October 3rd, 2006 by Atomictumor
So a couple of hackers at a recent geek convention in San Diego demonstrated that there is a massive exploit available in Firefox with regards to the way the browser handles Javascript. The duo has elected, however, not to share the exploit with Firefox, which seems kinda wierd to me.
Regardless, Mozilla is taking it seriously, and apparently word around the campfire is that Firefox’s once vaunted security is all hype. Theres a lot of people taking it further, stating that open source is insecure by nature because it allows all the troublemakers and script kiddies access to the code in order to find these exploits.
Poppycock, I say. The only reason for closed source (i.e., where you can’t read the source code) software is copyright. Pure and simple. While open source allows anybody to see it, meaning these bad people can find Java exploits and holes, it also allows ANYBODY TO SEE IT, meaning that all these smart college kids with nothing to do and an aim to get a name out on the internet to pad their resume can find these holes and patch ‘em before they’re exploited.
Which is what I still can’t understand about these electronic voting systems, because they’re running on closed source, proprietary software. In MY America, the voting system is transparent, but I guess then the terrorists could use it to steal elections…
October 3rd, 2006 at 8:49 am
I don’t usually get the geek technotalk around here, but even I got this one. Nice post.
October 3rd, 2006 at 8:59 am
Atomictumor.com - Bringing geek to the biologists of the world.
October 3rd, 2006 at 9:12 am
http://developer.mozilla.org/devnews/index.php/2006/10/02/update-possible-vulnerability-reported-at-toorcon/
“The main purpose of our talk was to be humorous.”
Apparently, there is no sense of humor in open source. But yeah, the voting machines are not progress.
October 3rd, 2006 at 9:18 am
HA!
So what we have here is a case of something small being blown way the hell out of proportion!
Cool.
October 3rd, 2006 at 11:08 am
Not only does open source give all the “smart college kids” a chance to make a name for themselves developing patches, Mozilla also offers $500 cash for turning in a legitimate security flaw. Whether you know how to patch it or not.
That’s enough to entice a lot of smart kids.
October 5th, 2006 at 3:57 am
It now appears that the hacker exaggerated his claims… maybe that’s why he didn’t try to claim the $500. ZD Net
October 5th, 2006 at 5:39 am
Yah, funny huh? Evidently it was all “a big joke”