main

New Firefox 3.0 alpha blocks malware, secures plug-in update

Slimy   on 21 September 2007 - 20:09 · 25 comments & 12295 views

Advertisement (Why?)
With the release Firefox 3.0 alpha 8, the Mozilla Corporation has finally unveiled several security features it's talked up for months. Among the security provisions debuting in the new alpha of "Gran Paradiso," the code name for Firefox 3.0, are built-in anti-malware warnings and protection against rogue extension updates. The malware blocker, which was first mocked up in June, will block Web sites thought to contain malicious downloads. The feature will use information provided by Google Incorporated to flag potentially-dangerous sites, warn anyone trying to reach those URLs with Firefox and automatically block access to the site.

Another new feature prevents automatic updates of extensions from sending users to malicious sites where they might be infected by attack code or drive-by downloads. Most extensions are hosted on Mozilla's own servers but the company wants to lock down the ones that are not. Mozilla will require both the actual update package and the much smaller "manifest," or notification of an update, to be delivered over an SSL-secured connection. Alternatively, the update can be digitally signed. Mozilla noted that the change doesn't affect the initial installation of an extension.

Mozilla has not officially committed to a release date for the final version of Firefox 3.0.

News source: ComputerWorld

Post a comment · Send to friend Comments · There are 25 additional comments
(7 replies) #1 Croquant on 21 Sep 2007 - 20:20
So long as the user is able to override or opt-out of the blocking somehow, I'd say this is a good thing. Google has been wrong before about the sites it flags as containing malware, so I don't completely trust them to protect me. Besides, that's what Anti-virus programs are for.
#1.1 Glassed Silver on 22 Sep 2007 - 00:15
yea, i also hate too self-confident programs that think they are better administrators than i am...

Glassed Silver:mac
#1.2 Cidinho on 22 Sep 2007 - 11:17
Quote - (Glassed Silver said @ #1.1)
yea, i also hate too self-confident programs that think they are better administrators than i am...

Glassed Silver:mac

Maybe because they are

Nevermind, I don't like them either and Google has once blocked access to my website, and it was only a website containing information of a game (and cheats, of course)
#1.3 Cryton on 22 Sep 2007 - 18:17
Quote - (Glassed Silver said @ #1.1)
yea, i also hate too self-confident programs that think they are better administrators than i am...

Firefox is aimed at novice users who don't even know what an internet is. If you're a confident user then of course you will be able to turn this feature off. But please try to remember that firefox isn't aimed at advanced users like yourself, but instead at people who basically don't know what they're doing and often get themselves into trouble whilst browsing.
#1.4 Daffy_Duck on 23 Sep 2007 - 16:03
Quote - (Cryton said @ #1.3)
Quote - (Glassed Silver said @ #1.1)
yea, i also hate too self-confident programs that think they are better administrators than i am...

Firefox is aimed at novice users who don't even know what an internet is. If you're a confident user then of course you will be able to turn this feature off. But please try to remember that firefox isn't aimed at advanced users like yourself, but instead at people who basically don't know what they're doing and often get themselves into trouble whilst browsing.


That was the most idiotic post of the day.
#1.5 +Kushan on 23 Sep 2007 - 16:20
Quote - (Daffy_Duck said @ #1.4)
Quote - (Cryton said @ #1.3)
Quote - (Glassed Silver said @ #1.1)
yea, i also hate too self-confident programs that think they are better administrators than i am...

Firefox is aimed at novice users who don't even know what an internet is. If you're a confident user then of course you will be able to turn this feature off. But please try to remember that firefox isn't aimed at advanced users like yourself, but instead at people who basically don't know what they're doing and often get themselves into trouble whilst browsing.


That was the most idiotic post of the day.


Are you the pot or the kettle?
#1.6 Cryton on 24 Sep 2007 - 00:57
Quote - (Daffy_Duck said @ #1.4)
That was the most idiotic post of the day.
This has always been Mozilla's approach to Firefox. Keep things simple by default, protect users from themselves by default, and let those advanced users 'in the know' fiddle with settings or extend Firefox using extensions. If you haven't figured this out yet, then I respectfully suggest that it is you who is the idiot. You should perhaps read the Firefox Guiding Principles, taking special note of "The goal of the Firefox project is to deliver the best possible browsing experience to the widest possible set of people". If you think advanced PC users outnumber the novices who just want to browse the web safely, then you're quite mistaken.
#1.7 +imis on 10 Jun 2008 - 22:17
(Cryton said @ #1.3)
(Glassed Silver said @ #1.1)
yea, i also hate too self-confident programs that think they are better administrators than i am...

Firefox is aimed at novice users who don't even know what an internet is. If you're a confident user then of course you will be able to turn this feature off. But please try to remember that firefox isn't aimed at advanced users like yourself, but instead at people who basically don't know what they're doing and often get themselves into trouble whilst browsing.

yes guru crow always drop his bread to fox.
(2 replies) #2 Co_Co on 21 Sep 2007 - 20:27
what about firefox running with low-privileges in a sandbox like IE7 on vista.
#2.1 JohnBfromMemphis on 21 Sep 2007 - 21:07
Quote - (Co_Co said @ #2)
what about firefox running with low-privileges in a sandbox like IE7 on vista.


I don't ever see MS handing any corporation the keys to it's own tech, not ever, not even with licensing terms attached.
#2.2 Gumboot on 21 Sep 2007 - 23:53
Quote - (JohnBfromMemphis said @ #2.1)
I don't ever see MS handing any corporation the keys to it's own tech, not ever, not even with licensing terms attached.

It's mostly a Vista platform feature, see the second half of this article: http://msdn2.microsoft.com/en-us/library/bb250462.aspx
(2 replies) #3 Tantawi on 21 Sep 2007 - 20:42
What about native 64bit version?
#3.1 Croquant on 22 Sep 2007 - 00:45
That's probably not going to become mainstream untill after Firefox 3.0 hits the RTM mark. There is a branch of Firefox 1.6 that's got native x64 builds, but I don't know how stable they are.
#3.2 Lant on 22 Sep 2007 - 08:53
You could always look at http://www.vector64.com/WindowsBuilds.html for x64 builds of release version.
(5 replies) #4 thertrain on 21 Sep 2007 - 21:09
I'm still waiting for a build of Firefox for OS X that doesn't feel like an afterthought. Firefox hardly ever locks up and crashes under windows but does so often in OS X.
#4.1 Dakkaroth on 21 Sep 2007 - 22:41
Meh, if I were you, I'd probably just stick with Safari as I wouldn't expect there to be many other browsers to be specifically designed for OSX considering it's market share.
#4.2 +M2Ys4U on 22 Sep 2007 - 02:20
Quote - (Dakkaroth said @ #4.1)
Meh, if I were you, I'd probably just stick with Safari as I wouldn't expect there to be many other browsers to be specifically designed for OSX considering it's market share.

Camino?
#4.3 Cidinho on 22 Sep 2007 - 11:19
Safari is also a good browser and yet it crashes a lot on Windows, something I don't believe to be truth in a Mac...
#4.4 +Smigit on 22 Sep 2007 - 12:20
Quote - (Cidinho said @ #4.3)
Safari is also a good browser and yet it crashes a lot on Windows, something I don't believe to be truth in a Mac...
Going by what I've heard the same can be said for iTunes. Haven't used either really since I haven't needed too. May install Safari someday to test my websites maybe but.
#4.5 RyanVM on 22 Sep 2007 - 14:25
Give GPa8 a try and see what you think of it. They've done a lot work to make it a more native OSX app.
(2 replies) #5 cork1958 on 22 Sep 2007 - 11:31
We'll get Firefox converted into a bloated piece of software (POS) yet!! Doesn't Spybot S&D (sdhelper) work with Firefox?
#5.1 lordpake on 22 Sep 2007 - 17:13
AFAIK sdhelper is IE extension.
#5.2 +Kushan on 23 Sep 2007 - 16:28
Quote - (cork1958 said @ #5)
We'll get Firefox converted into a bloated piece of software (POS) yet!! Doesn't Spybot S&D (sdhelper) work with Firefox?


So you're slating one program for getting bigger because instead you can have two programs to achieve the same thing?
Circular logic if I ever saw it.
#6 TinaD on 23 Sep 2007 - 23:01
Yeah well, Safari for Windows is still
in beta so there's going to be problems
with it. They haven't worked all the
bugs out yet.
#7 Magallanes on 24 Sep 2007 - 13:08
IMHO firefox must focuses in speed rather to add new features (today present in the way of plugins).

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)