Monday, October 02, 2006

Zero-day flaw in Firefox

I've been recommending the use of Firefox for at least a year now, because of the reduced likelihood of encountering a security vulnerability, as well as the better interface and the ability to use add-ons. Now it looks like Firefox's advantage may have been "security through obscurity." As it gains market share on IE, it becomes more of a target for hackers and vulnerability researchers.

While that's not a bad thing, because I firmly believe that the open model of Firefox will ultimately lead to a more secure product, it serves to illustrate that flaws exist in every application.

Here's the link to the story: Hackers claim zero-day flaw in Firefox.

On another note, since this is a javascript-related flaw, there's a great extension for Firefox that is very effective at blocking malicious javascript. It's called NoScript, and it allows you to whitelist any sites you want to run javascript, while blocking any others. It's one of the extensions I always load in a new installation of Firefox.

0 Comments:

Post a Comment

<< Home