Mozilla Gets a New CEO
640986
Mitchell Baker has stepped down as the CEO of Mozilla Corporation, where she helped make the Firefox Web browser a potent rival to Microsoft's Internet Explorer.
143748
The Mozilla Foundation, a non-profit organization dedicated to preserving choice and promoting innovation on the Internet, today announced the worldwide availability of the Mozilla Firefox 1.0 web browser.
573208
Microsoft doesn&#39;t seem to be too worried about the competition of Mozilla with their release of Firefox 1.0. Microsoft isn&#39;t planning on releasing a new version of IE anytime soon, but Microsoft&#39;s director
48430
The Internet giant might need a kick from private equity investors--and a new CEO.
325313
TechWeb - Mozilla updates its Firefox browser to fix 7 flaws, including 4 pegged by the open-source developer as critical.
329699
TechWeb - Mozilla Corp. has hired a former Microsoft security strategist to help secure its open-source software, particularly its Firefox browser.
486327
&quot;Corporate execs are more comfortable with a known brand name. Even though Mozilla (and FF, Camino, K-Meleon, etc.) are based on the same code, they are not &quot;Netscape&quot;. When execs are made aware of the faults and deficiencies of IE, they may think &quot;I wish ...
126206
A Mozilla Corp. executive yesterday blasted Apple Inc. CEO Steve Jobs as "out-of-date" for thinking that the browser battle on the Windows platform is between just Safari and Internet Explorer.
616210
The Mozilla Foundation has unveiled the most complete preview version yet of its stand-alone e-mail application. The release comes only weeks after the launch of its Firefox browser version 1.0, and is part
627059
Echoing the move the Mozilla Foundation made with Mozilla Corp. and Firefox back in 2005, Mozilla Corp. on Monday spun off a for-profit subsidiary to tend to its Thunderbird e-mail client.
47126
Weeks after the launch of its Firefox 1.0 Web browser, the Mozilla Foundation on Tuesday is set to release version 1.0 of its Thunderbird e-mail client.
376162
The Mac maker taps Google's CEO for its board.
629352
(InfoWorld) - Window Snyder, chief security officer at open source browser maker Mozilla, is caught in the crosshairs of the raging browser vulnerability battle. On one hand, her company launched an upgrade to its Firefox browser on Feb. 23 that specifically aims to fix a number of flaws that have been discovered in the program. On the other hand, she's dealing with almost daily reports of newly identified vulnerabilities in Firefox disclosed by a researcher who makes his work public before informing Mozilla of the problems. As trying as the situation may sound, Snyder admits that the day's conflicts come with the territory of her job and those of security experts at every other browser maker. With the high-profile nature of the browser in today's Internet-based economy, working to eliminate vulnerabilities, respond to researchers, and ward-off malware attacks will remain a large part of the daily routine for the foreseeable future, according to the CSO. Snyder said that Mozilla is receiving a lot more customer feedback of late from people concerned about browser security. "The browser is one of most critical pieces of software on the computer in terms of something attackers are going after," Snyder said. "Attacks are constantly changing and every software developer needs to recognize new threats as they emerge, but that's nothing new, we've always considered security to be a top priority." Despite Mozilla's ongoing security efforts, Firefox has come under intense scrutiny from Michal Zalewski, a well-known independent security researcher who has published a collection of previously undiscovered vulnerabilities in the browser during the month of February. The Firefox security update was already delayed several days so that Mozilla could address an issue published by the researcher earlier this month dubbed the location.hostname vulnerability. And on the eve of Mozilla's release of the revamped browser, dubbed Firefox 2.0.0.2, Zalewski published information about yet another flaw in the product involving a memory corruption issue that could allow attackers to take control of computers running the software. Phishing and spoofing threats are among the attacks likely to be aimed at the latest issue, according to Zalewski. Although Snyder said she would prefer it if Zalewski and other researchers would disclose vulnerabilities to Mozilla before taking them public, she said the company relies on such experts to help it keep customers protected from attacks, as painful as the reports may be. "We would prefer that he would notify us first, but more importantly we are glad researchers are looking at Firefox and helping us fix problems," the Mozilla CSO said. "We also see where the researchers are coming from, in terms of their frustration with the amount of time vendors are taking to fix vulnerabilities." Snyder hopes that as Mozilla improves its ability to patch flaws faster, researchers will work more closely with the nonprofit company. The software maker is also developing a range of new security features for use in the Firefox 3 iteration of the browser, code-named "Gran Paradiso," that is slated to arrive sometime in the second half of 2007. Much of the work is focused on improving users' capability to understand and manage their online credentials, the CSO said. Security researchers maintain that attacks on browser vulnerabilities are only going to increase in volume and frequency, in particular during 2007. According to experts at IBM's newly acquired ISS business unit, which is based in Atlanta, the continued emergence of the "exploits as a service" business, through which malware code writers market their attacks to cyber-criminals via underground channels, will only add fuel to the fire. In another daunting development, roughly 50 percent of the browser attacks observed by ISS' X-Force research team during 2006 used encryption to hide themselves and the data they attempted to steal, with the group expecting use of such tactics only to grow during 2007. "Attackers have honed into Web browser vulnerabilities because the amount of protection people have to defend against these types of threats is not as advanced for many end users," said Gunter Ollmann, director of security strategy at IBM ISS. "In addition to the underground communities where exploits are being bought and sold, it's also become much easier for attackers to build engines that sit on Web servers and generate personalized browser attacks." Ollmann said that such threat engines are being armed with increasingly sophisticated levels of programming logic, giving them the capability to look at the specific version of a browser someone is using and launch attacks specifically aimed at the programs. Malware code writers are also sharing libraries of IP addresses known to be used by security researchers to help avoid detection of their latest work, Ollmann said. Another breed of emerging attack attempts to insert itself between end-users' keyboards and browsing programs to steal data and circumvent the security tools being added to the programs. The so-called "man-in-the-browser" threats have already been found lurking in high-value online transactional systems operated by financial services companies, where they seek to intercept valuable information as it entered by customers, said Dr. Chenxi Wang, analyst with Forrester Research. The spiraling complexity of such threats serves as strong evidence that the battle between malware writers and browser makers is only beginning to heat up, and will continue for some time, the analyst said. Wang believes that one answer to the security problem will be for browser makers to adopt more rigorous software development efforts to minimize vulnerabilities, but even those improved processes won't catch every flaw. Microsoft's Security Development Lifecycle (SDL) program, for instance, appears to have lowered the number of vulnerabilities in its newest Internet Explorer 7 browser compared to earlier versions of the product, but the company has already been forced to patch at least one critical flaw in the software, which was released in Oct. 2006. "This is going to be an arms race that is ongoing for the foreseeable future," Wang said. "There is no excuse for people on the defense side not to be more proactive with security and use better mechanisms during software development to protect against future attacks, but the attackers will always have some new approach as well."
320623
Ziff Davis - Q&A: As Mozilla launches Firefox for the masses, the group's president, Mitchell Baker, outlines goals for gaining more Web browser converts and focusing on a development platform play.
604446
Mozilla should soon be experimenting with some novel user-interface technologies for its browser and other products, according to one of its new hires.
640228
Mozilla has hired top employees at Humanized, a small company known for its innovative work in intuitive user interfaces.
364226
Mozilla's open-source browser update is likely to contain a host of new features, including offline support for Web applications and new bookmark and search features.