main

Firefox 3.0 may block sites fingered by Google

Slimy   on 05 June 2007 - 22:03 · 32 comments & 12919 views

Advertisement (Why?)
Mozilla Corp. is considering adding a tool to Firefox 3.0 that would automatically block Web sites thought to harbor malicious downloads, but the company's security chief refused to spell out details, saying Mozilla is "not ready to talk about the feature." Even so, there are numerous details to be found on a blog by a Firefox designer and in a back-and-forth discussion of the feature in Bugzilla, the management system that Mozilla uses to track changes in its software. Together, the two offer a behind-the-scenes look into Mozilla's open-source development process.

"Similar to how Firefox 2 blocks Web sites that are potentially going to try to steal your personal information, Firefox 3 will block Web sites that we believe are going to try to install malicious programs on your computer," said Alex Faaborg, a user experience designer in a blog entry last week. "Mozilla is coordinating with Google on this feature." And in a Bugzilla entry that offers comments from Mozilla and Google employees -- including Chris Hofmann, Mozilla's director of engineering, and Mike Shaver, its director of ecosystem development -- information is even more free-flowing about malicious site blocking in the next major update to Firefox.

View: Full Story
News source: ComputerWorld

Post a comment · Send to friend Comments · There are 32 additional comments
(7 replies) #1 drygnfyre on 05 Jun 2007 - 22:08
I understand the intent, but I want a browser that lets me visit the Internet, not visiting an extranet that is censored by Mozilla.
#1.1 robert27 on 05 Jun 2007 - 22:11
How is blocking access to sites the habor malware termed "censored"?
#1.2 drygnfyre on 05 Jun 2007 - 22:15
Quote - (robert27 said @ #1.1)
How is blocking access to sites the habor malware termed "censored"?

Because by definition, censored is someone or something blocking and/or restricting access to something because they don't agree with it. Again, I understand the intent here, and I am sure it is welcomed by most people, it's just that for me, I don't want Mozilla deciding what web pages I should and shouldn't visit. If it's done like in Firefox 2, where it RECOMMENDS you don't visit the site, that's an entirely different matter. But if it's physically blocking access, I can't say this is a good thing.
#1.3 305 on 05 Jun 2007 - 22:18
People tend to think synonymously of the two words "blocking", and "censorship". That's what it is in the end. Stupid move, and would turn anyone off to the browser, or any at that, that would take such actions.

I'd like to retain the right to make the decision for myself as to what "malware" is.
#1.4 Huleboeren on 05 Jun 2007 - 22:25
As far as I understand it - it will block the malware site until you choose to go further into hell.
You're still given a choice.
#1.5 NightmarE D on 05 Jun 2007 - 22:45
Quote - (305 said @ #1.3)
People tend to think synonymously of the two words "blocking", and "censorship". That's what it is in the end. Stupid move, and would turn anyone off to the browser, or any at that, that would take such actions.

I'd like to retain the right to make the decision for myself as to what "malware" is.


Not to mention that Google blocks a lot of sites this way that don't even have anything on them remotely malware. There was someone here on Neowin just in the last week or two that had a problem with Google blocking his site like this actually. Nothing on the site was harmful at all.

I agree that it would turn off people to the browser. Even if you are still given a choice, it's a bad move.
#1.6 Poof on 06 Jun 2007 - 05:54
Quote - (NightmarE D said @ #1.5)
Not to mention that Google blocks a lot of sites this way that don't even have anything on them remotely malware. There was someone here on Neowin just in the last week or two that had a problem with Google blocking his site like this actually. Nothing on the site was harmful at all.

I agree that it would turn off people to the browser. Even if you are still given a choice, it's a bad move.


*tinfoil hat* Even further, I sure hope that Google is providing a raw flat file of all the domains/URLs to block... Since else, you're sending your entire surfing life to Google. (Since I really doubt it'll 'not' check https URLs as well...)

Oh, and I only mention this since Google is well known to keep records of your accesses to their system for "future service enhancements" for an undisclosed amount of time...
#1.7 voidpharoh on 06 Jun 2007 - 07:07
Quote - (drygnfyre said @ #1.2)
If it's done like in Firefox 2, where it RECOMMENDS you don't visit the site, that's an entirely different matter. But if it's physically blocking access, I can't say this is a good thing.


Agreed. I think that it'd be best if it gives a recommendation/warning similar to how Firefox 2 does. As long as it provides a clear & concise warning of some sort, but allows someone to willingly proceed after the warning at their own risk.

Because despite best intentions there will always be the chance that a legitimate website gets blocked accidentally. While the chance of that occurring is small, it's always good to allow the user a choice (after providing a warning) on what actions they wish to take instead of forcing the decision on them.
(3 replies) #2 RhythmFlirt on 05 Jun 2007 - 22:15
Why Google? What part does Google play in Mozilla Firefox?
#2.1 fpd on 05 Jun 2007 - 22:18
Google pays Mozilla corps wages.
#2.2 Bhav on 05 Jun 2007 - 22:29
Google indexes malicious sites
#2.3 xdcc on 06 Jun 2007 - 02:01
Google wants Firefox by default to notify them of every site you visit, which will be added to your psychological profile and permanent record that they are building on you.
(1 reply) #3 +nezermundy on 05 Jun 2007 - 22:26
Fingered !
#3.1 A10 on 05 Jun 2007 - 23:08
Lol they must have been talking to some linux guys they like finger and touch themselves.
#4 SacrificialSoldier on 05 Jun 2007 - 22:46
If I want censoredselective surfing I will get a filter. Firefox better not be serious or I might get FlockOperaBrowZar
#5 slang123 on 05 Jun 2007 - 22:49
Its a good idea provided theres a switch for people who dont want it. As with a lot of things. I'm sure there will be a switch
#6 Mike Frett on 05 Jun 2007 - 22:50
Don't worry guys. You'll be able to turn it off, cheer up.
(2 replies) #7 duntkno on 05 Jun 2007 - 22:56
firefox 3 is going to be so bloated, i can see it now.
#7.1 Shof on 05 Jun 2007 - 22:58
Quote - (duntkno said @ #7)
firefox 3 is going to be so bloated, i can see it now.

I agree. Google blocks alot of sites too
#7.2 ThaCrip on 06 Jun 2007 - 04:09
i was thinking why would we "need" another update of firefox cause version 2 is already "good enough" ... but i think i remember seeing the developers have "speed" of the browser in mind when making it... so if they keep it simple and fast hopefully bloat will never be a issue since the regular mozilla suite is already the bloated one... so lets hope they keep the bloat in that and keep it FAR away from firefox.
#8 ozzieXP on 05 Jun 2007 - 22:59
people are never happy ... oh well.. I think its a great idea... those of you who dont like it can turn it off.
(1 reply) #9 IceDogg on 05 Jun 2007 - 23:08
Sorry I don't trust computerworld ever since they posted Adblock plus and Noscript in the group of worse Firefox extensions. I'll wait and get info somewhere else. I realize that they have links, but there is a spin and interpretation computerworld is putting on this story that makes it seem like a bad idea. We don't yet know how it's going to work or if it's going to be on by default or, really anything about it yet. It's mostly speculation, something computerworld is known for.
#9.1 305 on 05 Jun 2007 - 23:34
Funny, I was just reading that article just last night. Adblock/NoScript worst extensions/addons my ass. They're actually the only 2 I have installed on my FF. Fcuk what THEY say.
#10 SunnyB on 05 Jun 2007 - 23:12

Just a little quote I remember from a few years back:

Quote -
Today Google is the white hat and everybody cheers for them
but in very few years they can be in a position to dictate, to
everybody using a computer, what they can see or what sites
they can visit.

All capitalistic entities will change hats when the dollar is at stake.
They may be white hats now but that will change.


Google is a politician running for office. They talk a great platform
but after election day they will always side with the almighty dollar.

There are no "good-guys".
Only those who haven't been corrupted YET.
"Mister Smith Goes to Washington" was a work of fiction with no
basis in real life.

#11 PermaSt0ne on 05 Jun 2007 - 23:35
why are you guys complaining? it will be an option that you can turn off at any time

yes, it might be on by default, but that's understandable. Mozilla is getting more and more of the market share, and if they want to continue expanding they have to take into account all the "average users" that are using IE that don't know anything about malware and such

why would they switch from IE that, although restricts you severley, still does protect you like f'ing crazy, to firefox were they can get infected 9 ways from sunday only to be given utilities and options that they don't even know how to use?

don't get me wrong, i love firefox. been usin it for 2 years. but they gotta look at what the average customer will see through the marketing of competitors. all that spin actually works on the stupid people

sadly, as firefox gets more of the market share it will become more and more bloated with features that us power users don't need nor want.
#12 Evil Cretin on 05 Jun 2007 - 23:35
Sounds like a good idea, but only if firefox pops up a warning screen rather than block the site completely. Too many false positives out there.

Anyways, good idea - a lot of non-techie users out there will end up on such sites unless explicitly advised not to...
#13 thornz0 on 06 Jun 2007 - 01:07
Its going to be a warning or a setting just like every other similar feature, but per usual people will wig out and zomg without reason.
#14 mlauzon76 on 06 Jun 2007 - 01:59
Shouldn't this be a choice by the end user what sites they should or shouldn't visit, it may sound like a good idea to some...but then our choice is taken from us!


#15 aalaap on 06 Jun 2007 - 04:55
I concur with #12. It'll certainly be a warning that does give you the option to continue at your own risk. The warning will prevent any non-savvy web users from accidentally downloading malware. For the rest of us, there'll be a setting that turns off this warning.
#16 Cryton on 06 Jun 2007 - 11:11
Of course this feature will be an option, just like Safe Browsing (anti-phishing). The goal of firefox is still to be a browser for noobs who can have a good browsing experience and be safe straight out of the box. This will help that cause greatly.

But naturally, for the more advanced (when 'more advanced' read 'someone who knows what a browser is' ) user, you will be able to turn this feature off; great if you, for example, visit a lot of warez sites that often have viruses in with the files they provide.

And I'm pretty sure, just like Safe-Browsing, it is possible for companies other than Google to provide firefox with a list of sites to block. At the moment it seems no one has done this yet, but the ability for someone to do that is certainly available. (ie: google isn't hardcoded into the code-base, you can change where it looks up such files in about:config, or the vendor could repackage the browser with their links as default, or provide an extension to do the changes, etc)

Also, if it's like the Safe Browsing feature, you'll have the option to either send every link you click on to google for verification, or you'll be able to choose to have a local list stored. Firefox will ask google the length of their list every 30 minutes, and if google's list is longer than yours, google will send you the new links it has to be added to your local list.

Last edited by Cryton on 06 Jun 2007 - 11:21
#17 Betaz on 06 Jun 2007 - 17:02
I see no issue with this. It's not using it's own detection engine from the way it's described, it's running off a confirmed list maintained by Google. This means there should be no false positives, and therefore won't affect you unless you were going to be tricked into accessing a malicious site.
#18 dandin1 on 06 Jun 2007 - 22:14
This feels too much like Internet Explorer. Yes I know you can turn it off, and that was my problem when I installed IE7. I had to spend about an hour fiddling with the settings to get rid of all the crap for noobs. You wouldn't want Firefox to become cluttered like NS7. (that's of course a tremendous exageration, NS7 was unbeleivable.)

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)