Firefox 1.5.0.5 out and be cautious with extensions…
Well, let’s start with the extensions first. Like ANY software, you should be cautious installing something from an untrusted source. If you think an extension looks neat and cool – look for reviews and third party information before installing it. That much said…. never install an extension that comes attached as an unexpected email…. Apparently, just that has been happening a password stealing trojan has been showing up as an email attachment that appears to be a firefox extension. OK – quick review – what’s the weakest link in computer security (grab mirror and look….) Now… Mozilla has also released some security updates for Firefox….
The security fix has a story on the update here. It should be noted that there are NO updates for the 1.0.x series…. please upgrade to 1.5.0.5 to get the latest security updates. This fix includes patches for about a dozen security vulnerabilities. I’ve seen comments reporting some stability problems with online videos although I can’t confirm (seem to be windows based). I would tend to think about the security update first and deal with online video problems later.
Sans has information on the Mozilla updates (Firefox THUNDERBIRD and seamonkey. They also have details (links) to information on the vulnerabilities addressed, so if you want the details – that’s a good place to look.