Mozilla ships Firefox 8, adds Twitter search and patches 8 bugs
Automatically disables add-ons installed behind users' backs
Computerworld - Mozilla on Tuesday released Firefox 8, adding Twitter search to the browser and patching eight vulnerabilities.
Since Mozilla kicked off its every-six-week upgrade cycle last summer, each new Firefox has had relatively few visible changes. That held true yesterday.
Firefox 8's most notable addition was Twitter as a choice in Firefox's search bar, letting users look up topics, hashtags and usernames on the micro-blogging service. Twitter search is currently available only in the English, Japanese, Portuguese and Slovenian editions of Firefox.
Mozilla also made good on a promise last August to automatically disable add-ons installed without user approval. Behind-the-back add-ons have cropped up at times, most recently in January when one bundled with Skype caused so many browser crashes that Mozilla blacklisted it. When users start Firefox 8, all add-ons that have been surreptitiously installed are turned off by default.
Other changes and enhancements to Firefox 8 included on-demand tab loading at startup for faster restored sessions, and developer support for additional features of the hardware-accelerated 3D graphics standard, WebGL.
As part of Tuesday's upgrade, Mozilla also fixed eight vulnerabilities, five of them rated "critical," the most-serious ranking in Mozilla's threat scoring system. The remaining three bugs were labeled "high," the next-most-serious rating.
One of the patches was for a data theft bug originally fixed in August when Mozilla launched Firefox 6, but which was reintroduced in Firefox 7 after developers launched a new Windows graphics acceleration framework, dubbed "Azure," in the September upgrade.
Mozilla blamed a Mac-only vulnerability on Apple and Intel, saying that the flaw could let attackers sniff out secrets by monitoring a Mac's graphics processor.
"This problem is due to a bug in the driver for Intel integrated GPUs [graphics processing units] on recent Mac OS X hardware," said Mozilla in the accompanying advisory.
Mozilla yesterday also released Firefox 3.6.24, a security update that patched three vulnerabilities. The aging edition -- Mozilla shipped Firefox 3.6 in January 2010 -- is still supported, in large part because enterprise users have resisted the company's rapid release tempo.
But the end is in sight for Firefox 3.6, as Mozilla has now rescheduled an upgrade offer originally slated for last month that was canceled at the last minute. The pitch, which will urge users to upgrade to Firefox 8, will now appear Nov. 17.
According to plans previously outlined by Mozilla, the company intends to stop patching Firefox 3.6 three months after it offers users the upgrade opportunity.
The dangers of browser add-ons
As of last month, Firefox 3.6 was still the preferred browser of approximately one-fourth of all Mozilla users.
Windows, Mac and Linux editions of Firefox 8 can be downloaded manually from Mozilla's site, while people running Firefox 4 or later will be offered the upgrade through the browser's own update mechanism.
The next version of Firefox is currently scheduled for release Dec. 20.
Gregg Keizer covers Microsoft, security issues, Apple, Web browsers and general technology breaking news for Computerworld. Follow Gregg on Twitter at @gkeizer, or subscribe to Gregg's RSS feed . His e-mail address is email@example.com.
- Google reverses field, promises to restore Chrome's scrollbar arrows
- Update: Google ships Chrome 33, patches 28 bugs
- Mozilla's top exec defends in-Firefox ads, revenue search
- Mozilla taps in-Firefox ads as it searches for more revenue
- Mozilla ships Metro Firefox beta for Windows 8
- Mozilla defers Firefox's new 'Australis' UI to April
- Mozilla resets Metro Firefox ship date to mid-March
- Mozilla ships Firefox 26 with opening click-to-play move
- Mozilla banked $274M in '12 from Google-Firefox search deal
- Google trumpets Chrome's SPDY gains
Read more about Desktop Apps in Computerworld's Desktop Apps Topic Center.
- 15 Non-Certified IT Skills Growing in Demand
- How 19 Tech Titans Target Healthcare
- Twitter Suffering From Growing Pains (and Facebook Comparisons)
- Agile Comes to Data Integration
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
- Is Your Big Data Solution Production-Ready? Read "Is Your Big Data Solution Production-Ready?" now, and discover best practices and actionable steps to implementing a production-ready big data solution.
- Pay-as-you-Grow Data Protection: IBM Tivoli's Full-featured Data Protection Suite for Small to Medium Businesses IBM Tivoli Storage Manager Suite for Unified Recovery gives small and medium businesses the opportunity to start out with only the individual solutions...
- Streamline Data Protection with IBM Tivoli Storage Manager Operations Center IBM Tivoli Storage Manager (TSM) has been an industry-standard data protection solution for two decades. But, where most competitors focus exclusively on Backup...
- Simplify and Consolidate Data Protection for Better Business Results Learn about IBM® Tivoli® Storage Manager Operations Center, which provides advanced visualization, built-in analytics and integrated workflow automation features that leapfrog traditional backup...
- Webinar: Building a Big Data solution that's production-ready Big data solutions are no longer just a nice-to-have.
- Meg Whitman presents Unlocking IT with Big Data During this Web Event you will hear Meg Whitman, President and CEO, HP discuss HAVEn - the #1 Big Data platform, as well... All Desktop Apps White Papers | Webcasts