Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Mozilla says a new Firefox security bug is under active attack

techcrunch.com

Post reply on HN
Print view View original

31–40 of 72 posts

Re: Mozilla says a new Firefox security bug is under active attack

#31

Post by bhauer »

wlesieutre wrote: post #20

Can anyone confirm if 73.0b3 includes the same fix? Their "what's new" link in the beta's About window doesn't track with the beta release cycle. There's no revision listed, so I think the notes are for 73.0b1 still? At any rate, there's no mention of any security fixes. https://www.mozilla.org/en-US/firefox/73.0beta/releasenotes/

I sure hope so since 73.0b3 is the most recent available version of Developer Edition. It's odd to not have any messaging about the non-mainstream editions.

Re: Mozilla says a new Firefox security bug is under active attack

#32

Post by [deleted] »

gruez wrote: post #24
earlINmeyerkeg wrote: post #19

Use noscript. It's possibly one of the best add-ons out there now.

Unfortunately there are too many sites that refuse to work without javascript, so any security benefits is negligible because it's very easy to be social engineered into enabling javascript.

[deleted]

Re: Mozilla says a new Firefox security bug is under active attack

#33

Post by wlesieutre »

wlesieutre wrote: post #20

Can anyone confirm if 73.0b3 includes the same fix? Their "what's new" link in the beta's About window doesn't track with the beta release cycle. There's no revision listed, so I think the notes are for 73.0b1 still? At any rate, there's no mention of any security fixes. https://www.mozilla.org/en-US/firefox/73.0beta/releasenotes/

I don't know my way around Firefox's source control at all, but I tried to do some digging. My first thought was to look through the changelogs on recent release tags, but there's no mention of the CVE that I can find in any of them.

I did find these changes in 72 which look related to the bug:

https://hg.mozilla.org/releases/mozilla-release/rev/8260da04...

And poking at one of those referenced files in the beta channel looks like it has the same changes:

https://hg.mozilla.org/releases/mozilla-beta/file/tip/js/src...

So I think we're good on beta channel?

Re: Mozilla says a new Firefox security bug is under active attack

#34

Post by neonIcon »

empath75 wrote: post #30
neonIcon wrote: post #28

Earlier quoted context omitted.

If it makes you feel any better, I've the same article on mine with no previous Flanders activity.

Yeah but they knew you were going to read this comment obviously.

Time travel confirmed.

Re: Mozilla says a new Firefox security bug is under active attack

#35

Post by DangerousPie »

neonIcon wrote: post #28
throwno wrote: post #25

Firefox is creepy AF. I was just listening to "Diamond Ned Flanders" by MadeinTYO on Apple Music, and when I open Firefox the "suggested article" on the front page is about Ned Flanders. That's some Facebook type shit right there. Uninstalled.

If it makes you feel any better, I've the same article on mine with no previous Flanders activity.

So it's probably just the Baader-Meinhof phenomenon: https://science.howstuffworks.com/life/inside-the-mind/human...

Re: Mozilla says a new Firefox security bug is under active attack

#36

Post by wlesieutre »

bhauer wrote: post #31
wlesieutre wrote: post #20

Can anyone confirm if 73.0b3 includes the same fix? Their "what's new" link in the beta's About window doesn't track with the beta release cycle. There's no revision listed, so I think the notes are for 73.0b1 still? At any rate, there's no mention of any security fixes. https://www.mozilla.org/en-US/firefox/73.0beta/releasenotes/

I sure hope so since 73.0b3 is the most recent available version of Developer Edition. It's odd to not have any messaging about the non-mainstream editions.

The 73.0b3 release tag is 18 hours ago, compared to that "What's new" page dated 1/7, so it does appear to be newer. See my reply to myself above; as far as I can tell the beta has the same changes (though I didn't manage to fumble my way to the specific commit that fixed it, or whatever the analogous term is for mercurial).

Their developer edition "What's new" page seems more about marketing upcoming changes before they land in the mainline release than anything else.

I'd like to assume they're always on top of getting the same fixes into developer versions at the same time, but since they don't actually tell us anywhere I always feel like I have to check.

Re: Mozilla says a new Firefox security bug is under active attack

#37

Post by eitland »

anoncake wrote: post #17
wtetzner wrote: post #12

Earlier quoted context omitted.

How would they know what it is if nobody explains it to them? It's not like the term is obvious.

Not knowing something is better than "knowing" something false.

Whats is false in this case?

Re: Mozilla says a new Firefox security bug is under active attack

#40

Post by ohyeshedid »

neonIcon wrote: post #34
empath75 wrote: post #30

Earlier quoted context omitted.

Yeah but they knew you were going to read this comment obviously.

Time travel confirmed.

Provided by Quantum Entanglement Advertising. You want it now because we sold it to you later.
Post reply on HN