Mozilla’s Big Doh!!
Firefox has single-handedly re-ignited the browser war, and much like an unknown presidental candidate, the open-source browser has largely received a pass from the press. (And, I might add, rightfully so. Let the development process happen.)
The free ride, though, is over. A number of news outlets, including the BBC, have noted that there are a series of critical flaws.
From the article:
The first flaw reported fools the browser into thinking software is being installed by a legitimate, or safe, website.The second flaw happens when the software installation trigger does not properly check icon web addresses which contain JavaScript code.
A hacker could potentially take advantage of the security flaws to secretly launch malicious code or programs.
One of the most amazing aspects of this story, though, is that so far, nobody has reported any major issues because of this (and the development community is already on top of the flaws). There’s a good chance that we don’t know about hacker acts because there is no central company to report these; however, the developer community is, by and large, far more open, and my guess is that if bad things were happening, it would be posted all over the Web.
If it’s true that there haven’t been any exploited attacks, and there is no evidence right now that there have been, it should go a long way towards quelling the FUD surrounding open-source projects.
Keep Reading
Most Popular
Large language models can do jaw-dropping things. But nobody knows exactly why.
And that's a problem. Figuring it out is one of the biggest scientific puzzles of our time and a crucial step towards controlling more powerful future models.
The problem with plug-in hybrids? Their drivers.
Plug-in hybrids are often sold as a transition to EVs, but new data from Europe shows we’re still underestimating the emissions they produce.
How scientists traced a mysterious covid case back to six toilets
When wastewater surveillance turns into a hunt for a single infected individual, the ethics get tricky.
Google DeepMind’s new generative model makes Super Mario–like games from scratch
Genie learns how to control games by watching hours and hours of video. It could help train next-gen robots too.
Stay connected
Get the latest updates from
MIT Technology Review
Discover special offers, top stories, upcoming events, and more.