Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

Nine Reasons To Skip Firefox 2.0

Posted by kdawson on Sun Oct 29, 2006 02:04 AM
from the rough-around-the-edges dept.
grandgator writes, "Hyped by a good deal of fanfare, outfitted with some new features, and now available for download, Firefox 2.0 has already passed 2 million downloads in less than 24 hours. However, a growing number of users are reporting bugs, widening memory leaks, unexpected instability, poor compatibility, and an overall experience that is inferior to that offered by prior versions of the browser. Expanding on these ideas, this list compiles nine reasons why it might be a good idea to stick with 1.5 until the debut of 3.0, skipping the "poorly badged" 2.0 release completely." OK, maybe it's 10 reasons. An anonymous reader writes, "SecurityFocus reports an unpatched highly critical vulnerability in Firefox 2.0. This defect has been known since June 2006 but no patch has yet been made available. The developers claimed to have fixed the problem in 1.5.0.5 according to Secunia, but the problem still exists in 2.0 according to SecurityFocus (and I have witnessed the crash personally). If security is the main reason users should switch to Firefox, how do we explain known vulnerabilities remaining unpatched across major releases?"
Update: 10/30 12:57 GMT by KD : Jesse Ruderman wrote in with this correction. "The article claims that Firefox 2 shipped with a known security hole This is incorrect; the hole is fixed in both Firefox 1.5.0.7 and Firefox 2. The source of the confusion is that the original version of this report demonstrated two crash bugs, one of which was a security hole and the other of which was just a too-much-recursion crash. The security hole has been fixed but we're still trying to figure out the best way to fix the too-much-recursion crash. The report has been updated to clear up the confusion."
+ -
story

Related Stories

[+] Firefox 2 Downloads Top 2 million in 24 Hours 295 comments
linuxci writes "Firefox 2.0 has had over two million downloads in 24 hours with a peak rate of over 30 downloads a second. This means Firefox is well on track to beat IE7's three million in four days. Of course stats don't equal users but it's interesting to see that the demand for Firefox is currently outstripping IE."
[+] Another Denial of Service Bug Found in Firefox 2 206 comments
An anonymous reader writes "A second security flaw that could cause the new Firefox 2 browser to crash has been publicly disclosed. The vulnerability lies in the way the open-source browser handles JavaScript code. Viewing a rigged Web page will cause the browser to exit, a representative for Mozilla, the publisher of the software, said Wednesday. Contrary to claims on security mailing lists, the bug cannot be exploited to run arbitrary code on a PC running Firefox 2, the representative said. This flaw in the JavaScript Range object is different than the denial-of-service vulnerability in Firefox 2 that was confirmed by Mozilla last week. That bug is related to a more serious security hole, which was fixed in earlier versions of Firefox, the organization has said. The two 'crashers' are the only publicly released vulnerabilities that have been confirmed by Mozilla in the week since Firefox 2 was launched. The issues are only minor, the organization has said."
This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • A pity as Firefox 2.0 just crashed on me. I was wondering what the hell was going on and I just refreshed slashdot to see this very story.
    :(
    I still trust it more than IE of course, but do wish as we get newer versions that the stability does continue to improve.
    I'm sure they can do it and I still have faith.
    • Re: (Score:3, Informative)

      I find Firefox a huge resource hog on my P4, taking away ever increasing amounts of memory in what are probably leaks.

      I use Mozilla and am very happy with it.
    • Re:Sad Co-incidence (Score:5, Informative)

      by dvice_null (981029) on Sunday October 29 2006, @02:56AM (#16629718)
      This might help if you have crashes:
      http://kb.mozillazine.org/Firefox_crashes [mozillazine.org]
    • by dvice_null (981029) on Sunday October 29 2006, @04:23AM (#16630102)
      If people have problems, they are more likely to speak it up, than those who don't have problems. Just to make things a little more equal, I for one have had no problems with Firefox 2.0.
    • Well, there are more options than Internet Explorer or Firefox. Opera [opera.com] for instance. I myself hate the fact that if you specify firefox to always open links in a new tab, and not a new instance, it still now and then opens up a new browserwindow.
      Amaya [w3.org] is a browser made by the w3consortium. I haven't tried it yet, but a browser made by them, well I'd expect it to adhere all the standards :)
      You've also still got Netscape but that browser hasn't been a serious competitor for a while now'but it's still availab
  • by d_jedi (773213) on Sunday October 29 2006, @02:08AM (#16629482)
    It's not always the most glamorous part of coding an app, but it needs to be done.
    Personally, I haven't upgraded (and I won't until everything - esp. my extensions - "just work").. and reports like this suggest that this may be the prudent action.
      • by d_jedi (773213) on Sunday October 29 2006, @02:25AM (#16629580)
        For me, when it comes to extensions, one (incompatibility) is too many. Each of the ~14 I have serves a purpose - and I'd rather not go without the functionality provided. (With extensions like ad-block being one of the main reasons I switched to FF in the first place, and why I doubt I'll move back over to IE7).
        • by joto (134244) on Sunday October 29 2006, @04:17AM (#16630078)
          Maybe it's because you aren't surfing. If you actually use firefox, instead of simply letting it remain minimized at about:blank for a month, it will quickly use ridiculous amounts of memory. Here it's at 305MB and counting... Oops, just checked, it's now 306MB. And I haven't really done anything apart from writing this in the meantime.
  • The 9 Reasons (Score:4, Informative)

    by Anonymous Coward on Sunday October 29 2006, @02:08AM (#16629484)
    1) The new theme is too bulky, inconsistent on different platforms, and inferior to the highly refined and very user friendly theme of 1.5 (this is despite late efforts by Mozilla to spruce up the icon set and improve consistency)

    2) Antiphishing technology is both weak (blacklist based) and a potential privacy problem. The privacy issues are raised because Firefox 2.0 Antiphishing Features employ an engine previously released by Google, which has been shown to potentially cause privacy risks.

    3) The new Options dialog box is confusing, poorly designed, and illogically hides important features

    4) There are many reported compatibility issues with the large existing libraries of extensions, themes, and plugins currently avaialble for earlier versions of Firefox. While this can, to some degree, be expected, the loss of this huge user contributed extension base is a non-trivial problem with Firefox 2.0, and could be a deal breaker for some people all by itself

    5) The well known memory leak issue, which causes the Firefox browser to consume ever increasing amounts of RAM, eventually leading to sluggish performance and crashes, has been carried over into yet another generation. This is despite an enormous amount of public commentary and user requests for resolution prior to release of a new version of Firefox

    6) There are reported problems with the CSS engine in Firefox 2.0, affecting various websites, and making certain features unavailable to surfers. Notable among these is a continued problem with certain aspects of Yahoo! mail

    7) Reports indicate that episodes of random freezing during use are worse with the 2.0 version, though a cause has not yet been isolated

    8) Numerous users have reported that the History bar is buggy, and that in some instances - for unknown reasons - will not display recent items when the history menu is opened as a side panel

    9) RSS feed handling has taken a step backwards, and is inferior to that of IE7.
    • Re:The 9 Reasons (Score:4, Insightful)

      by SnprBoB86 (576143) on Sunday October 29 2006, @02:15AM (#16629516) Homepage
      Re: #4

      The backwards compatability woes indicate that, much like Windows, Firefox will slow to evolve because it is a victim of it's own success.
    • Re: (Score:3, Insightful)

      Thanks, anonymous coward, for turning the bulleted list into a numbered list. It helps to be able to reference numbers when replying.
    • by master_p (608214) on Sunday October 29 2006, @06:36AM (#16630804)

      The well known memory leak issue, which causes the Firefox browser to consume ever increasing amounts of RAM, eventually leading to sluggish performance and crashes, has been carried over into yet another generation. This is despite an enormous amount of public commentary and user requests for resolution prior to release of a new version of Firefox

      For how long major applications like Firefox will have memory leaks? can we please stop using C altogether and use a decent garbage-collected language like D [digitalmars.com] (there are other languages around, but D is as close to C as possible)...

    • Re:The 9 Reasons (Score:5, Insightful)

      by code65536 (302481) on Sunday October 29 2006, @09:04AM (#16631620) Homepage Journal
      1) Theme: matter of personal opinion

      2) Anti-phishing: better than nothing; BTW, it's the same anti-phishing technology used in the Google Toolbar

      3) FF2 options dialog is a lot like FF1.5's options dialog. Not much change.

      4) The extension authors tend to be slow to update. The whole point of Beta1/2 and RC1/2/3 was to give developers, especially extension developers, ample time to update their extensions. If they don't make use of that time, it's their fault for not supporting their users. But on that note, very little changed API-wise between FF1.5 and FF2, so much extension updates involve nothing more than bumping the "maxVersion" string. If that's the case, you can disable extension compatibility checking in about:config and force 1.5 extensions to be accepted in 2.0. That's what I do, and I encounter no problems.

      5) Show me a piece of software with no memory leak issues.
      5a) FACT: IE7 uses *MORE* memory for the same number of tabs and sites.
      5b) FACT: FF2 is MUCH better than FF1.5 in the memory leak department.
      5c) FACT: Many of the memory leaks are actually caused by extensions. And there are a LOT of poorly-written leaking extensions out there (in fact, switching from the SessionSaver extension to the built-in session saver in FF2 brought about a very noticeable change).
      5d) People forget that webpages these days require lots of memory now that people are using more an more images. And remember that when an image is displayed, it is decompressed into a raw format in memory (since compressed formats like JPEG and PNG are for storage and transport only) and people forget about that effect on memory.

      6) It's better than 1.5's CSS engine. It's certainly not a perfect engine, but it's a hell of a lot better than IE7 (now if some sites decide to make use of incorrect behavior in IE7's CSS engine, that's their problem for not following W3C specs).

      7) I can't speak for other others, but I have not encountered this. And I have been using Firefox 2 for well over a month, ever since RC1 was spun in mid-late September. Keep in mind that most of the bugs that people report with Firefox are actually the result of crappily-developed extensions.

      8) No comment.

      9) How could it possibly be a step backwards. 1.5 showed RSS feeds as raw XML. I'm sorry, but I fail to see how a pretty display of RSS feeds is worse than a XML parse tree. 1.5 also didn't give people much options on what to do with them: only live bookmarks were available. 2.0 now lets you pick an aggregator of your choice. Explain to me how this is worse?
      • Re:The 9 Reasons (Score:4, Insightful)

        by PlusFiveTroll (754249) on Sunday October 29 2006, @02:49AM (#16629678) Homepage
        I'm agreeing with you here... and going on with some rants of my own.

        What I don't get is ever time a new version of FF comes out, you get people bitching that there extensions are not compatible. The extension compatibility issues have nothing to do with the Firefox developers, its the extension developers that have not timely released there code, bitch at them.

        Bad analogy time.

        You own a 1995 Ford car that you've installed custom bucket seats in. You purchase a 2006 Ford of the same model. The passenger compartment has been redesigned in the mean time, and your custom seats will not fit in the new car. In this case do you think that bitching at Ford is going to do a damn bit of good? Get new seats. If no one makes seats that fit the model yet, you'll have to wait or make your own.
          • Re:The 9 Reasons (Score:4, Insightful)

            by camcorder (759720) on Sunday October 29 2006, @04:37AM (#16630180)
            FX extensions are backward compatible, its just that you state upper limit for firefox version on your extension and that's why they look incompatible. What do you expect, firefox to lie about its version number? If you want that you can do it by yourself via changing 'extensions.lastAppVersion' in about:config. Or wait for your extension developer to release new version of extension (Add-in for now on) testing it with new firefox version and changing upper limit for lastAppVersion. If firefox was not backward compatible for extensions at all, you won't see that quick updates for extensions right after firefox 2.0 get released.
      • Re:The 9 Reasons (Score:5, Insightful)

        by Antiocheian (859870) on Sunday October 29 2006, @03:04AM (#16629742) Journal
        1). The theme: so he doesn't like the theme. That's why themes were invented for, go grab one which you like. Crap.

        No, it's not crap. This will be an important reason for many people to avoid 2.0

        Yes, there are themes and I immediately installed one of them after I set up Firefox. But you can't ask this from the user base Firefox is aiming at.

        3). Confusing Options dialog: hell, have you ever really gone through IE's Tools->Internet options ? Thought so. Anyway, it's really hard to spot well designed dialogs these days. Not a reason for not using the browser. Crap.

        It seems you agree on his point and yet call it crap. The options dialog DOES suck. And yes, it's really easy to spot well designed option dialogs, take a look at Microsoft Office.

        4). Compatible extensions: man, people need some time for updating their extensions, but they are quick, e.g. all my extensions have been upgraded in a few days. But, if you're willing, in most cases you can fix them on your own.

        The cited article is about reasons for NOT upgrading from the good and working 1.5.x. Indeed my most needed extension is not working with 2.0 yet. His objection is solid, yours lacks in more aspects than style.

        7). Freezes: yes, they occur. But hello, restore session. I don't say it's no problem, I'm saying it's no reason not to switch.

        So you say that it's ok to upgrade to a buggy new version. I really don't think you are entitled to an opinion on Slashdot.
      • Re: (Score:3, Insightful)

        Heh, I love the way you dismiss #1 as not being a reason to not use FF, then dismiss #6 as you don't personally use Yahoo! mail.

        You also seem to misunderstand #2 - the complaint will be that a weak security measure may well be worse than none at all, as users may come to rely on what is in fact insufficient protection. Imagine a situation in which the filter catches say 70% of malicious sites. If people come to rely on it ("Hey, FF doesn't say this site is bad, so it must be good!") they'll be in more dange
        • Re:The 9 Reasons (Score:5, Informative)

          by jesser (77961) on Sunday October 29 2006, @03:40AM (#16629910) Homepage Journal
          Sure, there's restore session, great. Does it restore the text of the email/post/whatever that I was typing? No, of course not.

          Actually, it does.
          • Re: (Score:3, Interesting)

            Hhhmmmm, actually it does try to, doesn't it? However, in a small handful of unscientific tests (typing stuff into this textarea then killing the process) it only managed to successfully restore what I typed 1; the other couple of times it was either what was there previously, or something completely different.

            So, it may well restore the bulk of a long-ish message, which is certainly better than nothing. I'm not sure I'd want to rely on it, but then so far I've not had any stability issues, so for me it's a
          • Re:The 9 Reasons (Score:5, Interesting)

            by Pecisk (688001) on Sunday October 29 2006, @04:34AM (#16630166)
            I have to second that. I was very surprised that Firefox 2 restores ALL session - I mean, not only cookies, urls, and that stuff, but WHOLE state. Where you have been logged in, there you are.

            For lot of advanced users it is a must. It is whole reason to use FF 2, nevermind other new features.

            And yes, FF 2 has bugs. But in contrary of IE, I have NO doubts that sooner or later they will be fixed.
      • Re:The 9 Reasons (Score:5, Insightful)

        by xoyoyo (949672) on Sunday October 29 2006, @03:30AM (#16629868)
        >> 2). Weak antiphishing: there was none before, now he's complaining it's weak. Get lost.

        Weak antiphishing is worse than no antiphishing. If a user gets used to seeing antiphishing messages pop up every time they do something stupid, then when one doesn't appear they're going to assume everything is okay.

        This might be acceptable if you were talking about a tiny percentage of transactions, but Firefox can't guarantee that.

        The Firefox phishing protection is host based, which means that someone has to submit a site and then it has to be verified before being added to a database. Worse, connection to the live blacklist is optional, so you may be browsing with an antique blacklist.

        All that will happen is that the scammers will spread their phishing sites more widely: there are hordes of compromised PCs out there, you can't track them all.

        A heuristic approach would be better: at the moment all the phishing mail I get seems to use a hole in php. Better surely to have mandatorily updated list of rules in the antiphishing engine:

        Alert if apparent domain in #text of tag does not match href attribute
        Alert if URL contains a space
        Alert if URL is IP address with no dots

        &c&c
      • Re:The 9 Reasons (Score:4, Interesting)

        by Onan (25162) on Sunday October 29 2006, @03:54AM (#16629964)

        Memory leak: I often run Firefoxes for a whole week long. Yes, you read that correctly. I often just leave important links open when I leave work, then I login back from home and continue useing it, then again tomorrow from work, and so on. After a week it often eats up around half a gigs of memory, true. But really, how many of you do such things?

        The only thing impressive about this statement is exactly how far your standards have been lowered. You actually feel that it is incredible or unusual to be able to leave an application running for a week?

        When I've been using javascript-heavy sites (eg, google stuff), safari gets a little slow after it's been running for about a month. And I consider that a failing on its part, not something to brag about. The fact that firefox runs for a whole shiny week for you should be a point of shame, not pride.

          • Re: (Score:3, Informative)

            Firefox on the other hand, on OS X, NEVER crashes. It's a most well behaved application.

            For you. It's my most problematic. Grabs 100% of the processor for no reason at random times and needs to be force-killed, leaks memory at times, still has connections open when no windows open and it's running in the dock.
      • 5). Memory leak: I often run Firefoxes for a whole week long. Yes, you read that correctly. I often just leave important links open when I leave work, then I login back from home and continue useing it, then again tomorrow from work, and so on. After a week it often eats up around half a gigs of memory, true. But really, how many of you do such things ?

        Sorry, I'm gonna rant now ...

        What, a whole week? My computer (running Ubuntu 6.06LTS) is up all the time. Basically it goes down when there's a pow

        • by Darren Winsper (136155) on Sunday October 29 2006, @06:51AM (#16630894) Homepage
          "Or is it a misguided attempt to "cache" stuff in memory, which is about the stupidist thing you can do given that today memory is very slow versus processors, so usually it's faster just to recompute what you need when it's needed."
          Don't be retarded. Parsing HTML into a DOM, parsing CSS and applying that to the DOM, then actually computing all of the page's layout takes considerably longer than just pulling a pre-computed DOM out of memory. Caching pre-computed values in memory is hardly a rare thing, most software does it in one way or another.
          • I must pick you up on one thing. A smart pointer is a good thing - and about the best compromise you can get if you pass pointers around and can't reliably predict their lifetime (if you can predict it of course the standard alloc/free is far more efficient). A properly written one is *not* subject to threading issues... the one in the article merely sucked.

            The central assumption of C/C++ is that once allocated, memory cannot be moved (because there are or could be unknown pointers to that memory anywh

  • memory (Score:3, Funny)

    by phalse phace (454635) on Sunday October 29 2006, @02:14AM (#16629508)
    The well known memory leak issue, which causes the Firefox browser to consume ever increasing amounts of RAM, eventually leading to sluggish performance and crashes, has been carried over into yet another generation.

    So, does that mean that 640K won't be enough memory then?
  • My impression (Score:4, Informative)

    by kestasjk (933987) on Sunday October 29 2006, @02:17AM (#16629532) Homepage
    The ability to close and continue sessions later removes a major reason why many people kept their browsers open for long periods of time. Before when you close your browser you had to open your tabs again and get it in the same configuration, now it goes to being the same as before immidiately.
    So even if some leaks remain, the problems they cause are reduced.
    • Re:My impression (Score:4, Insightful)

      by Onan (25162) on Sunday October 29 2006, @04:00AM (#16629996)

      The ability to close and continue sessions later removes a major reason why many people kept their browsers open for long periods of time.

      Uh, I keep my browser open because I think the odds are pretty good that at some point in the future I'm going to want to view a web page.

      Why would one ever choose to quit a browser, or for that matter any application? At least for anything other than upgrades to the kernel, fundamental libraries, or hardware?

  • by sporkme (983186) * on Sunday October 29 2006, @02:24AM (#16629578) Homepage
    Firefox to internet:
    If you are for any reason dissatisfied with your Firefox experience, we will gladly refund your money.


    There will, of course, be growing pains. TFA highlights a known security bug, and points out that the memory leak has found its way into Firefox 2. CSS is initially seeing some compatibility hickups. There is always room for improvement. I began using Firefox 2 a few hours after the actual release. I was surprised to see an article complaining.

    The other points of the article are matters of preference and wishful thinking.
    -"I don't like the theme." ORLY well how is that IE theme support working out for you?
    -"The anti phishing is weak!" ---compared to what? The antiphishing in 1.5?
    -"Extensions did not automagically compatible-ize themselves!" OOOOHHH, well let me switch to that other browser that inherently supports third-party code. Perhaps we have overlooked the ".0" in the release version number. Third parties will have to adapt to meet the changes as Mozilla works to meet them. This does constitute a reason to potentially delay switching if extensions are absolutely necessary for your casual web usage.
    -"I don't understand the options screen!" BWAHAHAHAAAHAHAHAAAAA!!!! This can't be serious.
    -"I don't like the RSS thingy! IE does it better!" Where was it again that RSS originated? Was that Redmond? While IE's RSS Just Works (TM) there are clearly many custom options for this feature with Firefox, and unimaginable numbers of extensions are to follow.

    So why delay switching to 2.0? Because 1.5 is just fine. Not because 2.0 is broken. Comparing a .0 release to an established release, and to Internet Explorer, is just pretty laughable where I am sitting. I have not experienced a single crash or bug, but then I have not exactly been trying to break it. Overall, I am quite impressed and look forward to seeing where this release takes the community.
  • by coobird (960609) on Sunday October 29 2006, @02:49AM (#16629676) Homepage

    It seems like quite a few people are out defending Firefox, but that's actually a disservice for Firefox.

    What it really comes down to is to make Firefox into a browser that can convince the other 80+% of the users to switch. Saying "oh but, Firefox did it first!" or "you can just change x setting to make it better if you like" is irrelevant because when it comes down to it, it's whether the average users think it's better than the other browser. Making excuses for issues that even be perceived as problems doesn't help Firefox.

    I like Firefox and upgraded to 2.0 on Tuesday, but it's not really the opinion of the Firefox crowd that really matters, it's the users still using Internet Explorer, the crowd that Firefox is really going after.

  • by Sanity (1431) on Sunday October 29 2006, @02:50AM (#16629686) Homepage Journal
    I desperately want to use 2.0 as my primary browser, I find its form spellchecker invaluable for websites such as this one, but I too have found that it freezes up and must be force-quit several times a day on my Mac, enough to make me stick with 1.5 despite 2.0's features.

    Sounds to me like Mozilla really need to get their act together, especially given the revenue they are supposed to be generating through Google, there isn't really an excuse for this.

  • Firefox is not buggy (Score:3, Informative)

    by ravee (201020) on Sunday October 29 2006, @03:42AM (#16629912) Homepage Journal
    I have installed the latest ver of firefox on my machine running Linux and I can vouch that this new version is not buggy. It has never crashed even once and I found it to open quicker than firefox 1.5.

    Having said that, if you are using a lot of extensions including del.icio.us and many prominent ones, then it could consume some memory and might significantly slow down the machine. I think it has got to be some problem with the extension you are using rather than firefox itself.
    • Caca. As I pointed out in my long message on the other major /. Firefox discussion -- Firefox 2.0 still has some of the same memory allocation and management issues that are present in Firefox 1.5! These were reported as bugs and the developers have simply chosen to ignore them.

      I *crashed* (core dump and all) Firefox 2.0 3 times in the first 30 minutes of using it. All you have to do is use ulimit set the virtual memory limit so that memory allocations fail relatively early during your browsing experience (rather than after 5 days of browsing when you would lose much more browser state information -- or have to take a long time to restore a complex session).

      It is *NOT* production level software when it is that easy to produce a core dump.

      I have subsequently investigated the cause of this. Its simple. Firefox uses the new memory allocation primitive in its C++ code which in turn ends up either throwing an exception or abort()ing when a malloc() fails (depending upon how libstdc++ is compiled). The supporting graphics libraries (GTK & GDK) use g_alloc() which when malloc() fails calls g_error() which ends up calling abort().

      The upper level Firefox code (nsSigHandlers.cpp) will only do something "nice" (setup to do a stack trace and attach the debugger) if Firefox is compiled in DEBUG mode (which is probably not true for most or all 'production-wanna-be' versions). In these cases the abort() terminates the program and produces core dump if you have your core dump ulimit and permissions setup to allow for that.

      While the in-browser session saver may fix some of the excessive memory usage problems they still are NOT handling most memory allocation failures in a robust fashion.
  • by sygin (659338) on Sunday October 29 2006, @03:53AM (#16629954)
    I have been using Firefox 2.0 on Windows and Linux for a while now (RC1)

    1. It is faster than 1.5
    2. It is more stable than 1.5
    3. It is smaller than 1.5
    4. It does more 'out the box' - requires less extensions
    5. It looks better than 1.5
    7. I love the spell checking
    8. It is more secure than 1.5
    9.If it uses more memory, it is because it remembers
        the previous pages and the back button works instantly.

    The reasons not to quoted in the 'story' are moronic

    Cheers
    Sygin
  • by Anonymous Coward on Sunday October 29 2006, @03:57AM (#16629982)
    I am a Firefox developer, so I can comment with some authority on these points.

    First, as to the "critical security hole", as we've already stated in numerous other places, the actual exploitable hole was patched long ago. A non-exploitable crash does remain and will eventually be fixed. Anyone who reports this as a security hole has not done their due diligence.

    Second, the summary posted here is a bit surprising. The feedback we've seen so far is quite the opposite of this summary: most users are, in fact, reporting better performance, lower memory usage (we fixed some of the most egregious leaks), and an easier-to-use browser. Additionally, we fixed far more bugs, especially old, longstanding bugs, in this release than in any previous Firefox release. So even if none of the new features flotas your boat, this release *should* be a polished step forward, once you start poking around a bit.

    Third, as to the nine points this article raises:
    # The new theme sucks
    As this is a matter of personal preference, I can only encourage those who dislike the new theme to download one of the many alternative themes available. There are updated versions of the 1.5 Winstripe/Pinstripe themes, as well as many others, whatever suits your fancy. I will note that the majority of editors reviewing Firefox 2 have felt that the new theme is a step forward; so clearly not everyone believes this is a negative point.

    # Antiphishing technology is both weak (blacklist based) and a potential privacy problem. The privacy issues are raised because Firefox 2.0 Antiphishing Features employ an engine previously released by Google, which has been shown to potentially cause privacy risks.
    This argument is unclear. One of the antiphishing modes uses a blacklist and the other submits URLs to Google. So it at worst is not both weak and privacy-violating at the same time. Going further, however, I would ask for a less vague argument about privacy. Switching on full antiphishing protection displays a warning notice to the user specifying exactly what sorts of data is sent where, and for what purpose. I hardly consider it a violation of privacy to allow people to explicitly choose to send their data somewhere else. (Of course, given that Google doesn't actually do anything with this data other than feed it into their anti-phishing database, I don't consider it a violation of privacy regardless, but we have options precisely because not all users will feel this way.)

    # The new Options dialog box is confusing, poorly designed, and illogically hides important features
    Especially given the positive feedback we've gotten on the redesigned pref window, I'd suggest explicitly naming problems here rather than making such a vague and general argument. The new options box is IMO a vast improvement on the old one: it reduces the number of tabs containing embedded tabs to one (the Advanced tab), it rewords many options for grammar and clarity (especially where the old wordings had generated bug reports), and it slightly modifies the default set of options to better fit actual usage. Name the "important features" being hidden and I suspect the list will consist of features that are very important to a tiny fraction of our userbase.

    # There are many reported compatibility issues with the large existing libraries of extensions, themes, and plugins currently avaialble for earlier versions o Firefox.
    Actually, since the Gecko engine remained at version 1.8, with almost every XPCOM interface backwards compatible with Firefox 1.5, this release has by far the _fewest_ number of incompatibilities of any release in Firefox history. Most extensions are compatible once their version numbers are set properly, and only a small fraction actually broke. Additionally, we contacted the authors of the most popular extensions in advance of the release to explicitly ask them to test their extensions, and filed bugs to track the upgrading of popular extensions. While we can always do more here, I think this has been th
          • by drew (2081) on Sunday October 29 2006, @10:06AM (#16631980) Homepage
            don't bother unless you're also prepared to argue that all websites should be displayed with the default html stylesheet!


            Apples and oranges IMO, but since you bring it up, I'll take the bait.

            Replace 'should' with 'may' and you would be 100% correct, and that is a more accurate comparison. What Firefox is doing is obviously not what some people would prefer, but it is not obviously wrong either, just as Lynx is not 'obviously wrong' to display a web page without stylesheets. For that matter, it is possible even in Firefox and several other modern browsers to disable stylesheets on a web page and view them with the default html stylesheet. This is not 'wrong'- it is completely acceptable, and is in fact the whole reason that we started using CSS- it allows one to remove the formatting information without losing content.

            Likewise, the reason that the formatting data on BBC is in an XSLT stylesheet and not in the RSS feed itself is just that. It is visual formatting information that is unrelated to the content, and may be used or ignored as the user agent sees fit without affecting the content itself. Are standalone feed readers (or better yet, web based ones such as Google's) 'obviously wrong' if they don't display the RSS feed with the BBCs stylesheet rather than loading it into their own interface? It's exactly the same thing, they just happen to have a more fully featured interface than Firefox does.
  • by streak (23336) on Sunday October 29 2006, @04:16AM (#16630070) Journal
    Well, it seems like every version of Firefox still has issues with espn.com.
    Its definitely the most reliable site to crash and/or generate 100% cpu time on any recent version (1.5.x and 2.0).
    Just go browse to one of the scoreboard pages a few times. It really likes to do this on Mac.

  • by thrill12 (711899) on Sunday October 29 2006, @06:36AM (#16630800)
    (taken from here [listvine.com])
    1. Not true. The theme is perhaps not consistent, but this does not matter to the casual user who downloads Firefox for use on 1 platform.

    2. Not true. Antiphishing technology privacy issues are clearly noted when the user ENABLES the (by default DISABLED) feature. This makes it completely by users' choice, and defeats this issue completely.

    3. Little bit true. There are certain options hidden which should be visible. But it's a choice made towards new users, not towards old users that still remember releases such as Firefox 0.9. So it's actually a good thing. And user interfaces tend to address the most common denominator anyway, which is also a proper thing to do.

    4. Little bit true, but to be expected ! Extensions access XPCOM-exported functionality. It is by default that many of the XPCOM interfaces are not stable - this is known to developers and this is clearly noted next to the interfaces you want to develop upon. If extensions use unstable interfaces they know that it could break in future releases. Short story: this issue is no issue at all.

    5. 50% True. But this is a bug that could just as well be fixed in Firefox 2.0.1. Memory leaks are however not easy to fix, and it is by no means sure that it would be even fixed in 3.0, so pure speculation to make this an issue not to upgrade to 2.0.

    6. True. But this also represents a transitional problem that will most likely be fixed (or worked around) in the 2.0-branch

    7. Unverifyable. The author refers to some blog that mentions presumably a Firefox 2.0 RC3-version. But there are no details on the setup of the person's Firefox, nor on the extensions he had installed (see 4). This makes this issue unverifyable and strikes it off this list.

    8. True. Again not something major that couldn't be fixed in the 2.0 branch - have patience.

    9. Untrue. The article author states that RSS feed handling takes a step backwards - in the linked article there is no mention of this: it says that RSS feed handling has never been so good in Firefox as it is in IE7. This is a feature that Firefox may be lacking, but as it has never been present in earlier releases this is NO REASON not to upgrade. Stricken, your honour.

    My judgement from the issues he stated ? He mentions 2 issues that would qualify as a "no-go" for upgrade, the history bar and the CSS issues. But both these issues are minor in that they could be fixed in the 2.0 branch. I clearly show why the other issues are not so true, and sometimes clearly dead-wrong. In my eyes, the author is writing a big fat troll, and slashdot should know better than to post this. Now the damage has been done, this discussion can quickly be silenced, hopefully.
    • Re: (Score:3, Informative)

      > I do not want my browser to remember that I had ten pages open and then reopen them when it starts. I'd be running Opera if I wanted that.

      Then use the simple switch they provide to make it not do that.
      You didn't look very hard - the very first dropdown on the first panel of the options dialogue has the option you're looking for.
    • Re: (Score:3, Informative)

      When the number of tabs increases more than 5 or 6, new tabs are not visible only by clicking a tiny arrow to the right of the tab bar.

      Yeah, annoying me too. But, this is not IE, so there's a way to change: go to about:config and change browser.tabs.tabMinWidth. You're welcome :)

        • Re:Meh (Score:5, Informative)

          by rpdillon (715137) on Sunday October 29 2006, @03:45AM (#16629920) Homepage
          Go to about:config.

          Filter on "tabs"

          Find the entry for "browser.tabs.closeButtons". It'll probably be set at "1". Setting it to "2" makes the close button only visible on the active tab. Setting it to "3" makes the close button the right appear again (1.5 behavior).

          Hope this helps.
        • Re:how-how... (Score:5, Informative)

          by jesser (77961) on Sunday October 29 2006, @03:51AM (#16629944) Homepage Journal
          It's not actually a security issue.

          A few months ago, someone reported a security hole using a testcase that caused two types of crashes, one exploitable and the other not. The security hole was fixed reasonably quickly, but the other crash is a hard-to-fix collection of too-much-recursion crashes, so it hasn't been fixed yet. The security hole is bug 348514 and the too-much-recursion crash is 323394.

          I can understand a few people getting confused due to an old security-hole testcase still causing a crash, but having it come up in mainstream news articles and Slashdot articles as "Firefox 2 might have shipped with a known security hole" day after day is getting annoying.
    • Re: (Score:3, Insightful)

      Can someone explain this to me w/o modding me -1:

      Why is it that every comment in this page that compares IE favorably to FF is modded -1?
      Why is it that every comment in this page that mentions problems w/ FF like memory leaks, crashes, etc, is either not modded up or is modded down?

      Slashdot users pride themselves as a bit more informed that the dumbass NOOBs, so why are we incapable of holding 2 opposing viewpoints at the same time? Isn't that supposed to be the mark of intelligence?

      Nobody has ever accused
      • Re: (Score:3, Interesting)

        Nobody has ever accused Slashdot of having intelligence, but I think the average user would consider themselves to be a notch or 2 above average.
        The problem with slashdot is that it's essentially six rational adults trying to hold a conversation in the same room with sixty screaming children. Intelligence does not, unfortunately, ensure maturity. Nor does it make one's conclusions correct. The moderation is the side effect of giving power to a bunch of bright children.