|
Re: Seems that Firefox had its own problems....
de »Q« 04/22/2006 09:00
Craig <netburgherAT@gmail.com> wrote in
<news:oun2g.74203$dW3.39414@newssvr21.news.prodigy.com>:
> bambam wrote:
>
>> »Q« <boxcars@gmx.net> wrote in
>> »news:MrQ97ACC3B26B35FitsmeitsQ@QsFQDN.dyndns.org:
>>
>>>> What about this (taken from ZDNet's gouru George Ou)
>>>> http://blogs.zdnet.com/Ou/?p=154
>>
>>> That page now says, "I have to retract any incorrect statements
>>> and apologize to the Mozilla foundation [sic] for the
>>> misunderstanding based on a bad source that seemed legitimate at
>>> the time." And he's struck out the incorrect statements you had
>>> cut-and-pasted.
>>
>> He just about crossed out the whole article, bet that hurt. ;)
>
> Sure beats what his source (The Burning Edge) apparently did
> though...He just hit the big <del> key as if it never happened.
>
> mistake? where?
I'm not what Ou was talking about, but I can take a guess. After a new
security fix is released, the Mozilla folks do wait a little while to
make all the technical details of the security issues available, to
give people enough time to update. Those details are in the bugzilla
entries. So for a while, the bugzilla entries aren't available to bad
guys or to "gourus" with weblogs.
During that time, the only info available about those bugs is in the
Mozilla Foundation Security Advisories. Ou says his editor gave him
the link to them after he had published his incorrect blog entry.
It's amazing that he didn't know about them before that; they're
easily found by anyone visiting mozilla.org looking for security info,
so I guess he didn't look for security info.
<http://www.mozilla.org/security/announce/>
Jesse Ruderman of The Burning Edge doesn't link to MFSAs, but rather to
bugzilla entries. There'd be no point in linking to bugzilla entries
which weren't available, so I guess he listed them as "undisclosed",
and Ou misunderstood that to mean that the Mozilla folks had released
/no/ information about them. Once the bugzilla entries were viewable,
my guess is that Ruderman just replaced the "undisclosed" bit with
links to bugzilla; this wasn't correcting a mistake, just updating the
info.
Again, I'm just guessing based on the way Mozilla works and the way The
Burning Edge works, but ISTM Ou wrote an embarrassingly wrong blog
entry and didn't want to take full responsibility for his
misunderstanding and lack of research.
--
»Q«