I've often been accused of picking on Microsoft with regard to their security issues. Well to be sure, I am fairly technology agnostic. And so I wanted to be sure that my readers (especially those of you who are now using Firefox) were aware of a potential threat that has surfaced.
I read about the issue in an article called Bad News About Firefox where the author describes the threat
that can allow the URL displayed in the address bar and the SSL certificate to be spoofed, which means the browser and others are vulnerable to phishing attacks. The flaw affects all browsers built using the open-source Gecko browser kernel. And this time around, Internet Explorer is not vulnerable to the attack.
but more importantly, that there has been no patch issued yet. Hopefully a patch will be issued and we can get back to surfing safely online.
Firefox was patched 12 hours after the exploit was found. You can download the latet build off the nightly ftp builds.
Posted by: Bryan Peters | February 10, 2005 at 01:01 PM
That's awesome Bryan. Thanks for the update on that!
So readers, if you haven't patched, go get it and surf safely.
Posted by: mip | February 10, 2005 at 01:34 PM