FireFox Browser

Mutt and Jeff · Jan 10, 2020

This Firefox vulnerability is so bad, the U.S. government is urging users to patch it immediately
Seriously, go update your browser before you even read this.
the article

Dale in WV · Jan 10, 2020

checked and done! tks

kcm.MN · Jan 10, 2020

Seems I have nothing to worry about. I keep Java disabled.

MarkB_MI · Jan 11, 2020

> Seems I have nothing to worry about. I keep Java disabled.

Java or Java Script? Despite the similar names, they're totally different things. The vulnerability is specific to Java Script. ("Java Script" should be one word, but YT doesn't allow that word in posts.)

To check if your browser is up-to-date, Select "Help->About Firefox" from the menu. The problem exists in versions prior to 72.0.1.

woodbutcher · Jan 11, 2020

So, is it just Firefox browser that is vulnerable? I switched to Chrome a few years ago, and I did not know about the Java threat. I always disregarded the updates Java offered because of slowdowns I had experienced on downloads. But when I switched over to Windows 10 the other day, The Java update window came up and I downloaded it. I thought Java was something necessary for the OS. Am I wrong?

Butch

kcm.MN · Jan 11, 2020

Thanks Mark, never realized there was a difference.

Fortunately, Firefox was updated prior to this thread. Unfortunately, I now have to decide whether or not to disable j-script. Not sure what all that will do, or even if there will be any benefit.

I knew that Java used to cause some problems, back before Firefox (in the days of Netscape).

rustyfarmall · Jan 11, 2020

I have FireFox set for automatic updates. It did an update just yesterday.

MarkB_MI · Jan 11, 2020

> So, is it just Firefox browser that is vulnerable? I switched to Chrome a few years ago, and I did not know about the Java threat. I always disregarded the updates Java offered because of slowdowns I had experienced on downloads. But when I switched over to Windows 10 the other day, The Java update window came up and I downloaded it. I thought Java was something necessary for the OS. Am I wrong?

Since the flaw is in IonMonkey, the Java Script just-in-time compiler specific to Firefox, the vulnerability is in Firefox only.

Java is, in general, not required by the Windows operating system. However, there are a number of websites and platform-independent applications that do require Java, so if you were to uninstall it you would likely run into problems.

Just to clarify, Java is a general-purpose programming language that allows a program to be compiled once, then run on multiple platforms such as Windows, Linux or macOS. ("Native" programs, on the other hand, have to be compiled for each platform. These would be written in languages other than Java, such as C++) In order to execute a compiled Java program, a computer must have the Java Run-Time Environment (RTE) installed; that's the "Java" that your update was for.

Java Script is a scripting language that runs inside a browser and is used by many websites to automate various functions. Java Script is tied to the browser and is unaffected by updates to the Java RTE.

Leroy · Jan 11, 2020

Computor shop got me on firefox several years ago. have had no problems except wanting to install updates that I have to click no on a few times a day. This way for a few years now. I will only let repair shop do anything

kcm.MN · Jan 11, 2020

That's a risky decision. The older the software on your machine, the more likely someone has found some way to hack it.

I have Firefox set to ask me before downloading updates. I always allow the download, but am then given the option to install now or to wait. If busy with something else, I'll wait.

Recently, Firefox had updates just a few days apart. I'm assuming the 2nd one was the fix for the problem mentioned in the OP. Seeing as your browser is so out-of-date, it may not have been affected by the new issue.....but I don't know how long this issue has been around.

chuck2015 · Jan 11, 2020

(quoted from post at 14:33:46 01/10/20) This Firefox vulnerability is so bad, the U.S. government is urging users to patch it immediately
Seriously, go update your browser before you even read this.
the article

I use Firefox and thought they were on top of the security stuff. Its a surprise they are not very secure. Is there any browser that has bullet proof security?

Mule Meat · Jan 11, 2020

Got rid of Firefox early last year and started using Bromite browser it is a degoogled browser with an ad blocker that makes anything Mozilla related look like childs play. Will never go back to Firefox or use any Mozilla related product again.

BarnyardEngineering · Jan 11, 2020

Huh. I don't even have Firefox installed on this laptop. That really surprises me.

Bret4207 · Jan 11, 2020

(quoted from post at 10:16:36 01/11/20)
I have FireFox set for automatic updates. It did an update just yesterday.

Same here. I've never had any problems with Firefox.

sotxbill · Jan 12, 2020

(quoted from post at 08:46:45 01/11/20) > So, is it just Firefox browser that is vulnerable? I switched to Chrome a few years ago, and I did not know about the Java threat. I always disregarded the updates Java offered because of slowdowns I had experienced on downloads. But when I switched over to Windows 10 the other day, The Java update window came up and I downloaded it. I thought Java was something necessary for the OS. Am I wrong?

Since the flaw is in IonMonkey, the Java Script just-in-time compiler specific to Firefox, the vulnerability is in Firefox only.

Java is, in general, not required by the Windows operating system. However, there are a number of websites and platform-independent applications that do require Java, so if you were to uninstall it you would likely run into problems.

Just to clarify, Java is a general-purpose programming language that allows a program to be compiled once, then run on multiple platforms such as Windows, Linux or macOS. ("Native" programs, on the other hand, have to be compiled for each platform. These would be written in languages other than Java, such as C++) In order to execute a compiled Java program, a computer must have the Java Run-Time Environment (RTE) installed; that's the "Java" that your update was for.

Java Script is a scripting language that runs inside a browser and is used by many websites to automate various functions. Java Script is tied to the browser and is unaffected by updates to the Java RTE.

Bingo.... I have a lot of older equipment and security cameras that MUST have java to run and display correctly. So I have to be able to use this older protocol in my browsers. So I have to actually pull out internet explorer in a few cases to view the web pages on these older devices. As newer browsers will no longer allow these devices to work... The world has saved me from myself????? Firefox allows me to run a great(free) ad blocker so its always my go to browser.

Texasmark1 · Jan 14, 2020

Imac Safari!

FireFox Browser

Mutt and Jeff

Member

Dale in WV

Member

kcm.MN

Well-known Member

MarkB_MI

Well-known Member

woodbutcher

Well-known Member

kcm.MN

Well-known Member

rustyfarmall

Well-known Member

MarkB_MI

Well-known Member

Leroy

Well-known Member

kcm.MN

Well-known Member

chuck2015

Member

Mule Meat

Well-known Member

BarnyardEngineering

Well-known Member

Bret4207

Well-known Member

sotxbill

Well-known Member

Texasmark1

Well-known Member

Similar threads