Firefox flaws account for 44% of all browser bugs

macgyver2 said:

As for what UAC does I have read so many different opinions on what it does or does not do that I concluded that what I know, it takes up some portion of my HDD space is all it does or ever will do.

Opinions? I can assure you what I am saying in not an opinion. If you want more information on the security implemented in Windows Vista and improved on Windows 7, all you need is to pick up Windows Internals, 5th Edition.

Windows Internals Book

Hello Clickster Welcome to the Se7en Forums! (and the off topic debate it seems!)

So far IE 8 has turned out to be the best version of IE and much better then previous releases. I'm not surprized to hear from someone else finding out that FF has degraded a bit from now seeing too many addons becoming available as well as a list of flaws lately.

Well I won't be buying a book to learn what I know and that is its flawed and didn't do what people say it should and stop a program from installing a second program with admin rights. Granted no security software is 100% fool proof.

macgyver2 said:

Well I won't be buying a book to learn what I know and that is its flawed and didn't do what people say it should and stop a program from installing a second program with admin rights. Granted no security software is 100% fool proof.

If the first program is already running with administrative power. It is already elevated and can do anything it wants that includes installing a second program. UAC cannot defend against that, nothing can. It does exactly what it is suppose to do and what it was designed to do. There is no mystery or magic to it.

Thanks Night Hawk.

I have been reading here for a good while and decided to go ahead and join in the discussion and the community.

well you just proved my point, UAC can't defend against that nothing can. If nothing can protect from one program installing another by stealth even if it has admin power then there is no point in it in the first place. I would think UAC would or should question the second install with the pop message like it does asking me if I want to let program X have net access. Either way we lost the topic here and even my main point that we should protect those whom can't protect themselves either by their choice or not.

*sigh* It is just pointless trying to explain this to you, @macgyver2. Whatever, believe what you want.

10-7

I'd like to re-iterate that FireFox is not as "bad" a threat as these statistics make out - basically people don't seem to be recognising in their posts the difference between a vulnerability and an exploit.

A vulnerability means possible issue. An exploit is an attack. More exploits are targeted at I.E. still than FF as FF has much lower market share.

Additionally FF users often (typically?) install anti-scripting and other security measures so the market share that is vulnerable to exploits is lower than it's full slice of the pie.

Matthew