Comments on: Windows is IE, OS X is Firefox

By: kuza55

kuza55 — Sun, 03 Feb 2008 08:37:51 +0000

I've already given up on Firefox security; they're both equally bad these days (both in terms of actual PR and security bullshit), and the only thing keeping Firefox users safer is the same thing keeping Mac users safer than Windows users; obscurity.

So while I'll continue to use Firefox, I'm not using it for the core browser itself, but rather the useful extensions which exist for it that I utilise.

By: kuza55

kuza55 — Sun, 03 Feb 2008 08:37:00 +0000

So while I'll continue to use Firefox, I'm not using it for the core browser itself, but rather the useful extensions which exist for it that I utilise.

By: Internet Security Love

Internet Security Love — Fri, 01 Feb 2008 03:37:01 +0000

[...] kind words recently came my way from Mike Rothman, of Security Incite. Speaking about my recent post on OS X and Firefox security, he says, This post is actually a great piece of analysis from Daniel Miessler. It’s so [...]

By: dre

dre — Mon, 28 Jan 2008 16:27:03 +0000

Yes, but for every software assurance program also came a true-and-tried leader / evangelist for security -

Microsoft Windows :: Michael Howard Microsoft code :: David LeBlanc Microsoft Internet Explorer :: Window Snyder I can give many examples for the Mozilla Project, but check this out: Mozilla Firefox :: also Window Snyder

Apple Mac OS X :: whoever last worked on FreeBSD before version 4 or maybe the person responsible for Leopard's correct use of ProPolice/SSP Apple code :: nobody? Apple Safari :: certainly nobody if ISE found a vulnerability in a TIFF library within a few hours of owning an iPhone and downloading WebKit

By: dre

dre — Mon, 28 Jan 2008 16:27:00 +0000

Yes, but for every software assurance program also came a true-and-tried leader / evangelist for security -

By: dale

dale — Mon, 28 Jan 2008 02:05:14 +0000

I think you’ve come to a decent conclusion but the 2 OS’s are closer than you think. Apple has already been rolling out tons of security fixes in their updates but they don’t get nearly the amount of press as Microsoft does. All that needs to be done is get code on the box – at that point you’re pwned for all intents and purposes.

One comment on IE though – I believe ActiveX is the real security problem if you were to try and find one thing. I actually do all my “secure” work with IE and have all the confidence in it (and yes, I know what I’m doing and make quite a nice living in the network security field as well as tons of experience in the systems world).

By: dale

dale — Mon, 28 Jan 2008 02:05:00 +0000

By: matthew

matthew — Sat, 26 Jan 2008 14:37:07 +0000

There isn't anywhere near the numbers on Firefox and/or OS X to come to these conclusions.

In regards to Firefox, the users who would be most vulnerable use whatever comes with the PC. Until that is Firefox we won't be able to make solid comparison.

I personally would be interested in seeing how the masses would react to websites asking them to install FF extensions.

By: matthew

matthew — Sat, 26 Jan 2008 14:37:00 +0000

There isn't anywhere near the numbers on Firefox and/or OS X to come to these conclusions.

In regards to Firefox, the users who would be most vulnerable use whatever comes with the PC. Until that is Firefox we won't be able to make solid comparison.

I personally would be interested in seeing how the masses would react to websites asking them to install FF extensions.

By: Ken

Ken — Sat, 26 Jan 2008 09:34:45 +0000

Very true.

By: Ken

Ken — Sat, 26 Jan 2008 09:34:00 +0000

Very true.