Comments on: What percentage of known security bugs in browsers are actually fixed? http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html A blog covering the latest buzz on the Opera browser and its competition. Mon, 01 Dec 2008 18:09:23 +0000 http://wordpress.org/?v=2.6.2 By: Kc4 http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-33451 Kc4 Thu, 01 Feb 2007 23:36:52 +0000 http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-33451 :p Only a handful of bugs as well! :p Only a handful of bugs as well!

]]> By: Bary Pickett http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-33123 Bary Pickett Wed, 31 Jan 2007 15:20:19 +0000 http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-33123 I had an e-mail account with Oprea. When i logged in it was almost full of someone elses mail. I told them time after time there reply was are you sure its not yours. That is stupid i said go in look at the dates and compare to when i opened my account. And nothing against gay people but alot of it were from gay websites. Mine not in a million years.They just ignored my request for monthes. So i opened an account with a new password and it was fine no mail. The first password was so that there is no way we both had the same password so it had to be a bug just because we were both named Barry. I had an e-mail account with Oprea. When i logged in it was almost full of someone elses mail.
I told them time after time there reply was are you sure its not yours. That is stupid i said go in look at the dates and compare to when i opened my account. And nothing against *** people but alot of it were from *** websites. Mine not in a million years.They just ignored my request for monthes. So i opened an account with a new password and it was fine no mail. The first password was so that there is no way we both had the same password so it had to be a bug just because we were both named Barry.

]]> By: Nathan http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-33005 Nathan Wed, 31 Jan 2007 07:36:41 +0000 http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-33005 An update manager would be nice indeed... I always asked myself why opera didn't have one... I'm happy that opera is the safest browser around, though... but people like any grandmother are nothing with the latest updated version, if they don't have it, because they don't can/want to do it manually! An update manager would be nice indeed… I always asked myself why opera didn’t have one…

I’m happy that opera is the safest browser around, though… but people like any grandmother are nothing with the latest updated version, if they don’t have it, because they don’t can/want to do it manually!

]]> By: Daniel Goldman http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-32966 Daniel Goldman Wed, 31 Jan 2007 05:03:17 +0000 http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-32966 Dante, hehe :) Dante, hehe :)

]]> By: Ben Buchanan http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-32945 Ben Buchanan Wed, 31 Jan 2007 03:29:36 +0000 http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-32945 Glad you liked the article :) I definitely think an update manager would make life easier for Opera users - especially for users like your grandmother, who just don't want to be hassled with such things. I suspect there's a certain level of overload - these days even my printer drivers 'phone home' for updates. It gets to the point where everything's just another bit of work and people put it off even if they know they shouldn't. Glad you liked the article :)

I definitely think an update manager would make life easier for Opera users - especially for users like your grandmother, who just don’t want to be hassled with such things.

I suspect there’s a certain level of overload - these days even my printer drivers ‘phone home’ for updates. It gets to the point where everything’s just another bit of work and people put it off even if they know they shouldn’t.

]]> By: Dante http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-32917 Dante Wed, 31 Jan 2007 02:42:11 +0000 http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-32917 <blockquote>If you’re not using the latest version, what are you waiting for? Get the latest version of Opera. Now!</blockquote>Stop shouting at your grandmother.

If you’re not using the latest version, what are you waiting for? Get the latest version of Opera. Now!

Stop shouting at your grandmother.

]]> By: Darken http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-32845 Darken Tue, 30 Jan 2007 22:44:23 +0000 http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-32845 @ Olli : Is it a bug? >> «Posted by Olli using <strong>Opera 9.20</strong>» :D @ Olli : Is it a bug? >> «Posted by Olli using Opera 9.20» :D

]]> By: Alex Bishop http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-32839 Alex Bishop Tue, 30 Jan 2007 22:15:18 +0000 http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-32839 Kelson said: "The updater in Firefox 1.5 and later downloads a binary patch, which is a lot smaller than the full installer, installs it, saves the current session and offers to restart the browser." Actually, that's not quite right. It downloads the binary patch (optionally prompting before it does this but by default it's silent) in small chunks (to avoid interfering with browsing too much). Then it asks to restart. If the user accepts, it saves the current session, shuts down, starts up again, installs the update and then restores the session. If the user declines, the update will be installed when they next start Firefox. (It's implemented so that Firefox checks if it has an update to apply whenever it starts.) "It only grabs the full installer if you’ve skipped an update." There was a plan to keep a library of patches for several recent versions (so as well as, say, 1.5.0.3 to 1.5.0.4, there would also be 1.5.0.2 to 1.5.0.4 and 1.5.0.1 to 1.5.0.4) but that was never done. It will download the full installer if the patch update fails to apply (which, as I recall, is quite annoying as you have to sit there waiting for it to download before you can do anything else - better than leaving a broken install though). Kelson said: “The updater in Firefox 1.5 and later downloads a binary patch, which is a lot smaller than the full installer, installs it, saves the current session and offers to restart the browser.”

Actually, that’s not quite right. It downloads the binary patch (optionally prompting before it does this but by default it’s silent) in small chunks (to avoid interfering with browsing too much). Then it asks to restart. If the user accepts, it saves the current session, shuts down, starts up again, installs the update and then restores the session. If the user declines, the update will be installed when they next start Firefox. (It’s implemented so that Firefox checks if it has an update to apply whenever it starts.)

“It only grabs the full installer if you’ve skipped an update.”

There was a plan to keep a library of patches for several recent versions (so as well as, say, 1.5.0.3 to 1.5.0.4, there would also be 1.5.0.2 to 1.5.0.4 and 1.5.0.1 to 1.5.0.4) but that was never done.

It will download the full installer if the patch update fails to apply (which, as I recall, is quite annoying as you have to sit there waiting for it to download before you can do anything else - better than leaving a broken install though).

]]> By: Olli http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-32832 Olli Tue, 30 Jan 2007 22:00:48 +0000 http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-32832 Just a bug in peregrine where the ua string has gone mad :-) Just a bug in peregrine where the ua string has gone mad :-)

]]> By: Daniel Goldman http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-32797 Daniel Goldman Tue, 30 Jan 2007 18:52:52 +0000 http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-32797 Romain: <a href="http://operawatch.com/news/2007/01/operafox-how-to-make-the-opera-browser-look-like-firefox.html#comment-32342" rel="nofollow">here is</a> an Opera employee using Opera 10.5 to comment on this blog. :) Romain: here is an Opera employee using Opera 10.5 to comment on this blog. :)

]]> By: Romain http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-32796 Romain Tue, 30 Jan 2007 18:43:11 +0000 http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-32796 Do you know that I've in the stats of my site a 10.5 version of Opera ;) ? Surely someone (ab)using UA spoofing... Do you know that I’ve in the stats of my site a 10.5 version of Opera ;) ?

Surely someone (ab)using UA spoofing…

]]> By: Kelson http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-32792 Kelson Tue, 30 Jan 2007 18:36:25 +0000 http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-32792 Daniel: You're welcome! Nike: you're thinking of the old update notification system (or else you only use Firefox once every four months or so). The updater in Firefox 1.5 and later downloads a binary patch, which is a <em>lot</em> smaller than the full installer, installs it, saves the current session and offers to restart the browser. It only grabs the full installer if you've skipped an update. Daniel: You’re welcome!

Nike: you’re thinking of the old update notification system (or else you only use Firefox once every four months or so). The updater in Firefox 1.5 and later downloads a binary patch, which is a lot smaller than the full installer, installs it, saves the current session and offers to restart the browser. It only grabs the full installer if you’ve skipped an update.

]]> By: Nike http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-32787 Nike Tue, 30 Jan 2007 17:57:09 +0000 http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-32787 Firefox's updatede thingy just downloads the installer, and does a silent install with it. So its not a big thing. Firefox’s updatede thingy just downloads the installer, and does a silent install with it. So its not a big thing.

]]> By: Daniel Goldman http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-32785 Daniel Goldman Tue, 30 Jan 2007 17:47:14 +0000 http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-32785 Kelson, thanks for the correction. I was always under the impression that Opera had it first. I didn't know about the icon in FF 1. Kelson, thanks for the correction. I was always under the impression that Opera had it first. I didn’t know about the icon in FF 1.

]]> By: Kelson http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-32783 Kelson Tue, 30 Jan 2007 17:42:43 +0000 http://operawatch.com/news/2007/01/what-percentage-of-known-security-bugs-in-browsers-are-actually-fixed.html#comment-32783 <blockquote>"Last year Opera added the functionality to the browser to alert the user of a newer available version (yes, Opera had it before Firefox did)."</blockquote> Just a correction: Firefox has had update <em>notification</em> since version 1.0, or possibly earlier. It would <a href="http://www.hyperborea.org/journal/archives/2005/06/14/foxes-need-updates-too/" rel="nofollow">display an icon in the menu bar</a> indicating that an update was available, and clicking on it would download the installer. So that goes back at least to November 2004. This was replaced with the automatic updater in Firefox 1.5 (November 2005). Looking at the Opera changelogs, I see update notification was added in version 8.0, released in April 2005.

“Last year Opera added the functionality to the browser to alert the user of a newer available version (yes, Opera had it before Firefox did).”

Just a correction: Firefox has had update notification since version 1.0, or possibly earlier. It would display an icon in the menu bar indicating that an update was available, and clicking on it would download the installer. So that goes back at least to November 2004. This was replaced with the automatic updater in Firefox 1.5 (November 2005).

Looking at the Opera changelogs, I see update notification was added in version 8.0, released in April 2005.

]]>