Firefox 1.0.1 Released 617
homeobocks writes "Firefox 1.0.1 has been officially released by the Mozilla Foundation, with some important security fixes. An announcement and release notes are available." Presumably this fixes the window injection vulnerabilities.
On this subject (Score:5, Interesting)
Re:On this subject (Score:5, Informative)
The ad went out on December 16, 2004.
This is 37 days after the launch of Firefox. If you look to the downloads per day graph, there is a noticable increase afterward.
Re:On this subject (Score:5, Insightful)
In fact, I come to the opposite conclusion: there was no noticable increase afterward.
Re:On this subject (Score:4, Interesting)
There's no way to say what would've happened. We could fit a trend to the previous weeks (again excluding the first week) and try to guess (with a huge margin of error), and there might be slight decrease predicted. BUT there are several weeks before the ad where the count jumped back up, too, so I wouldn't be comfortable making any conclusion about a trend from that data.
Re:On this subject (Score:3, Interesting)
Re:On this subject (Score:5, Informative)
I just installed 1.0.1 and everything seems to be working... Except that they haven't fixed the slashdot rendering bug yet (well, to be fair it's probably slashdot's HTML's fault -- I don't know why they haven't switched to CSS yet. They'd save gigs of bandwidth).
Re:On this subject (Score:5, Informative)
I dunno if it is a slashdot bug or not. It seems to me that if you can fix it with this workaround, then's it's a Mozilla bug (it does it there, too). Yes they definitely should use CSS, but since it's such an ugly site, it'll probably still look better in lynx.
Re:On this subject (Score:4, Informative)
The main Slashdot rendering bug fix is going to be released with 1.1. This version 1.0.1 is only a security fix.
Re:On this subject (Score:5, Interesting)
well, to be fair it's probably slashdot's HTML's fault
Every single time this bug is mentioned, somebody blames it on Slashdot. Every single time, somebody else corrects them. Most of the time there's a reply saying something to the effect of "okay, so it's a bug in Firefox... but it's still Slashdot's fault!". And people continue to post comments like yours.
What is it going to take to convince people that it's a bug in Firefox? Showing them the bugzilla entry doesn't work. Showing them valid HTML that exhibits the same problem doesn't work. Showing them Firefox developers talking about the bug doesn't work. Telling them that it's fixed in current nightlies doesn't work.
Where the hell does this irrational superstition that it's Slashdot's fault come from? And why do you fools continue to post comments like this?
Re:On this subject (Score:5, Informative)
This was fixed in Gecko in May 2004 on the trunk which is used by the latest stable version of Mozilla Suite (but not on the aviary branch which 1.0.1 is still based on. Aviary is now being exhumed back into the trunk, so hopefully, future builds (including releases) will all be based off the trunk (so Gecko fixes will propogate to Firefox).
To fix it in Firefox:
get a recent nightly build--I find them just as stable
just install the Slashfix extension [slashdot.org].
BTW the bug only occured sometimes if your machine was fast and it was rendering /. too quickly--you could try reloading--it was a genuine bug as it occured intermittently, but the awful, hoggy, invalid slashcode HTML doesn't help (esp. their use of evil many-nested tables for layout--see the funny and informative Why tables for layout is stupid [hotdesign.com]).
IDN Problems Fixed? (Score:5, Informative)
(wiki linkage mine).
Here is an example. (Score:4, Informative)
Click the Fake and Real link to see the difference.
The Fake site will not work with Internet Exporer with the latest service pack.
*Requires Firefox 1.0.1
Doesn't require 1.0.1 (Score:5, Informative)
Actually you don't need 1.0.1 to see how it works; spoofstick on 1.0 displays the bogus URL as xn--blah-blah-blah...
Re:IDN Problems Fixed? (Score:4, Informative)
The encoding is applied separately to each component of a domain name which is not representable solely within the ASCII character set, and a reserved prefix 'xn--' is added to the translated Punycode string. For example, bücher becomes bcher-kva in Punycode, and therefore the domain name bücher.ch would be represented as xn--bcher-kva.ch in IDNA.
Compare an ASCII 'punycoded' URL http://xn--tdali-d8a8w.lv/ (http://xn--tdali-d8a8w.lv/) (working) and its full Unicode counterpart that does include Latvian characters with appropriate diacritics: http://tûdaliò.lv (http://t%C5%ABdali%C5%86.lv) punycoded URLs are prefixed with xn-, and look like nonsense to those of us looking at Latin character sets. Look at the difference between those two sample URLs. Which one is easier to train to identify? Do you have a suggestion for a better solution to IDN spoofing concerns?
Comment removed (Score:5, Informative)
Re:IDN Problems Fixed? (Score:4, Informative)
Its because some letters look exactly the same but are effectively different unicode characters that lets you register the same 'looking' address but point it to a different site.
Re:IDN Problems Fixed? (Score:3, Informative)
It is suggested in the RFC (and is IMO common sense) that UAs should alert users (e.g.: by coluring characters by script and a dialog in suspicios cases) when there are characters in a URI from scripts they wouldn't normally use, or a strange mixture of scripts (esp. where characters that are si
Re:IDN Problems Fixed? (Score:3, Insightful)
Mirrors (Score:5, Informative)
http://download.mozilla.org.nyud.net:8090/?produc
http://download.mozilla.org.nyud.net:8090/?produc
Re:Mirrors (Score:5, Insightful)
At least Micro$oft doesnt make you totally re-download IE everytime they patch it.
Re:Mirrors (Score:2)
Linux:
Edit\Preferences\Advanced\Check Now
Windows:
Tools\Options\Advanced\Check Now
(The check now buttons say for updates beside them)
Re:Mirrors (Score:5, Insightful)
I guess they haven't put the updates on the server yet?
Screw it, I downloaded the whole thing and it took 20 seconds. I closed FF, Zipped up ProgFiles\MozFF and DocSet\User\AppDat\Moz, installed FF 1.0.1 and loaded it up.
Took less thAn 2 minutes to do all that, I'm updated and no extensions broke.
Pretty cool. Didn't even need a fricken reboot like IE would have.
Re:Mirrors (Score:5, Informative)
"We're still working on some with the application update infrastructure and the installer so for the first few days, we'll only be offering the release via full download at the website and then turning on the automatic update system hopefully sometime next week."
Re:Mirrors (Score:3, Insightful)
Re:Mirrors (Score:5, Informative)
Since it's not being maintained, I'll probably eventually have to give it up, but I won't for such a minor Firefox update.
Actually, no you don't. Changing extension maxlimits is trival.
- First, find your profile. In Explorer find: %appdata%\Settings\\Application Data\Mozilla\Firefox\Profiles\\extensions
- Second, open Extensions.rdf with notepad, metapad, etc.
- Third, find and replace any of:
em:maxVersion="1.0"
With em:maxVersion="5.0"
And you're good to go. You can put any number you want, but I like 5.0 just to make it easier, especially with nightlies in the past. You could also use about:config to lower your version number, but that could have other side effects. Now, if doing this makes your extension not work because of code changes (rarely) or somehow borks your profile (highly doubtful), use at your own risk.
And Extensionsmirror.nl is a great place to find prebumped extensions.
Re:Mirrors (Score:5, Informative)
BitTorrent links [mozilla.org] in case the servers really go to crap. (Theirs, not mine)
How do I automatically kill history in Firefox? (Score:4, Interesting)
Re:How do I automatically kill history in Firefox? (Score:5, Informative)
Or you could go to Tools > Options > Privacy > Clear all (under Windows).
Re:How do I automatically kill history in Firefox? (Score:5, Informative)
Porn browsing tips for firefox =D (Score:5, Interesting)
You can do things such as put an obviouly diffrent skin on it to make sure you arn't running the wrong profile and install flashgot to allow you to grab entire image/movie gallerys.
You can have a custom adblock [mozdev.org] filter list to remove nonrelevant images such as those backgrounds, banners and image borders that sites have which slows down your browsing.
Under linux I have everything setup to use an highly encrypted filesystem so nothing can be accessed without the password, if you have your images, firefox profile, and its starting script in there then noone will beable to find anything also because its encrypted and only accessable by you, you can leave the history to be saved and create bookmarks etc. Just remember to unmount the filesystem and clear the loopback device.
Yeeehaaa (but...) (Score:5, Insightful)
You can now make links opened by other applications open into a new tab, reuse an existing tab, or open a new window.
Does it play well with Tabbrowser extension?
Usually any app that does this kills off my saved session. (grrrr).
Here's hoping.
And, isn't msi support supposed to be available?
(if it is there I did not see it)
Re:Yeeehaaa (but...) (Score:2)
How does this get posted instead of... (Score:2, Funny)
Re:How does this get posted instead of... (Score:2)
Re:How does this get posted instead of... (Score:3, Funny)
Check Updates... (Score:4, Interesting)
It says no updates available... Do I need to actually update from the site?
Re:Check Updates... (Score:5, Informative)
--Asa
Re:Check Updates... (Score:2, Insightful)
Re:Check Updates... (Score:5, Informative)
Cheers!
it should bittorrent the autoupdate (Score:3, Interesting)
You could always have a seperate tracker for each country or each major region.
Whew! (Score:5, Funny)
Security Fix (Score:5, Funny)
OS X-specific fixes? (Score:5, Informative)
This version doesnt fix some new type of popups (Score:3, Funny)
How insulting!
Re:This version doesnt fix some new type of popups (Score:3, Informative)
Re:This version doesnt fix some new type of popups (Score:3, Funny)
Somehow the illusion is less convincing when you use a Macintosh and you find yourself looking at a Windows XP window border...
Actual list of changes (Score:5, Informative)
Here [squarefree.com] is the full list of changes and related bugs for Firefox 1.0.1.
You'll note that it's quite terse - this is not the 1.1 update from trunk that will get us rendering fixes, etc. that we'll see in June or so. Almost all security fixes here.
Be kind to the mirrors, use official bittorents!!! (Score:5, Informative)
have set up an official Bittorent seeder [mozilla.org].
-Jed
( http://bittorrent.mozilla.org/ [mozilla.org] )
Re:Be kind to the mirrors, use official bittorents (Score:5, Insightful)
Re:Be kind to the mirrors, use official bittorents (Score:5, Insightful)
Major crashing Bug (Score:3, Informative)
It doesn't matter what URL I try to enter, with tabs or without, *boom* it crashes.
Re:Major crashing Bug (Score:2)
Slashdot bug? (Score:2, Insightful)
Re:Slashdot bug? (Score:4, Informative)
I would imagine that this could also be added to a proxy easily enough also.
Too bad it still doesn't fix the RAM problem (Score:2, Insightful)
Even the original Mozilla, which is bloated, uses a mere 20,482K to open slashdot.org, while it can open up my loads of e-mail only using 24,223K of RAM. Using Thunderbird in addition to
Re:Too bad it still doesn't fix the RAM problem (Score:2, Interesting)
Re:Too bad it still doesn't fix the RAM problem (Score:3, Informative)
Do try K-Meleon [sourceforge.net], as it performs much better than Firefox on older computers. Its RAM usage should be somewhat lower as it
Re:Too bad it still doesn't fix the RAM problem (Score:3, Informative)
Delete all the stuff in your \Mozilla\Firefox folder when you uninstall Firefox when installing a newer version. There may be extensions getting in the way of your setup.
Re:Too bad it still doesn't fix the RAM problem (Score:3, Informative)
Though I do agree that Firefox could use a bit better memory managemnt, after opening a bunch of windows or tabs, closing them doesnt free up all the memory it used to show the windows.
Re:Too bad it still doesn't fix the RAM problem (Score:4, Informative)
go to -> Windows Task Manager -> view -> select column -> check virtual memory size
Re:Too bad it still doesn't fix the RAM problem (Score:3, Interesting)
I run it on a Cyrix-133Mhz with 40Mb of RAM and Win95 - it runs better (less memory usage, faster) than IE5. Still slow to start up, of course, but I'm not expecting much from an old machine like that
about:cache (Score:4, Informative)
Number of entries: 208
Maximum storage size: 31744 KiB
Storage in use: 7436 KiB
Inactive storage: 7127 KiB
List Cache Entries
Disk cache device
Number of entries: 312
Maximum storage size: 50000 KiB
Storage in use: 18025 KiB
Cache Directory: C:\Documents and Settings\Development\Application Data\Mozilla\Firefox\Profiles\fd8vwgvl.default\Ca
A few bugs in this release (Score:5, Informative)
I've gone back to 1.0 and there are no problems. here's a link to the windows 1.0 versions [mozilla.org] in case anyone else similarly needs to revert back.
Known bug! (bug 280084) (Score:3, Informative)
You need to delete <install directory>/components/autocomplete.xpt and try again.
The fix is checked in for Firefox 1.0.2
Re:Did you have the flash blocker? (Score:3, Informative)
Awesome news! (Score:5, Funny)
Bittorrent! (Score:5, Informative)
Now if you're worried about putting too much strain on the Mozilla download servers, use the BT links!
Alternatively, this page lists translations and direct download links [mozilla.org]
Now in more languages (Score:2, Informative)
Update button? (Score:2, Insightful)
Not that it's tough to manually download & install the update. It'd just be nice if I could tell my co-workers to "click on this button and it'll update itself."
New Download Count? (Score:3, Insightful)
Good Experience (Score:5, Interesting)
No more mr. Memory Hog (Score:5, Informative)
Windows users who have problems with Mozilla software (Firefox, Thunderbird or Suite) being too slow or using too much memory and CPU, check out the Moox optimized builds [www.moox.ws].
One of my friends reported having constantly about 100 MB more free memory after switching to Moox M2 in his Athlon XP. A bit of a warning though: I tried to install original 1.0.1 over Moox M2 1.0, and it now crashes every time I press enter in the URL bar. Now typing in Internet Explorer, I'm anxiously waiting for Moox optimized 1.0.1 builds to come out and solve the situation.
Spoiler (Score:5, Funny)
Since when did the links.... (Score:3, Funny)
Congrats FF peeps, I hope the popup blocking works now... will install at work, fusk that pute first, then try at home.
Re:/. rendering (Score:2, Informative)
Re:/. rendering (Score:5, Informative)
Re:/. rendering (Score:5, Funny)
Re:/. rendering (Score:5, Funny)
Some of those self-same Slashdot fans are unstable engineers.
Re:/. rendering (Score:2)
Re:/. rendering (Score:3, Informative)
Re:seems like only yesterday (Score:3, Informative)
From changelog:
International Domain Names are now displayed as punycode. To show International Domain Names in Unicode, set the "network.IDN_show_punycode" preference to false.
It's just no longer the default, which is what most have been crying for, right? Better security by default so our less web-savvy family and friends don't get owned online?
Re:seems like only yesterday (Score:5, Informative)
None. IIRC they just turned off IDN support, and did not remove it. If someone needs it, the can turn it back on.
IE has no IDN support without third party software, so Firefox is still a better choice if you need IDN support.
Re:seems like only yesterday (Score:2, Interesting)
I think a better approach to this issue would be an "intelligent" punycode display. For instance, if any ASCII character is respresented using IDN characters then AND ONLY THEN should punycode be used.
As I understand it, there is only one IDN representation of non ASCII characters, if the only characters using IDN are non ASCII, then the address cannot be spoofed. However if an ASCII character is being represented using IDN representation, then spoofing is likely taking place, switch to punycode. This
Re:seems like only yesterday (Score:3, Informative)
It might be time for you to do a little more reading...
The issue isn't an ASCII letter being "represented using an IDN representation" in the way that you seem to imply.
It's a matter of an ASCII character being replaced with a unicode letter that LOOKS the s
Re:seems like only yesterday (Score:5, Informative)
Your statement is misleading.
Support for IDNs is still present, it's just that after inputting a URL using an IDN domain name like http://www.göögle.com/, it is displayed as the punycore representation in the address bar: http://www.xn-ggle-5qaa.com/
The merits of this work around are certainly up for debate (hint: the debate started years ago).
Seeing as no currently shipping version of Microsoft Internet Explorer supports IDNs... you can probably stop wondering.Better Release Notes (Score:2, Informative)
Re:What's new in 1.0.1 (Score:3, Insightful)
Please tell me to do it there's a more intuitive way to do that in the GUI.
Re:It'd be nice if XSLT+XML = HTML kept info on pr (Score:2, Interesting)
It turns out problems like this are actually put there on purpose because banking sites have threatened to block Firefox if it doesnt do this.
As for why there's no about:config option, that's for Jesus to figure out.
Re:It'd be nice if XSLT+XML = HTML kept info on pr (Score:2)
Re:But can I upgrade using Software update? (Score:5, Informative)
Re:Is a .0.1 dot release really newsworthy (Score:3, Informative)
Re:What's Firefox? (Score:2, Funny)
Re:Ah, so this software does have vulnerabilities (Score:4, Informative)
Well said... Check previous
Re:Ah, so this software does have vulnerabilities (Score:3, Interesting)
Of course FireFox patches only fix Firefox, becuase that is all it is. That also means any problems in it only affect Firefox.
Ask anyone with a clue about computer security and they will tell you that is a good thing, unlike IE flaws causing problems all over the place becuase it is integrated into windows. It isn't like using Firefox stops you using windows update you know.
It definately is slower to start, as IE is loaded up when windows is. You don't notice IE's start up time as a seperate thing. As f
Re:404 (Score:3, Informative)
Why not use the torrent [mozilla.org]?
Re:How can I find out? (Score:3, Insightful)
Comment removed (Score:4, Informative)
Re:I'm excited (Score:5, Insightful)
Remember that it's not just one geek-friendly browser we're talking about here - the future of the entire internet's at stake. The popularity of this one browser could be the only thing that prevents the web turning into a microsoft-dominated proprietary system a few years down the line, destroying any chance linux might have had on desktop machines.
And if that's not an exciting and important Slashdot story, I don't know what is.
Re:Change Log (Score:5, Informative)
Firstly, don't plagarise. Cite your sources. Your list is an exact copy of http://www.squarefree.com/burningedge/releases/1.1 .html [squarefree.com].
Secondly, if you do plagarise, make sure you steal the right frigging document! You posted a changelog for the not-yet-released Firefox 1.1. This is Firefox 1.0.1. Its changelog can be found at http://www.squarefree.com/burningedge/releases/1.0 .1.html [squarefree.com].
Re:Firefox sucks (Score:5, Funny)
Rofl
Who comes up with this stuff?