No, the point is, since Firefox is an open-source project, a security minded person is already able to fetch the patch from Mozilla's open code repository. There is no such thing for Microsoft products.

In my opinion this makes a big difference. But nowadays, I seem to be in the minority.

Yeah, you and me and the other 3 guys.

That about sums it up. But thanks for trying to cheer me up, anyway.

That's true of course. And I don't want to split hairs but point out the open source nature of the Firefox browser:

The patch is already available.

If you had read the bugzilla thread (I know, I know) you'd know it's already fixed ;)

Go on and mod me troll but, IMNSHO, this is just a display of the expertise of the full disclosure movement: Just post a test-case from an open bugtracker as your own exploit and enjoy your 15 minutes of fame amongst all the other skript-kiddies.

Well done, hacker!

Have you just woken up from cryostasis*, too?

And you know the craziest thing I've heard about Firebug? Allegedly, people also use it to debug web applications written in JavaScript! Applications... On the web... In JavaScript...

What's next? Apple running on Intel? Bill Gates becoming a humanitarian?

----

*) I was frozen just before GWB started WWIII and thawed after the Blacks won :D

**) Thank you, thank you. I'll be here all night.

Why is Secunia (http://secunia.com/advisories/35798/2/) only featuring a link to the exploit of the ff3.5 0day but no link the Mozilla bugtracker?

Don't want to sound trollish but I don't really know how this whole security business works. So can anyone please explain why there is no bug report for the open source browser?

Maybe you can find something in the manual?

I know I will be modded troll or something but I was just amazed that you can find an actual manual by googling! It's probably useless but anyway, kudos to EPSON.

Sorry for coming so late to the discussion but I found it too awkward how everyone who's answered you has only commented on the walking distance.

You said 'wherever you happen to live'. Well I live in Germany and I won't say we don't have bar fights over here but I can assure you that you can't just walk into any bar and start a fight. People in general are less and less tolerant towards violent behaviour and more often than not they will stop the bar fight before it really begins. The 'bad places', where people just don't care what's happening around them, have bouncers who will kick you out at the first sign of violent behaviour.

Commenting on the original topic, I like to think, the more people are exposed to virtual violence (or human suffering in general) - and it's not just video games today but also news espacially war / disaster coverage, documentaries and of course movies - the more people grow sensitive towards any of that happening 'for real'. We don't need to see what a broken beer bottle can do to a person's face to learn that it's a Bad Thing because we have already seen an artistic depiction or maybe even actual footage of it in a video game or on the Internet or TV.

> I also want a browser that doesn't completely freeze when a Java applet launches or PDF file opens.

So what you want is your car being pulled by your old horses without slowing the car down. I really like the Ford quote ;)

A web browser is not a PDF viewer and it's not a JVM either. The whole idea of having external plugins bring functionality to the browser for which it was never designed is a complete mess. This is why there are only workarounds so far. (In some way like plugins have been workarounds for missing browser features, in the first place.) Replacing the current plugin architecture will be the real solution.

Beautiful! I didn't know /. allowed posting screenshots.

I just wanted to give kudos to the submitter for linking to the print version of the article.

When I read 'InfoWorld' in the summary I was at first hesitant to click the link. And really, the original article spreads over 8 pages, contains a giant ad in the middle of what little text is shown on each page and even tries to open a popup.

I can't actually comment on the quality of the submission itself, as I haven't RTFA, but the quality of the link should serve as an example to everyone.

I'd wish you all the best for the project and that one of your peers gets caught by your software. So that you can experience first hand what ethics are good for.
But this would be quite a selfish wish and only would only do bad for society.

So, all I can do instead is say:

FUCK YOU!