Mozilla ships Firefox 8, adds Twitter search and patches 8 bugs
Automatically disables add-ons installed behind users' backs
Computerworld - Mozilla on Tuesday released Firefox 8, adding Twitter search to the browser and patching eight vulnerabilities.
Since Mozilla kicked off its every-six-week upgrade cycle last summer, each new Firefox has had relatively few visible changes. That held true yesterday.
Firefox 8's most notable addition was Twitter as a choice in Firefox's search bar, letting users look up topics, hashtags and usernames on the micro-blogging service. Twitter search is currently available only in the English, Japanese, Portuguese and Slovenian editions of Firefox.
Mozilla also made good on a promise last August to automatically disable add-ons installed without user approval. Behind-the-back add-ons have cropped up at times, most recently in January when one bundled with Skype caused so many browser crashes that Mozilla blacklisted it. When users start Firefox 8, all add-ons that have been surreptitiously installed are turned off by default.
Other changes and enhancements to Firefox 8 included on-demand tab loading at startup for faster restored sessions, and developer support for additional features of the hardware-accelerated 3D graphics standard, WebGL.
As part of Tuesday's upgrade, Mozilla also fixed eight vulnerabilities, five of them rated "critical," the most-serious ranking in Mozilla's threat scoring system. The remaining three bugs were labeled "high," the next-most-serious rating.
One of the patches was for a data theft bug originally fixed in August when Mozilla launched Firefox 6, but which was reintroduced in Firefox 7 after developers launched a new Windows graphics acceleration framework, dubbed "Azure," in the September upgrade.
Mozilla blamed a Mac-only vulnerability on Apple and Intel, saying that the flaw could let attackers sniff out secrets by monitoring a Mac's graphics processor.
"This problem is due to a bug in the driver for Intel integrated GPUs [graphics processing units] on recent Mac OS X hardware," said Mozilla in the accompanying advisory.
Mozilla yesterday also released Firefox 3.6.24, a security update that patched three vulnerabilities. The aging edition -- Mozilla shipped Firefox 3.6 in January 2010 -- is still supported, in large part because enterprise users have resisted the company's rapid release tempo.
But the end is in sight for Firefox 3.6, as Mozilla has now rescheduled an upgrade offer originally slated for last month that was canceled at the last minute. The pitch, which will urge users to upgrade to Firefox 8, will now appear Nov. 17.
According to plans previously outlined by Mozilla, the company intends to stop patching Firefox 3.6 three months after it offers users the upgrade opportunity.
The dangers of browser add-ons
As of last month, Firefox 3.6 was still the preferred browser of approximately one-fourth of all Mozilla users.
Windows, Mac and Linux editions of Firefox 8 can be downloaded manually from Mozilla's site, while people running Firefox 4 or later will be offered the upgrade through the browser's own update mechanism.
The next version of Firefox is currently scheduled for release Dec. 20.
Gregg Keizer covers Microsoft, security issues, Apple, Web browsers and general technology breaking news for Computerworld. Follow Gregg on Twitter at @gkeizer, or subscribe to Gregg's RSS feed . His e-mail address is email@example.com.
- Workarounds to purge search bar from Firefox's new tab page are available
- Mozilla ships Firefox 31, adds search to new tab page
- Microsoft's IE steps back from the brink of irrelevance
- Firefox falters, falls to record low in overall browser share
- Firefox risks user backlash by adding search box to new tab page
- Google unseats Microsoft as the U.S. browser powerhouse
- Safari, Chrome push to mask URLs
- Chrome on Windows champs at the 64-bit
- Google pulls trigger, cripples some Chrome add-ons
- Microsoft shoots to shorten Internet Explorer's long tail
Read more about Desktop Apps in Computerworld's Desktop Apps Topic Center.
- Architects lead the next generation of data-driven applications Read this whitepaper to find out how application architects can quickly and confidently deliver long-lasting applications that minimize cost, complexity, and risk while...
- HTTP Status Code Cheat Sheet Look at the Graph, Find the Code and Boom - You're Solving Problems. Identifying and understanding common HTTP status codes can go a...
- Simple Solution, Big Capability Meet growing employee and business demands by connecting up to 1,000 users with powerful collaboration capabilities with a single, integrated platform -- Cisco...
- The Business Value of Continuous Delivery Download this whitepaper to learn more about the business value of Continuous Delivery and see why it could be a game changer for...
- Cloud BI in Action: Recorded Webinar of Customer, Kony, Inc. See how Kony, Inc., a leading enterprise mobility company, is using TIBCO Jaspersoft for Amazon Web Services and Redshift to achieve embedded analytics...
- Cloud BI Overview: Jaspersoft for AWS Check out this overview of Jaspersoft for AWS, to easily and affordably build business intelligence solutions as well as embed visualizations and analytics... All Desktop Apps White Papers | Webcasts