Re: Bugs in Browsers: Mozilla & Co. vs. Exploder

2002-12-13 Thread Lukas Ruf
Dear sean, nate, Colin, Jamin, thanks for your replies. Even not appreciated in a mailing list of puritans, I reply to all emails by sending one only -- I assume the Debian mailing list is not a list of mailing list-puritans since many full-quoting-top-posters are seen ,-). * sean finney <[EMAIL

Re: Bugs in Browsers: Mozilla & Co. vs. Exploder

2002-12-12 Thread Jamin W. Collins
On Thu, Dec 12, 2002 at 11:57:22PM +0100, Lukas Ruf wrote: > So, my question is quite easy: wouldn't it be more secure if mozilla > was installed by dselect/apt-get/dpkg with set-uid to nobody.nogroup? (snip) > What do you think? Since you asked, I think it would be a waste of time. Provided you

Re: Bugs in Browsers: Mozilla & Co. vs. Exploder

2002-12-12 Thread Colin Watson
On Thu, Dec 12, 2002 at 11:57:22PM +0100, Lukas Ruf wrote: > Dear all, > > on the one hand one reads about bugs in the Mircosoft Internet > Exploder based on Active Scripting and other holes quite often. On > the other hand, rarely bugs in the Mozilla and Co. are reported. > However, I believe th

Re: Bugs in Browsers: Mozilla & Co. vs. Exploder

2002-12-12 Thread nate
Lukas Ruf said: > What do you think? wouldn't this introduce problems when it came to authenticating with the X server? I mean, another user running mozilla probably cannot just do it. You need to grant that user access to connect to your display. and if multiple users are using mozilla, that in

Re: Bugs in Browsers: Mozilla & Co. vs. Exploder

2002-12-12 Thread sean finney
On Thu, Dec 12, 2002 at 11:57:22PM +0100, Lukas Ruf wrote: > So, my question is quite easy: wouldn't it be more secure if mozilla > was installed by dselect/apt-get/dpkg with set-uid to nobody.nogroup? > /* Of course, this would make impossible to download files into one's >home directory excep

Bugs in Browsers: Mozilla & Co. vs. Exploder

2002-12-12 Thread Lukas Ruf
Dear all, on the one hand one reads about bugs in the Mircosoft Internet Exploder based on Active Scripting and other holes quite often. On the other hand, rarely bugs in the Mozilla and Co. are reported. However, I believe that bugs are human -- without touching the philosophical question whethe