warpmedia wrote:
This is nice and all that but even with IE's ass hanging out *I* was less at risk using it during these periods because I had problem features turned off by default and only on for small list of sites.

Conversely I am relying on FF's internal sense of whwen to disable features combined with the hope those features are not exploitable, and have been hit twice through java plugin calls that IE blocks with my restricted setup. It would take a previously trusted site with java enabled to do the same damage in IE as what FF let through on any random site.

All it takes if for FF to be the more popular browser and exploits will start coming real time like the do for IE. To FF defense, as long as the release patches/updates come before damage is done, all will be well I guess. Still would feel safer if I could find a plugin to do per-site settings for java, js, plugins. etc... with memory. If it's there, I'm not seeing it.

I have 1.04 loaded and am giving it a chance as I have with the previous versions.

Yeah, that is my take on it as well. IE gave me a granular choice... Firefox did not. The vulnerabilities listed... most of them would not work at all if you ran as a normal user and had a secure setup like warpmedia and I did.


Firefox is great stuff, it is just their general game plan is inherently just as flawed as Microsoft's (alleged our supported plugins are 'safe', yours are not). That is the wrong game plan because over time, people will just break through those doors anyway. The right idea is granular controls, not disabling features.



--

- Carroll Kong

Reply via email to