I just ran across a very informative article at PC magazine about the security level of Firefox. While the Mozilla browser is still currently the better choice over IE, it may not be quite sound and secure as may people have been believing.
Here's a few excerpts:
Quote:
Is Firefox a more secure web browser than Microsoft's Internet Explorer? The answer may be yes, but the issues are more complicated than most people realize. In fact, Firefox has its share of security problems, and has probably been saved from real-world attack so far only by its single-digit market share.
This will change. According to the mozilla site, 25 million copies of Firefox have been downloaded in the last 100 days already. It now has 5% of the browser market, and it is predicted that it's market share will increase signicantly beyond that. Here's more:
Quote:
it's only recently that the Mozilla Organization began issuing security advisories of the sort that Microsoft issues every month (see
www.mozilla.org/security/announce). For the most part Mozilla wasn't hiding these bugs prior to publishing advisories, but it wasn't publicizing them either.
Quote:
you can get a better picture of security (and other) bugs in Firefox and other Mozilla projects at bugzilla.mozilla.org, the official bug database for Mozilla development. But even here the organization isn't totally open about security bugs; when new ones are reported, the entries in Bugzilla are generally made private for a time while they are investigated and fixed.
And unlike Microsoft, when Mozilla fixes a bug it doesn't release a patch for users. If you want to stick to release-level programs, your only option is to wait for the next general release; the upgrade to version 1.0.1 from 1.0 took about 3.5 months
So in other words, You don't see consistant security problem patches for Firefox as you do for IE because Mozilla doesn't issue patches. Any bugs and flaws in it's security remain until a new version is released, thus making it appear that FF has less problems.
Keeping flaws out of the public eye may be a good idea, as it may slow down the spreading of such info to hackers, but at the same time 3 1/2 months is a long time to leave a security flaw unpatched. More text...
Quote:
And there are security problems in version 1.0.1 already, even if there are no advisories for them yet. For instance, on a multiuser machine, such as a Linux system, if one user running as root starts Firefox, and another non-root user starts Firefox, that non-root user's instance of Firefox gains root privileges
Quote:
Finally, anti-spyware companies Webroot and Sunbelt Software have said that they expect Firefox-specific spyware to start showing up this year, and if the browser's market share continues to increase it's easy to see why it would. So don't forget to update, and don't rest on your Firefox laurels. You're not free of security problems, you just have different ones.
I will still have to use IE for many situations. For instance, Firefox gives me problems when I am viewing my Yahoo email and try to reply to a letter, stating that the reply page could not be opened due to some error.
I WILL still use firefox for now when surfing unknown websites I have not been to before, since it is still new enough that there should not be that many people exploiting any flaws within it.....yet.
I'm not trying to condemn Mozilla's product, so no need to defend it to me. I just thought everyone should be informed of this information (except for those who were already aware of this, of course). Consider it a public service announcement to those who were not in-the-know yet
The full article can be read via the following link:
http://www.pcmag.com/article2/0,1759,1775806,00.asp
.