A View from Brad King

Mozilla's Big Doh!!

Firefox has single-handedly re-ignited the browser war, and much like an unknown presidental candidate, the open-source browser has largely received a pass from the press. (And, I might add, rightfully so. Let the development process happen.) The free ride, though,…

  • May 10, 2005

Firefox has single-handedly re-ignited the browser war, and much like an unknown presidental candidate, the open-source browser has largely received a pass from the press. (And, I might add, rightfully so. Let the development process happen.)

The free ride, though, is over. A number of news outlets, including the BBC, have noted that there are a series of critical flaws.

From the article:

The first flaw reported fools the browser into thinking software is being installed by a legitimate, or safe, website.

The second flaw happens when the software installation trigger does not properly check icon web addresses which contain JavaScript code.

A hacker could potentially take advantage of the security flaws to secretly launch malicious code or programs.

One of the most amazing aspects of this story, though, is that so far, nobody has reported any major issues because of this (and the development community is already on top of the flaws). There’s a good chance that we don’t know about hacker acts because there is no central company to report these; however, the developer community is, by and large, far more open, and my guess is that if bad things were happening, it would be posted all over the Web.

If it’s true that there haven’t been any exploited attacks, and there is no evidence right now that there have been, it should go a long way towards quelling the FUD surrounding open-source projects.

Tech Obsessive?
Become an Insider to get the story behind the story — and before anyone else.

Subscribe today

Uh oh–you've read all of your free articles for this month.

Insider Premium
$179.95/yr US PRICE

Want more award-winning journalism? Subscribe to Insider Premium.
  • Insider Premium {! insider.prices.premium !}*

    {! insider.display.menuOptionsLabel !}

    Our award winning magazine, unlimited access to our story archive, special discounts to MIT Technology Review Events, and exclusive content.

    See details+

    What's Included

    Bimonthly magazine delivery and unlimited 24/7 access to MIT Technology Review’s website

    The Download: our daily newsletter of what's important in technology and innovation

    Access to the magazine PDF archive—thousands of articles going back to 1899 at your fingertips

    Special discounts to select partner offerings

    Discount to MIT Technology Review events

    Ad-free web experience

    First Look: exclusive early access to important stories, before they’re available to anyone else

    Insider Conversations: listen in on in-depth calls between our editors and today’s thought leaders

/
You've read all of your free articles this month. This is your last free article this month. You've read of free articles this month. or  for unlimited online access.