Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Firefox 1.1 Worth the Download?

Mar 14, 2005 3:21PM PST

Just a quick check before spending time and money to download the newest version of Firefox. Because of recommendations from this forum, I've been using Firefox 1.0 for three or four weeks now and like it well enough. The virtually zero spyware it collects is a welcome break after using Internet Explorer. FF is sometimes slow, but at least it doesn't crash.

However, with a slow dial-up connection, going through the long Firefox download process is almost like a trip to the dentist. Also, I have read here members' reported problems with loading the new version, and don't feel like hassling myself too much.

I'm a believer in the rule "if it's not broken, don't fix it", but I wouldn't mind having an improved version of FF.

What do you think? Is the new FF version worth the replacement troubles? Or can I just wait for FF to come out with an upgrade to FF 1.0 and not an entirely new version?

Discussion is locked

- Collapse -
There is issue in 1.0
Mar 15, 2005 4:39AM PST
- Collapse -
Spoofing Issue
Mar 15, 2005 2:12PM PST

Thanks, Better, but the link you posted doesn't seem to work. I tried <www.users-guide.org/>, too, but that also timed out. I'll try again later, and then do a Google search for the IDN spoofing issue if I can't get the URL.

While I'm posting, please let me just confirm this: besides the spoofing issue, you believe there is no other reason to upgrade? It'd be great if I could just repair the existing FF without the download hassles. Thanks.

- Collapse -
I Tried This
Mar 15, 2005 6:29PM PST

BetterPC, I couldn't get to the web site you mentioned. It timed out every time. So instead, I did a Google search and ended up adding Adblock extension to my Firefox. The URL for this fix is: <https://update.mozilla.org/extensions/moreinfo.php?application=firefox&version=1.0&os=Windows&id=10
>.

Below is the text from the fix:
1. Install the Adblock Firefox extension.
https://update.mozilla.org/extensions/moreinfo.php?application=firefox&version=1.0&os=Windows&id=10

2. Look at the Adblock 'Preferences' and go to 'Adblock Options'

3. Tick 'Site Blocking'

4. Add the following filter:
<[^\x20-\xFF]>
(Note: without the <brackets> on either side of the string).

This will block any URL that uses characters outside the normal ASCII range.
---------------------------

What do you think? Does this fix look right or did I possibly create more problems for myself? Also, I'm still curious if there is any other compelling reason to upgrade to the newer FireFox version.

Thanks your help.

- Collapse -
Thats right
Mar 17, 2005 9:32PM PST

Yeah, that is the same trick that's written on that site i mention before. Strange that you got timeouts - that link works for me.

I don't know if it's the only issue in the FF 1.0, but i think it's the only one worth to worry about.

- Collapse -
1.0.1, not 1.1
Mar 17, 2005 10:24PM PST

And, it is "broken", like all software. It's just not as broken as MSIE.

Do yourself a favor and spend the time for the upgrade, rather than spending 5 times that (or more) restoring your system when it gets infected by the latest and greatest hack.

Your question is really not different than saying, "I just bought the latest antivirus program. Why should I have to do regular updates on it?" The answer, both for antivirus and web browser software, is that you're only as secure as your latest patch.

Upgrade, upgrade, upgrade!

- Collapse -
I agree with slashdevnull...
Mar 17, 2005 10:44PM PST

I would download FF 1.0.1 as it is not that big of a deal. After downloading and saving to disk I first uninstalled the previous version through Add/Remove Programs before installing 1.0.1. It retained all settings including Bookmarks. You may wish to back them up just in case of a problem... I had none.

Glenn

- Collapse -
Yes, do the upgrade
Mar 18, 2005 2:01AM PST

I just upgraded Firefox to version 1.0.1 The download is only 4.7 MB and the installation takes less than 1 minute. If this is too much hassle for the improved security, you should really reconsider having an ISP at all.

FYI - Here is a list of the fixes included:
Fixed in Firefox 1.0.1
MFSA 2005-29 Internationalized Domain Name (IDN) homograph spoofing
MFSA 2005-28 Unsafe /tmp/plugtmp directory exploitable to erase user's files
MFSA 2005-27 Plugins can be used to load privileged content
MFSA 2005-26 Cross-site scripting by dropping javascript: link on tab
MFSA 2005-25 Image drag and drop executable spoofing
MFSA 2005-24 HTTP auth prompt tab spoofing
MFSA 2005-23 Download dialog source spoofing
MFSA 2005-22 Download dialog spoofing using Content-Disposition header
MFSA 2005-21 Overwrite arbitrary files downloading .lnk twice
MFSA 2005-20 XSLT can include stylesheets from arbitrary hosts
MFSA 2005-19 Autocomplete data leak
MFSA 2005-18 Memory overwrite in string library
MFSA 2005-17 Install source spoofing with user:pass@host
MFSA 2005-16 Spoofing download and security dialogs with overlapping windows
MFSA 2005-15 Heap overflow possible in UTF8 to Unicode conversion
MFSA 2005-14 SSL "secure site" indicator spoofing
MFSA 2005-13 Window Injection Spoofing

- Collapse -
How many were actually exploited?
Mar 18, 2005 2:13AM PST

There are many fixes here. I wonder how many were actually exploited, and how many were discovered by Firefox developers and fixed before being exploited?

- Collapse -
What a concept...
Mar 18, 2005 5:20AM PST

i guess fixed is better than not fixed no matter what else has gone on in the world. You do bring up an interesting concept though.... "fixed before being exploited" You should suggest that one to Microsoft. Actually wouldn't that be a lot like writing good code in the first place?

- Collapse -
Snide Remarks
Mar 20, 2005 11:52PM PST

Hey JS,

Before making snide remarks, how bout reading the original post. He said plainly that he has a dial up connection
QUOTE: "However, with a slow dial-up connection".

So that 5 meg dowload will take a LOT longer then 1 minute. Maybe it's you that should reconsider having an ISP.

Hatter

- Collapse -
Download vs. Install
Mar 21, 2005 3:10AM PST

Sorry to jump in MadHatter, but JS said the installation took less than a minute. I also have a slow dial up connection (at home) but the download shouldn't take too long;however installing it sometimes DOES take a while after downloading, and I took it to mean that JS was saying the installation was fast.

- Collapse -
Firefox 1.01 -
Mar 18, 2005 3:24AM PST

The update noticeably slowed my system (Win Me)compared with vs 1.0, but the holes it plugs are worth suffering through it. However, there are enough Web pages that won't operate properly with Firefox that I'm not using it 100% of the time anymore. (Mozilla.org is aware of this and blames it on Gecko, not Mozilla code.) Blogs seem especially difficult for it to handle well, perhaps because some blog sites use what seem to be proprietary posting methods.

- Collapse -
troubles with new FF version
Mar 19, 2005 11:25AM PST

I downloaded the new version of FF at a prompting from them and am greatly regreting it. I have lost all the bookmarks, and saved passwords that I had on the previous version and can't find out how to get them back.

Also,I cannot get this version to connect and accept my home page that I have always used.

Is it worth it? I say NO!

- Collapse -
troubles with new FF version
Mar 21, 2005 1:19AM PST

I downloaded the 1.0.1 and now I cannot see images on the webpages. I am running WIndows XP Home, Starband internet.
The address bar will change to a yellow background sometimes.
I do not get any popup blocker bars anymore even if I turn on/off the popup blocker.
I have tried to add those websites as allowed with no joy.
Any one else experiencing this problem?
Anyone have a fix?.
Do you think uninstalling and relaoding FF would do the job?.

Also on the bottom bar I show Adblock with something under it I cannot read. I double click and get a new window Adblock-able list asking for a filter? similar to a page history list that I cannot do anything with.
To the right of the Adblock tab there are 13+ blank tabs. Cursor over and they say: , day in or night in and ,winds that I cannot get rid of.

Bob

- Collapse -
More problems with FF 1.01
Mar 25, 2005 10:33AM PST

I have some of the problems, should say HAD, also, add to the list, cannot highlight anything to copy to word processor programs (Word & WordPerfect). Highlight does NOT work...got strange windows popping up saying things were missing. Could not print from browser either.
Finally removed from computer and stuck with I.E.
Did like the tabs and password keeper. But was not enought to keep. Tried to contact webmaster but FoxFire people do not seem to care if we use their browser or not. So I "not"!

- Collapse -
Firefox 1.0.2 is latest version...
Mar 25, 2005 10:41PM PST

I have absolutely no problem with Firefox. My suggestion is to uninstall to old version and remove any remnants remaining in the hard drive folder as well as registry entries.

Fresh start may help.

Good luck!

Glenn

- Collapse -
Firefox 1.0.2 is latest version
Mar 26, 2005 2:08AM PST

Yes! I uninstalled the 1.0.1 and installed the 1.0.2.
It appears to run faster now but if there is more than 3 browsers open it slows down and will actually lockup on me. It still will not allow some images to load. The pop up blocker never comes up now. I do still have the AdBlock icon on the bottom bar and now it will appear within pages.
I found that the extra icons were put there by The Weather Channel.com because I have their Desktop loaded.
BooHoo I have to keep the IE6 for some sites.
Bob