Firefox 7 Released!

LazyLion

King of de Jungle
Joined
Mar 17, 2005
Messages
107,422
Reaction score
9,942
Location
District 9
http://nakedsecurity.sophos.com/201...um=status+message&utm_campaign=naked+security

Firefox 7 security fixes, http vs https and data collection

FirefoxMozilla has released Firefox 7, the latest incarnation of their popular web browser.
Recently Firefox has been getting through new version numbers faster than a fat man chasing a ice cream van.
The reason for the rapidly increasing version number? Well, it seems to be for no reason other than to please users who may incorrectly link a higher version number with something being "cooler".
Most of the headlines about Firefox 7 are making much of the claim that it's said to require less RAM. In fact, a lot less memory. Firefox developers have claimed that version 7 can use up to 50% less memory than previous versions.
When you come to update to Firefox 7, you'll be asked if you would also give permission for Mozilla to collect anonymous data on your installation's memory usage and performance. Presumably the developers want to use this information to make their code even tighter in the future.
The good news is that this data is anonymised, sent over https, and only collected if you give permission (in other words, it's opt-in).
Performance data option
You can turn off the data collection at any time if you change your mind.
A cosmetic, but security-related, change which Mozilla has introduced with Firefox 7 is found in how the browser presents URLs in the address bar.
As you can see in the examples below, Firefox now hides the "http://" in website addresses.
http website via Firefox 7
But things look different if you visit a website configured to use https instead:
https website via Firefox 7
Firefox is actually following in Google's footsteps with this look. (You see! Firefox doesn't just copy Chrome when it comes to rampant version numbers!) The Chrome web browser already suppresses the "http://":
http website via Chrome
And here's what Google Chrome looks like when you visit an https website:
https website via Chrome
These changes are probably designed to make the web friendlier for those who are put off by geek slashes in URLs. What's probably a more important driver for updating is that Firefox 7 includes a number of security patches.
Firefox 7 security fixes
The most serious vulnerabilities fixed in Firefox 7 are rated "critical" which means that they could be used by malicious attackers to run dangerous code and install software on your computer, without user interaction.
In short, if you don't keep your web browser patched cybercriminals might exploit a vulnerability to install malware on your computer.

Get it here....
http://www.mozilla.org/en-US/firefox/new/
 
Ok. Now if only they can get their plugin makers to follow the same release schedule all would be wonderful.
 
I'll try it. I hate Chrome, I've realized. I hope my slowdown issues with FF are solved in this release.
 
I'll just wait till ff v 58 comes out at the end of the year featuring a sparkling home button.
 
Firefox is annoying with all its updates lately. All browsers suck without their addons and I haven't seen an option in Firefox to check if my addons work with the newer version before installing it, hell even downloading and installing it manually the damned thing will only check addon compatibility and tell you which will no longer work after its installed.

Topping of their updates the last time I tried "Check for Updates" on Firefox's about dialogue the damned thing just started downloading without an option to stop/pause or any other info, had to terminate the damned thing.

If they want to go all willy nilly with their updates they should at least streamline it first, until then they can release Firefox v95 and I wouldn't care because it's to much of a pain to see if "my" Firefox will still work after updating.

I hope they pull their heads out of their rear orifice and give Firefox a useful easy to use update center in the browser.
 
Last edited:
Why would they want to hide the http part of the address? For me thats the most important part of the address.
Sticking with 3.6
 
Why would they want to hide the http part of the address? For me thats the most important part of the address.
Sticking with 3.6

Yes, the HTTP Part is hidden, but when you log onto an HTTPS site there is a blue or green bar in front of the address which lists the registered company associated with that secure site.
So it is even more obvious to see when you are actually on a secure site. And then the full HTTPS is visible.

It is only the normal HTTP sites that are hidden.
 
Ok. Now if only they can get their plugin makers to follow the same release schedule all would be wonderful.

It must be difficult to keep up with weekly versions

I think i will just move to chrome this is getting stupid now.
 
Last edited:
Yes, the HTTP Part is hidden, but when you log onto an HTTPS site there is a blue or green bar in front of the address which lists the registered company associated with that secure site.
So it is even more obvious to see when you are actually on a secure site. And then the full HTTPS is visible.

It is only the normal HTTP sites that are hidden.

works well in chrome for me.
does ff7 kill www. prefixes? i hate those.
 
Right, finally got it...two hours after first attempting to fight the hordes in the download queue.

Let's see if they've actually managed to sort out the memory leaks...because I really heart my Firefox. :D
 
Top
Sign up to the MyBroadband newsletter
X