Firefox Users Stay Ahead On the Update Curve 328
Reader Alex links to news of a study comparing the currency and patch level of various Web browsers, excerpting:
"Firefox users were far and away the most likely to use the latest version, with an overwhelming 83.3 percent running an updated browser on any given day. However, despite Firefox's single click integrate auto-update functionality, 16.7 percent of Firefox users still continue to access the Web with an outdated version of the browser, researchers said. The study also revealed that the majority of Safari users (65.3) percent were likely to use the latest version of the browser between December 2007 and June 2008, after Safari version 3 became available. Meanwhile, Microsoft's Internet Explorer users ranked last in terms of safe browsing. Between January 2007 and June 2008, less than half of IE users — 47.6 percent — were running the most secure browser version during the same time period."
Trust (Score:5, Informative)
I leave the auto-update feature on in Firefox because I trust that when Mozilla pushes updates they are valuable to me in terms of security or features and that they've been well tested. This has generally held to be true.
On the other hand, on any system I administer I immediately disable automatic updates because Microsoft sometimes pushes patches that only partially address a problem, creating a false sense of security, and then later re-issue them, push things like updates to Windows Media DRM as critical updates (it's not critical to me, Microsoft!), and release updates that go on to cause problems with other software or system stability in general.
When I can trust Microsoft to apply only security updates to IE (or other components of my choosing), maybe I'll consider turning automatic updates back on. Maybe.
Likely business users skew the results. (Score:5, Informative)
Re:Usual drivel (Score:5, Informative)
Types of users of different browsers (Score:4, Informative)
Re:Usual drivel (Score:4, Informative)
Safari uses the same update method as all apple's software -- in OS X it uses the built in software update mechanism, and in Windows, it uses a port of that mechanism. It's about as annoying as all the others (except windows update, because it doesn't pop up every 5 minutes, and it doesn't have a death clock before destroying all your work by restarting).
Re:47% (Score:2, Informative)
ftp://ftp.ncsa.uiuc.edu/Mosaic/ [uiuc.edu]
Download. Bring back the good ol memories.
Re:What has single click got to do with it? (Score:5, Informative)
I'm not sure why they couldn't have the .update option for version 2.xx at least offer the option to update to version 3. It just kept telling me there were no new updates available. I wouldn't call it 'single click' at all.
The option to update to Firefox 3 instead of another security minor version of Firefox 2 (which will still get security updates till the end of the year) hasn't been turned on at the server end yet, and will likely only be done at the next minor version update, like Firefox 3.0.1 or later.
THEN, you'll have a single click.
Re:This makes sense (Score:5, Informative)
It's easy when you consider that Internet Explorer and Windows Explorer are the same program. I remember back when IE 5 came out. If the upgrade program failed in just the right way you would reboot to a blank desktop with no icons, no task bar, no way out except the power switch or reset button. You had to reboot in DOS, edit win.ini to use progman instead of explorer, enter Windows and revert to the previous version of IE. (Sometimes progman didn't even work right. I found it much easier to use control.exe as the shell, because that brought up control panel, which was exactly what was needed.) Then, you had to restart in MS-DOS mode, undo the change to win.ini so that you could go back into Windows and try again. That is, if the tech support person you called knew what the problem was and how to fix it. If not, you were pretty much hosed until you re-installed Windows.
Re:*shrug* (Score:5, Informative)
Well, browsers are a little different, from a security perspective you could argue they *are* broke whenever new vulnerabilities are discovered. For a web browser, they need continuing updates to address new security vulnerabilities. Unfortunately there's only so much interest in continuing security-only fixes to older versions...
Re:Types of users of different browsers (Score:3, Informative)
It's not just corporate users. It's everybody who isn't running XP or higher. For a huge number of people, upgrading to the most recent version of Internet Explorer means buying a new operating system. Of course there are a lot of people who aren't upgrading. It's one of the consequences of Microsoft tying Internet Explorer to Windows so tightly. To upgrade to Internet Explorer 7, you need to take on board all the crap XP and/or Vista were laden with, like product activation and DRM antifeatures. And you need to pay for the privilege!
Re:Trust (Score:3, Informative)
http://packagekit.org/ [packagekit.org]
Re:Trust (Score:3, Informative)
Push to get your wireless driver into mainline or at least the Ubuntu modules package, so it will be re-integrated and distributed when new kernel versions are. All of my devices, including proprietary video drivers and wireless cards, are supported in Ubuntu's official packages because other thoughtful people already did this. I never have to compile, let alone recompile.
Re:Trust (Score:4, Informative)
It is supported, just badly.
It's an Atheros 5005G chipset, works fine with the supplied modules until I use WPA-EAP at university, where it will lock up the system every 2nd connection attempt. Compiling from source is the easiest way to fix it, but (back on topic) needs to be recompiled every kernel update.
Re:Usual drivel (Score:5, Informative)
In XP I found out you could type
NET STOP WUAUSERV
That stops the Windows Update service if you're not ready to reboot. When you do reboot the updates will be installed as a side effect.
In Vista you can set it to download the updates automatically and only install them when you reboot - I've never seen a deathclock.
Re:Usual drivel (Score:3, Informative)
The reason most Firefox users use the most up to date version is that it's the only way to get rid of the annoying pop-ups.
Go to "preferences" -> "advanced" -> "updates", uncheck "check for updates to firefox" and no pop up anymore, very hard indeed
Portable Firefox (Score:4, Informative)
Re:47% (Score:5, Informative)
Re:IE7 is not installed with automatic updates (Score:5, Informative)
I can't tell you how annoying it was to have IE7 forced through the automatic updates system. I would normally say it is a good thing to update the browser... as it is the single most common entry point for spyware, adware, etc (with the email client being the single most common entry point for viruses).
HOWEVER:
a) The "Menu" bar is missing by default (yea the File, Edit, View, Etc... toolbar).
Try explaining to a client over the phone how to "Right-click in an area toward the top of the browser below the title bar, but above the content window, and not in the address bar, oh and not on another toolbar, somewhere kinda blank, maybe to the right of the green arrow, oh that area isn't blank on your screen, oh yea I don't mean blank, just without buttons, did you get the menu, well it should have check marks next to toolbar names, uh something like Standard / Address Bar / Links, yea you got it, wait no, I didn't say click on address bar, ok do it again and turn address bar back on, oh it wasn't on... yea turn it on and then turn on, yes I mean make a check mark by it, yes, ok try it again and turn on the one called, uh something like, just read me what your menu says, yes, that one, ok now do you have File / Edit / View at the top of the window, oh no it's below the address bar and buttons, yea, ok bring up the menu again and uncheck "lock toolbars", then click on the edge, it has little bumps, well more like lines, yea you can grab it there and move it, then you didn't click on the right area, yea try again, ok move it up, well then you have to move the address bar back down, try wiggling it at the top, move it around until the address bar goes onto its own line, yea keep trying, you aren't wiggling it properly, then just drop it there and move the address bar, no it can't go all the way at the top, I don't know why, ask Microsoft why, yea, ok well was there anything else..." and so on.
b) The "Address" bar is hidden by default
See "a"
c) FTP is broken (yep, just fails with "cannot be displayed" when you click an ftp:// [ftp] link ... you have to go into "File > Open With Windows Explorer" to get it to open properly)
Here is a big problem, most software download sites have mirrors at ftp:// [ftp] links, which fail without any reason. IE 6 and previous would re-task the current IE window to a Windows Explorer window and process the FTP request... no so with IE 7(they may have fixed this since). The net result is that users who may try to update their software, or download new software, are unable to. Sites that worked last night suddenly don't. (I first ran into this when a customer called me saying they couldn't download the new version of their anti-virus software, talk about security updates).
d) Common buttons are missing or drastically re-skinned to the extent that users are lost
e) Tabs confuse IE Users (yes I know they are off by default, but users click on things and enable things accidently, and then call me asking why it is broken).
. . .
Shortly after IE 7's relese we implemented a remote desktop application for all phone support requests.
Re:47% (Score:2, Informative)
Read the report http://www.techzoom.net/insecurity-iceberg
IE, Firefox, Opera and Safari dominate, >98%
Big Company Structures (Score:2, Informative)
Re:47% (Score:2, Informative)