Mozilla refines Firefox's private browsing, patches 13 browser bugs
Turns to more flexible per-window privacy mode, adopts Safari-style download manager
Computerworld - Mozilla on Tuesday shipped Firefox 20, adding more flexible private browsing and patching 13 vulnerabilities, five rated "critical" by the company's security team.
Along with the privacy change, Mozilla also revamped Firefox's download manager and added a crash tool that warns when a plug-in has hung for at least 11 seconds. Users can then shut down the offending plug-in rather than rebooting the browser.
But the window-based "Private Browsing" option was the most noticeable change to Firefox. Previously, Firefox saved the current tabs and opened a single privacy window, then reloaded the earlier tabs when the mode was shut down. Now users can open a private window but leave the browser, and its already-open tabs, untouched.
In a blog post announcing Firefox 20, Mozilla billed the change as helpful to "shop for a birthday gift" or "to check multiple email accounts simultaneously." Others, however, regularly refer to such browser features as "porn mode" in the belief that that's their primary application.
Per-window Private Browsing puts Firefox almost on par with Chrome and Microsoft's Internet Explorer 10 (IE10), both which offer per-tab privacy modes.
All the major browsers offer a privacy mode of some kind. Safari was the first to add one in 2005, followed by Chrome, then IE and Firefox in 2009, and finally Opera Software's Opera in 2010. They all work much the same, letting users browse without leaving obvious traces in the application by shutting off the recording of sites visited and files downloaded, and preventing cookies and passwords from being saved. Any lingering evidence is purged from the browser at the end of the session.
Along with the window-based Private Browsing add, Firefox 20 also sports a new download manager that gives users a better view on what files are being or have been downloaded, and easier assess to them for launching or opening. Users call up the new tool by clicking a button just to the right of Firefox's search field.
That button location, and most of the features Mozilla instituted, are reminiscent of Safari's download manager, which debuted in July 2011 with version 5.1.
Firefox for Android was also updated Tuesday with per-tab Private Browsing, and Mozilla extended support to some smartphones that rely on less powerful processors from the older ARMv6 architecture, including Samsung's Galaxy Next and Galaxy Q, and HTC's Legend.
Along with the new features, Firefox also received 13 security patches, five rated critical, Mozilla's highest threat ranking, four judged "high," and another four labeled "moderate." One of the vulnerabilities was an Android-only bug.
Of the 13, one of the more interesting was a DLL load hijacking vulnerability in the Mozilla Updater, a component of the company's update service. Mozilla patched a similar flaw last year in the upgrade to Firefox 13.
As in last year's vulnerability, this flaw could be used to load malware on a Windows PC, assuming the hackers had local file system access through other means.
Windows, Mac and Linux editions of Firefox 20 can be downloaded manually from Mozilla's site; already installed copies will upgrade automatically. Users of Firefox for Android users can retrieve the update from the Google Play store.
The next version of Firefox is scheduled to ship May 14.
Gregg Keizer covers Microsoft, security issues, Apple, Web browsers and general technology breaking news for Computerworld. Follow Gregg on Twitter at @gkeizer, on Google+ or subscribe to Gregg's RSS feed . His email address is firstname.lastname@example.org.
- Workarounds to purge search bar from Firefox's new tab page are available
- Mozilla ships Firefox 31, adds search to new tab page
- Microsoft's IE steps back from the brink of irrelevance
- Firefox falters, falls to record low in overall browser share
- Firefox risks user backlash by adding search box to new tab page
- Google unseats Microsoft as the U.S. browser powerhouse
- Safari, Chrome push to mask URLs
- Chrome on Windows champs at the 64-bit
- Google pulls trigger, cripples some Chrome add-ons
- Microsoft shoots to shorten Internet Explorer's long tail
Read more about Web Apps in Computerworld's Web Apps Topic Center.
- How Network Connections Drive Web Application Performance Users around the globe, on all sorts of devices, expect Web applications to function as seamlessly as desktop applications. This paper discusses the...
- Improving IT Efficiencies: Four Advantages of Multi-Tenant Data Centers Increasing demands on IT are forcing organizations to rethink their data center options. For many organizations, that means turning to the flexibility afforded...
- Accelerating Cloud Deployment and Operations with Managed Services Companies that do not have sufficient in-house expertise to either deploy or maintain an IaaS cloud should turn to Managed Service Providers .
- Rethinking IT Operations in the Cloud This paper breaks down the challenges that often prevent the cloud from delivering the fast, flexible and affordable infrastructure companies seek - and...
- NSS Labs & Cisco Present: Evaluating Leading Breach Detection Systems Today's constantly evolving advanced malware and APTs can evade point-in-time defenses to penetrate networks. Security professionals must evolve their strategy in lockstep to...
- Will the Real Endpoint Threat Detection and Response Please Stand Up? This webinar explores new technologies & process for protecting endpoints from advanced attackers as well as the innovations that are pushing the envelope... All Web Apps White Papers | Webcasts