<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
On 07/01/2011 10:07 PM, ANDY wrote:
<blockquote
cite="mid:CAGEjSx_EP5+ZAAbmA_iCiBCRc364i6q_k7s1fLVTvZ_4u19hgg@mail.gmail.com"
type="cite">On Fri, Jul 1, 2011 at 9:48 PM, Ric Moore <span
dir="ltr"><<a moz-do-not-send="true"
href="mailto:wayward4now@gmail.com">wayward4now@gmail.com</a>></span>
wrote:<br>
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt
0.8ex; border-left: 1px solid rgb(204, 204, 204);
padding-left: 1ex;">
<div>
<div class="h5"><br>
</div>
</div>
I think what will work better, is by using the<br>
major addons. If you use something obscure, then there may be
problems.<br>
</blockquote>
</div>
<br>
I have ~40 extensions. ~10 of those were disabled by Firefox 5
and half of those I use very regularly.<br>
<br>
If I'm going to lose a quarter of my extensions every other month,
how exactly is Mozilla's rapid release innovation helping my
productivity as a user?<br>
</blockquote>
<font size="+1"><font face="Console">As disruptive as that is, you
must know there is a MUCH<br>
bigger problem with ALL browsers.<br>
It is a wide open and gaping security hole that gives<br>
any website total access to everything on the system that<br>
the logged-in user does. It is the Javascript.<br>
<br>
If anyone believes in the myth that Java and Javascript<br>
play in a restricted sandbox - time to wake up and smell<br>
the stench of this rat.<br>
Let me explain:<br>
I have a Uverse router.<br>
When you aim your browser at the Uverse router,<br>
and click on the Home tab, then<br>
all the connected systems are displayed, and next<br>
to each system is a hyperlink named "Access Files".<br>
Since most browsers must run with Javascript<br>
enabled, else most sites lose much of their functionality,<br>
the Access Files link sends a Javascript to your browser,<br>
which is happily executed by your browser, and lo and<br>
behold - you can see the / directory and everything in it.<br>
All with the help of the java script sent by the router.<br>
What do yo think some websites can and will do with<br>
a power like that? They will steal as many of your files<br>
as they can!<br>
<br>
Are people going to wake up and shut down Javascript<br>
and ban it from their systems? Heck no! It<br>
has become way too ubiquitous.<br>
It is in fact the trojan horse hiding in plain site!<br>
Tell THAT to the FireFox developers, and they will<br>
scoff it off. Because YOUR security is not really<br>
their interest. And rightly so!<br>
It should be YOUR interest and responsibility.<br>
Install the Noscript Firefox Add-on. IT IS AN ABSOLUTE<br>
NECESSITY if you do not want a website to steal your<br>
files.<br>
<br>
<br>
<br>
</font></font>
</body>
</html>