is it just me ?

Two things.

One. I went for the 1.0.1 "upgrade ", and note significant slowdown on browser start and paging down within the browser, the latter more than a little significant - I mean, I hit scroll and it takes several seconds to do anything.... Is this out of the ordinary hopefully, should I classify this as a standalone problem of my own, or is this "run of the mill "...

Two. What to make of the following blurb from "internet news "...??? (sorry if i missed info regarding this somewhere, i just don't have the time to read EVERYTHING...)

February 26, 2005
Firefox Security

Tech Support Alert had a tip for Firefox users - disable some or all of the javascript settings under Advanced. Do this through Tools/Options/Web features/Advanced. Tech Support wrote that , "the consensus view is that users should definitely disable the second option "Raise or lower windows" and there is little downside in also disabling the rest." This advice came from the Tech Support Alerts Newsletter (16th February, 2005) - worth subscribing to.
Posted by Gwen at February 26, 2005 04:25 PM

 

keywester,

It's just you. Sounds like just maybe an extension didn't make it? Have you done a bug/trojan scan with AdAware/Spybot, or maybe do a virus scan?

My 1.0.1 is clipping right along at a very fast pace, and I only have an 800 Mhz processor, PIII...

BTW, do you have a link for your Newsletter? Lots of Tech Support Alert Newsletters out there...

Ramona

 

Ramona,

Here's the link to the newsletter Gwen mentioned: TechSupportAlert . Scroll down to section 3.5 ... The TechSupportAlert home page is HERE . The newsletter is published by Ian 'Gizmo' Richards, very informative.

B

 

Thank you Mr. B!

You can relax keywester, as this security release fixes spoofing, and arbitrary code execution, that means no more phishing. Here's the list of fixes:

Fixed in Firefox 1.0.1
Internationalized Domain Name (IDN) homograph spoofing
Unsafe /tmp/plugtmp directory exploitable to erase user's files
Plugins can be used to load privileged content
Cross-site scripting by dropping javascript: link on tab
Image drag and drop executable spoofing
HTTP auth prompt tab spoofing
Download dialog source spoofing
Download dialog spoofing using Content-Disposition header
Overwrite arbitrary files downloading .lnk twice
XSLT can include stylesheets from arbitrary hosts
Autocomplete data leak
Memory overwrite in string library
Install source spoofing with userass@host
Spoofing download and security dialogs with overlapping windows
Heap overflow possible in UTF8 to Unicode conversion
SSL "secure site" indicator spoofing
Window Injection Spoofing

Ramona

 

Thanks for the info Ramona. Guess I will back out the upgrade and retry it - I now recall that I did encounter a slight glitch in the upgrade process, whereby, unbeknowst to me for a while, "Process Guard" would not let the install process close the open FireFox browser from the download, and when I finally realized that, I ended up rebooting and restarting the install...so that must be why it is a little erratic...

edit: by the way, what about the "fix" suggested in the newsletter? do you know if this is this something that actually needs to be done for security purposes?

 

keywester,

Your newsletter came out before the Security Release, 1.0.1 was released. The issue the newletter refers to has been addressed in the new Release of Firefox.

Ramona