possibly have been infected?

Comment

MrFlibble Unregistered

#64755 Posted on: 06/05/2006 02:16 PM Maybe if TSThomas pulls from one end, and I pull from the other, we could get your head out of there, Mastertech. What do you think?

Comment

PersianImmortal Unregistered

#64756 Posted on: 06/05/2006 02:31 PM To be fair, he brings it upon himself with an almost pathological obsession to descredit Firefox with half-truths, misquotes, and misinformation. How on earth he can assert that the only way to get malware through Internet Explorer is if you are incompetent is beyond me, considering there is evidence a plenty that it's not user stupidity that is the cause. I am also amazed at the arrogance he displays, suggesting that somehow is the most knowledgeable user on the Internet. Pity his poor "clients"... Every 'debate' I've ever seen him involved in is circular and totally pointless. Even provide him with evidence from even Microsoft itself and he will say "but some intern wrote that, it's wrong". To borrow a phrase from Ford Fairlane, arguing with MasterTech is like masturbating with a cheese grater: slightly amusing but mostly painful.

Comment

Mastertech Junior Member Posts: 2 Joined: 2005-04-13

#64757 Posted on: 06/05/2006 04:44 PM Of course Firefox is more secure than IE. It has less total vulnerabilities. I've said this many times. However in terms of Spyware a fully patched version of IE is not affected by auto-installing Spyware. That has never changed. What has also never changed is the fact that Firefox is insecure and Opera is far more secure than Firefox. Something all the fanboys never point out. You want to bash IE for security vulnerabilities when Firefox now has exclipsed 161 vulnerabilities. Anyone who wants to use the most secure browser would be using Opera Period. The latest version of Sun's Java is not affected by Spyware Period. MSJVM is. It is not complicated. Java is a fact of life. Many sites require it and therefore it needs to be installed. If you do not uninstall MSJVM you will be vulnerable to auto-installing Spyware.

Comment

Mastertech Junior Member Posts: 2 Joined: 2005-04-13

#64758 Posted on: 06/05/2006 05:01 PM I did not know you two were...

Comment

Mastertech Junior Member Posts: 2 Joined: 2005-04-13

#64759 Posted on: 06/05/2006 05:04 PM No it means that no one was exploiting the vulnerability, which is also why Microsoft did not release a patch earlier, they saw no immediate threat. This is how it works in the real world, we base security decisions on real world threats.

Comment

Mastertech Junior Member Posts: 2 Joined: 2005-04-13

#64760 Posted on: 06/05/2006 05:09 PM I gave you the information on how to easily secure IE, you can ignore it and pretend it doesn't exist or you can use it. The choice is up to you. But it is obvious you do not work in IT and have business EVER working in the field. Your complete lack of knowledge on Real World Threats is astonding. I do this EVERYDAY. If Auto-installing Spyware was so rampant between patches then why are you only able to come up with 2 links of this? Neither of which can be proven because there are no working HTML links. Could it be no other security company saw any remote use of it and the two in question were looking for news and determined to find it? So Frank what is your real name and address?

Comment

MrFlibble Unregistered

#64761 Posted on: 06/05/2006 06:45 PM Takes one to know one, duckie!