Mozilla Corp. is considering adding a tool to Firefox 3.0 that would automatically block Web sites thought to harbor malicious downloads, but the company's security chief refused to spell out details, saying Mozilla is "not ready to talk about the feature." Even so, there are numerous details to be found on a blog by a Firefox designer and in a back-and-forth discussion of the feature in Bugzilla, the management system that Mozilla uses to track changes in its software. Together, the two offer a behind-the-scenes look into Mozilla's open-source development process.
"Similar to how Firefox 2 blocks Web sites that are potentially going to try to steal your personal information, Firefox 3 will block Web sites that we believe are going to try to install malicious programs on your computer," said Alex Faaborg, a user experience designer in a blog entry last week. "Mozilla is coordinating with Google on this feature." And in a Bugzilla entry that offers comments from Mozilla and Google employees -- including Chris Hofmann, Mozilla's director of engineering, and Mike Shaver, its director of ecosystem development -- information is even more free-flowing about malicious site blocking in the next major update to Firefox.
View: Full Story
News source: ComputerWorld
"Similar to how Firefox 2 blocks Web sites that are potentially going to try to steal your personal information, Firefox 3 will block Web sites that we believe are going to try to install malicious programs on your computer," said Alex Faaborg, a user experience designer in a blog entry last week. "Mozilla is coordinating with Google on this feature." And in a Bugzilla entry that offers comments from Mozilla and Google employees -- including Chris Hofmann, Mozilla's director of engineering, and Mike Shaver, its director of ecosystem development -- information is even more free-flowing about malicious site blocking in the next major update to Firefox.
















Because by definition, censored is someone or something blocking and/or restricting access to something because they don't agree with it. Again, I understand the intent here, and I am sure it is welcomed by most people, it's just that for me, I don't want Mozilla deciding what web pages I should and shouldn't visit. If it's done like in Firefox 2, where it RECOMMENDS you don't visit the site, that's an entirely different matter. But if it's physically blocking access, I can't say this is a good thing.
I'd like to retain the right to make the decision for myself as to what "malware" is.
You're still given a choice.
I'd like to retain the right to make the decision for myself as to what "malware" is.
Not to mention that Google blocks a lot of sites this way that don't even have anything on them remotely malware. There was someone here on Neowin just in the last week or two that had a problem with Google blocking his site like this actually. Nothing on the site was harmful at all.
I agree that it would turn off people to the browser. Even if you are still given a choice, it's a bad move.
I agree that it would turn off people to the browser. Even if you are still given a choice, it's a bad move.
*tinfoil hat* Even further, I sure hope that Google is providing a raw flat file of all the domains/URLs to block... Since else, you're sending your entire surfing life to Google. (Since I really doubt it'll 'not' check https URLs as well...)
Oh, and I only mention this since Google is well known to keep records of your accesses to their system for "future service enhancements" for an undisclosed amount of time...
Agreed. I think that it'd be best if it gives a recommendation/warning similar to how Firefox 2 does. As long as it provides a clear & concise warning of some sort, but allows someone to willingly proceed after the warning at their own risk.
Because despite best intentions there will always be the chance that a legitimate website gets blocked accidentally. While the chance of that occurring is small, it's always good to allow the user a choice (after providing a warning) on what actions they wish to take instead of forcing the decision on them.
I agree. Google blocks alot of sites too
Just a little quote I remember from a few years back:
but in very few years they can be in a position to dictate, to
everybody using a computer, what they can see or what sites
they can visit.
All capitalistic entities will change hats when the dollar is at stake.
They may be white hats now but that will change.
Google is a politician running for office. They talk a great platform
but after election day they will always side with the almighty dollar.
There are no "good-guys".
Only those who haven't been corrupted YET.
"Mister Smith Goes to Washington" was a work of fiction with no
basis in real life.
yes, it might be on by default, but that's understandable. Mozilla is getting more and more of the market share, and if they want to continue expanding they have to take into account all the "average users" that are using IE that don't know anything about malware and such
why would they switch from IE that, although restricts you severley, still does protect you like f'ing crazy, to firefox were they can get infected 9 ways from sunday only to be given utilities and options that they don't even know how to use?
don't get me wrong, i love firefox. been usin it for 2 years. but they gotta look at what the average customer will see through the marketing of competitors. all that spin actually works on the stupid people
sadly, as firefox gets more of the market share it will become more and more bloated with features that us power users don't need nor want.
Anyways, good idea - a lot of non-techie users out there will end up on such sites unless explicitly advised not to...
But naturally, for the more advanced (when 'more advanced' read 'someone who knows what a browser is' ) user, you will be able to turn this feature off; great if you, for example, visit a lot of warez sites that often have viruses in with the files they provide.
And I'm pretty sure, just like Safe-Browsing, it is possible for companies other than Google to provide firefox with a list of sites to block. At the moment it seems no one has done this yet, but the ability for someone to do that is certainly available. (ie: google isn't hardcoded into the code-base, you can change where it looks up such files in about:config, or the vendor could repackage the browser with their links as default, or provide an extension to do the changes, etc)
Also, if it's like the Safe Browsing feature, you'll have the option to either send every link you click on to google for verification, or you'll be able to choose to have a local list stored. Firefox will ask google the length of their list every 30 minutes, and if google's list is longer than yours, google will send you the new links it has to be added to your local list.
Last edited by Cryton on 06 Jun 2007 - 11:21
Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!
Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.