Mozilla's Firefox Patches Have Same Lifespan as a Mosquito

Status
Not open for further replies.

theclash150

Honorable
Aug 30, 2012
29
0
10,540
[citation][nom]john_4[/nom]I'll stick with Safari on OS X and if I want to cruse some porn I fire up my Linux laptop.[/citation]

Yes, because Safari is sooooooo awesome. Good one, iMoron.
 

michalmierzwa

Distinguished
Sep 25, 2008
80
0
18,630
Scientists should place their time into more productive findings, like how much time we, humans have to wait in a lifetime each time OS' loads up :)
 

mrmaia

Distinguished
Aug 9, 2011
598
0
19,010
[citation][nom]john_4[/nom]I'll stick with Safari on OS X and if I want to cruse some porn I fire up my Linux laptop.[/citation]

LOL @ anyone who defends that "Mac OSX and Linux can't get infected" stuff.

BTW what was the point of this study? I think that if a patch can be released in 4 days, that's great and needs to be carried on. Well done, Mozilla.
 
I have no problems or even a concern about an expedited patch. Which is worst dragging your feet and allowing a 'long lifespan' of exploit or fixing it ASAP??!! Makes absolutely no sense to argue over this??

What are you suggesting to leave an exploit/security hole open longer like other browsers?? Come on.
 

willard

Distinguished
Nov 12, 2010
2,346
0
19,960
[citation][nom]mayankleoboy1[/nom]Linux is quite secure.Because retarded users dont use linux......[/citation]
It's also quite secure because it has tens of thousands of developers examining the source code and patching bugs, and have been for decades.

Nothing can protect a system from a stupid user that grants a malicious process root privileges, or from bad software that has root and can be exploited. Linux just has a sturdier foundation to start from than other operating systems.
 

willard

Distinguished
Nov 12, 2010
2,346
0
19,960
[citation][nom]Jaquith[/nom]I have no problems or even a concern about an expedited patch. Which is worst dragging your feet and allowing a 'long lifespan' of exploit or fixing it ASAP??!! Makes absolutely no sense to argue over this?? What are you suggesting to leave an exploit/security hole open longer like other browsers?? Come on.[/citation]
First of all, nobody is saying this is a bad thing. They're saying it's good, because patch turn-around time is lower.

Second, the "fix it now at all costs" strategy is the worst possible way bugs can be addressed. Trying to fix something before it's fully understood often does more harm than good, introducing other bugs or addressing symptoms and hiding the real problem.

For example, I ran into a situation much like this yesterday. A critical bug was discovered in a piece of software I work on. We got together immediately, discussed what was happening and decided on a plan of attack. Within 30 minutes, we had a fix for the bug. However, we spent the next couple hours validating and verifying our assumptions.

The risk of keeping a well understood problem around a little while longer is very small. The risk of deploying something you don't understand is very large.
 

freggo

Distinguished
Nov 22, 2008
2,019
0
19,780
Think of a 'patch as a 'recall'.
Now imagine ANY other industry had that many product recalls :)

It is quite amazing what Software companies are getting away with.
 

mobrocket

Distinguished
Feb 28, 2011
591
0
19,010
[citation][nom]freggo[/nom]Think of a 'patch as a 'recall'.Now imagine ANY other industry had that many product recalls :)It is quite amazing what Software companies are getting away with.[/citation]

but unlike recalls, software patches can be done proactively.. they find the error and want to fix it...
auto companies do them reactively seeing the cost benefit of doing recall over lawsuits and fines
 

vittau

Distinguished
Oct 11, 2010
221
0
18,690
[citation][nom]freggo[/nom]Think of a 'patch as a 'recall'.Now imagine ANY other industry had that many product recalls :)It is quite amazing what Software companies are getting away with.[/citation]
I'm sorry but this is a poor analogy. For instance, does patching your software give you the same headaches a car recall would? Not to mention these are two completely different universes with completely different problems and challenges.
 
You can't compare a patch to a car recall - at best, you can compare it to a modification on how the car is assembled. It wasn't that long ago that, say, the Peugeot 205's manufacturing process was tweaked so often that it is now considered that no more than 5 cars of the series were exactly identical - here, a different way to fold the iron sheet, there a slightly different bumper bolt, or there a different diameter pipe for the fuel line... Once a year maybe, a more major overhaul would be made to formally integrate those tweaks and add some that the engineers came up with, or a new engine block, or whatever.
The end result was that the car gradually became better and better; the first ones were good, and perfectly usable cars, but the latter ones had slightly better handling and were a bit safer, had better mileage, and when older, would have less rattling pieces all around. It was pretty much the same car at the beginning and at the end, with the same qualities and failings - but the former were improved and the latter smoothed.
Japanese car makers were very, very good at it - US car makers much less so, preferring to get a completely new model out once every couple of years.
Now, compare Firefox or Chrome to Internet Explorer: IE typically is slightly above the competition when it gets out, is caught up with in a matter of weeks, and is left in the dust 6 months later - and you have to wait for an extra 18 months to get the new one.
Having taken part to the IE9 beta program (bug reports etc.) I can tell you that Microsoft's turnaround on fixes, even on software which isn't out yet, is the crappiest of all browser makers out there: it took from 2 to 7 months for a bug report, complete with reproduction steps, to be acknowledged, and it was 50/50 between a WONTFIX resolution and a fix.
Compared to that, Mozilla is a dream to work with.
 

Gundam288

Distinguished
Sep 23, 2011
281
0
18,790
[citation][nom]freggo[/nom]Think of a 'patch as a 'recall'.Now imagine ANY other industry had that many product recalls :)It is quite amazing what Software companies are getting away with.[/citation]
True.

But it shouldn't apply here, given that Firefox is free.
 

Achoo22

Distinguished
Aug 23, 2011
350
2
18,780
[citation][nom]freggo[/nom]Think of a 'patch as a 'recall'.Now imagine ANY other industry had that many product recalls :)It is quite amazing what Software companies are getting away with.[/citation]

This is a great analogy. It's about time that we require certification to practice software development professionally. It would render software production companies liable for the software they produce - despite ridiculous EULAs and disclaimers which rarely hold up in court as it is - in addition to injecting a much-needed shot of ethics into an industry that is very sorely lacking.


All that said, Firefox needs to gather its senses and come up with production plans that don't require a hundred band-aid stopgap fixes. They are like a kid doing paper mache - adding more code doesn't translate to an improved product.
 
Status
Not open for further replies.

TRENDING THREADS