It looks like if you are running OpenBSD you probably want to be on -current or using the esr package. https://undeadly.org/cgi?action=article;sid=20200109141600
Mozilla says a new Firefox security bug is under active attack
51–60 of 72 posts
Re: Mozilla says a new Firefox security bug is under active attack
#52> The vulnerability, found by Chinese security company Qihoo 360...
Isn't this the same company that was just being roasted for having spyware installed in Samsung phones?
Re: Mozilla says a new Firefox security bug is under active attack
#53Can anyone confirm if 73.0b3 includes the same fix? Their "what's new" link in the beta's About window doesn't track with the beta release cycle. There's no revision listed, so I think the notes are for 73.0b1 still? At any rate, there's no mention of any security fixes. https://www.mozilla.org/en-US/firefox/73.0beta/releasenotes/
Looks like they've been updated now to mention that the fix was included in beta 2. I guess they're reading this thread :)
Re: Mozilla says a new Firefox security bug is under active attack
#54I'm amazed this is allowed on hacker news. Anytime I've said anything remotely critical of Firefox it has been flagged and removed from here.
So true. I saw this vulnerability was posted a day ago, and immediately flagged.
It had a significant discussion: https://news.ycombinator.com/item?id=21995055. Perhaps reposts were being flagged as dupes.
Re: Mozilla says a new Firefox security bug is under active attack
#55Firefox is creepy AF. I was just listening to "Diamond Ned Flanders" by MadeinTYO on Apple Music, and when I open Firefox the "suggested article" on the front page is about Ned Flanders. That's some Facebook type shit right there. Uninstalled.
Could you please stop posting unsubstantive and/or flamebait comments to HN? We've already had to ask you this, and you've been doing it a lot.
Also, while I have you, please stop using HN for ideological battle—you've been doing a lot of that as well, and it destroys what this site is for (https://news.ycombinator.com/newsguidelines.html), regardless of which ideology you favor or disfavor.
Also, can you please not systematically delete comments? Deletion is for things that shouldn't have been posted in the first place. Deleting more than half of what you post is not an intended use of the threads.
Re: Mozilla says a new Firefox security bug is under active attack
#56> The vulnerability, found by Chinese security company Qihoo 360... Isn't this the same company that was just being roasted for having spyware installed in Samsung phones?
Just because they ship spyware doesn't mean they want other people spying on their customers or setting up botnets...
Alternately, who knows whether they found this exploit a while back and only went public once they discovered someone else was using it?
Re: Mozilla says a new Firefox security bug is under active attack
#57A warning and a fix within two days of releasing the affected version. I appreciate this team’s transparency and priorities.
Well, it also affected 68 ESR which was released in July, so detection wasn't that fast.
And it likely existed many years before that but these were the only 2 active versions to get a patch.
Re: Mozilla says a new Firefox security bug is under active attack
#58> The vulnerability, found by Chinese security company Qihoo 360... Isn't this the same company that was just being roasted for having spyware installed in Samsung phones?
Just because they ship spyware doesn't mean they want other people spying on their customers or setting up botnets... Alternately, who knows whether they found this exploit a while back and only went public once they discovered someone else was using it?
Or they sat on it and released it to distract from the bad press they got. Everything is possible.
Re: Mozilla says a new Firefox security bug is under active attack
#59Use noscript. It's possibly one of the best add-ons out there now.
Not sure if this has changed but I ditched noscript when I discovered it doesn't block inline script execution. These days I use Ublock Origin:
Settings -> check 'I am an advanced user'. You should now be able to block 1st party, third party and inline JS from executing and save on a per-site basis. Hope this helps someone!
Re: Mozilla says a new Firefox security bug is under active attack
#60Firefox is creepy AF. I was just listening to "Diamond Ned Flanders" by MadeinTYO on Apple Music, and when I open Firefox the "suggested article" on the front page is about Ned Flanders. That's some Facebook type shit right there. Uninstalled.
Could you please stop posting unsubstantive and/or flamebait comments to HN? We've already had to ask you this, and you've been doing it a lot. Also, while I have you, please stop using HN for ideological battle—you've been doing a lot of that as well, and it destroys what this site is for ( https://news.ycombinator.com/newsguidelines.html ), regardless of which ideology you favor or disfavor. Also, can you please no…
Oh, I didn't see it, maybe it was flagged.