 |
|
|
A recent study from Bit9 pointed out that Mozilla’s web browser is prone to various attacks more than any other browser. The study even noted that Firefox is a major threat to businesses, showing that it doesn’t have a large-network patching system. Bit9 also advocated that Firefox is so vulnerable that the browser it recommended to be deleted from enterprise working stations.
Companies which had been put on Bit9’s blacklist quickly reacted. Johnathan Nightingale from Human Shield, the security division from Mozilla, stated that even though such reports help users to cope better with security threats on the web, the study issued by Bit9 may have lacks in its “methodology” and that he has doubts about the conclusions being “meaningful.”
Nightingale also stated that disclosing all the security flaws that are detected is the only way to fix them. He said that Bit9’s study tends to encourage secrecy regarding to vulnerabilities that are detected, rather than to openness. More than that, he addressed the study’s blame that Firefox doesn’t include WSUS update environment by stating that the web browser includes a built-in update feature which works automatically and provides updating to 90% of the user within 6 days.
Several readers of DailyTech also agreed that Bit9’s study has flaws, stating that updates and bugfixes are nowhere as important as the measures the users themselves take to be secure.
Mozilla has recently released critical updates for the Firefox, Thunderbird and SeaMonkey. Furthermore, users are recommended to update the Firefox browser to version 3.0.5, which was released on Tuesday.
© 2007 - 2009 - eFluxMedia