Hello,

We noticed you're browsing in private or incognito mode.

To continue reading this article, please exit incognito mode or log in.

Not an Insider? Subscribe now for unlimited access to online articles.

A View from Brad King

Mozilla's Big Doh!!

Firefox has single-handedly re-ignited the browser war, and much like an unknown presidental candidate, the open-source browser has largely received a pass from the press. (And, I might add, rightfully so. Let the development process happen.) The free ride, though,…

  • May 10, 2005

Firefox has single-handedly re-ignited the browser war, and much like an unknown presidental candidate, the open-source browser has largely received a pass from the press. (And, I might add, rightfully so. Let the development process happen.)

The free ride, though, is over. A number of news outlets, including the BBC, have noted that there are a series of critical flaws.

From the article:

The first flaw reported fools the browser into thinking software is being installed by a legitimate, or safe, website.

The second flaw happens when the software installation trigger does not properly check icon web addresses which contain JavaScript code.

A hacker could potentially take advantage of the security flaws to secretly launch malicious code or programs.

One of the most amazing aspects of this story, though, is that so far, nobody has reported any major issues because of this (and the development community is already on top of the flaws). There’s a good chance that we don’t know about hacker acts because there is no central company to report these; however, the developer community is, by and large, far more open, and my guess is that if bad things were happening, it would be posted all over the Web.

If it’s true that there haven’t been any exploited attacks, and there is no evidence right now that there have been, it should go a long way towards quelling the FUD surrounding open-source projects.

Become an MIT Technology Review Insider for in-depth analysis and unparalleled perspective.

Subscribe today
Want more award-winning journalism? Subscribe and become an Insider.
  • Insider Plus {! insider.prices.plus !}* Best Value

    {! insider.display.menuOptionsLabel !}

    Everything included in Insider Basic, plus the digital magazine, extensive archive, ad-free web experience, and discounts to partner offerings and MIT Technology Review events.

    See details+

    Print + Digital Magazine (6 bi-monthly issues)

    Unlimited online access including all articles, multimedia, and more

    The Download newsletter with top tech stories delivered daily to your inbox

    Technology Review PDF magazine archive, including articles, images, and covers dating back to 1899

    10% Discount to MIT Technology Review events and MIT Press

    Ad-free website experience

  • Insider Basic {! insider.prices.basic !}*

    {! insider.display.menuOptionsLabel !}

    Six issues of our award winning print magazine, unlimited online access plus The Download with the top tech stories delivered daily to your inbox.

    See details+

    Print Magazine (6 bi-monthly issues)

    Unlimited online access including all articles, multimedia, and more

    The Download newsletter with top tech stories delivered daily to your inbox

  • Insider Online Only {! insider.prices.online !}*

    {! insider.display.menuOptionsLabel !}

    Unlimited online access including articles and video, plus The Download with the top tech stories delivered daily to your inbox.

    See details+

    Unlimited online access including all articles, multimedia, and more

    The Download newsletter with top tech stories delivered daily to your inbox

/3
You've read of three free articles this month. for unlimited online access. You've read of three free articles this month. for unlimited online access. This is your last free article this month. for unlimited online access. You've read all your free articles this month. for unlimited online access. You've read of three free articles this month. for more, or for unlimited online access. for two more free articles, or for unlimited online access.