Comments on: Browser Focus RIP

By: a064c4b89718

a064c4b89718 — Wed, 07 May 2008 20:42:34 +0000

a064c4b89718

a064c4b89718d00cfb93

By: pdp

pdp — Tue, 20 Feb 2007 21:09:05 +0000

not really

By: sigma

sigma — Tue, 20 Feb 2007 21:07:37 +0000

“kind of off-topic: ” (was removed from the upper comment because I used “great than” and “lower than” ^^ ) – tighten the filters eh pdp ? :)

By: sigma

sigma — Tue, 20 Feb 2007 20:06:30 +0000

: I would lower the opacity of the browser logos to make it more realistic :)

cheers!

By: John Dowdell

John Dowdell — Mon, 19 Feb 2007 15:27:53 +0000

There will be a public release soon, but it’s not here yet… http://www.adobe.com/go/apollo will redirect to the best page for latest info.

tx, jd/adobe

By: pdp

pdp — Mon, 19 Feb 2007 14:15:44 +0000

Thanks John. Is it possible to have a copy of the Apollo engine? I might be able to spot some problems that can be fixed before the actual release. I am a bit busy right now, but it will be interesting if we can do that.

By: John Dowdell

John Dowdell — Mon, 19 Feb 2007 06:47:41 +0000

Thanks for the catch… “don’t type lots on strange sites”, I guess that’s the takeaway…. :(

I don’t know about Apollo… it’s still in development. It will use the WebKit rendering engine, as Apple’s Safari does, but I don’t know the local file permissions system myself yet. A public release is still a bit aways, but such focus transfers would be a good thing to doublecheck, thanks.

jd/adobe

By: AC

AC — Fri, 16 Feb 2007 05:25:27 +0000

Oh god Andrew, if you want to critisize software, at least use a source from a non-zealot then. This guy tries too hard to be one.

By: pdp

pdp — Wed, 14 Feb 2007 12:29:30 +0000

OK folks, I cannot reproduce the bug in Opera, although sometimes I get the feeling that it is possible. It seams that Opera is in fact the most secure browser, or maybe I am wrong.

Anyway, I will continue experimenting with my code and if I find anything interesting, I will post it here. Thanks.

By: Sebastian

Sebastian — Wed, 14 Feb 2007 09:00:57 +0000

There are only very few websites that _require_ JavaScript, so I have disabled JavaScript by default. Most serious browser vulnerabilities were, are and will be based on active contents like JavaScript, JScript, Java, ActiveX, Flash etc.

By: Andrew

Andrew — Tue, 13 Feb 2007 21:59:57 +0000

Firefox has many more security vulnerabilities:

http://www.FirefoxMyths.com

By: Mephisto

Mephisto — Tue, 13 Feb 2007 18:00:40 +0000

This is not good! This is the 2nd browser vulnerability in the last month that has allowed local file access. Well, actually the 3rd if you count the FireFox popup blocker issue as well.

By: pdp

pdp — Tue, 13 Feb 2007 10:09:50 +0000

I am experimenting with Opera. It seams to be vulnerable too, although I don’t have a working exploit right now.

By: Luca

Luca — Tue, 13 Feb 2007 09:00:45 +0000

The latest Firefox released to the public is 2.0.0.1 and it’s vulnerable. So the flaw is still unpatched!

By: Paul Rawdon

Paul Rawdon — Tue, 13 Feb 2007 07:56:19 +0000

Re your vulnerabilities for Fire Fox and Internet Explorer 7. Have just tried the test with Internet Explorer 6 and Sea Monkey 1.0.7 (the replacement for Mozilla) and the same applies for these two as well. Fire-Fox’s replacement Minefield appears to be immune to this problem.

By: Ben Bucksch

Ben Bucksch — Tue, 13 Feb 2007 00:42:37 +0000

Mozillaâ€™s Bugzilla back then and still, none has fixed it.

Not correct. As mentioned in https://bugzilla.mozilla.org/show_bug.cgi?id=370092 and on FD, the big was fixed on Firefox trunk, before these reports. It’s not yet on the Firefox 2 branch.