Mozilla has patched a bug BEFORE ANY known exploit of it. How's that for speed!

The Mozilla Foundation on Wednesday shipped a new version of its flagship Firefox Web browser to patch a serious security hole that could put users at risk of computer takeover.

According to this article, for the entire year of 2004, if you used Internet Explorer and had it patched fully, you were safe 1 week out of the year. The other 98% of the time you were vunerable to attack. Firefox had a 15% window of opportunity and did not become a finished product until November of 2004.

Global security consultancy ScanIT shows Microsoft's Internet Explorer was "unsafe" for 98% of 2004, while rival browser Mozilla was "unsafe" for only 15%...

Contrary to Microsoft claims, Firefox is more secure than IE and always will be, according to Mozilla. The exclusion of Active X alone, seems to verify this claim. :)

SCOTTSDALE, Ariz.--Even with increased popularity, the Firefox Web browser won't face as many security problems as Internet Explorer, according to the president of the Mozilla Foundation.

Recently Linuxense held an open contest to see if anyone could break into one of their Linux servers. The rules were very simple, many tried, but none succeeded.

Status of the Challenge : Over
Challenge period : 9 March 2005 02:00 IST to 13 March 2005 02:00 IST
Winner : none
Out come : Unbroken at the end of 96 hrs
Type of server access given : Remote and Local
Distro used : Adamantix

This article has statistics it claims indicate that Mozilla/Firefox is less secure than IE. Let us all remember that Firefox hit 1.0 status AT THE END of the polling period. They compared a PRE-1.0 product to IE 6 which has been around for almost 4 years. How come no one ever brings up the fact that a bunch of volunteers can create a product that goes head to head with the richest, largest software developer in the world?

MARCH 21, 2005 (COMPUTERWORLD) - The growing popularity of Mozilla-based Web browsers appears to be attracting the attention of the malicious hacking community.

Time for the weekly Linux Advisory Watch from Linux.com.

This week, advisories were released for gaim, kdenetwork, squirrelmail, luxman, hwbrowser, at, bind, openoffice,ipsec-tools, sylpheed, koffice, qt, ImageMagick, ethereal, udev, libXpm, Ethereal, rmtree, curl, cyrus-sasl, gnupg, openslp, tetex, postfix, and squid. The distributors include Conectiva, Debian, Fedora, Gentoo, Mandrake, Red Hat, and SuSE.

As we do every week, we present the Linux Advisory Watch from Linux.com.

This week, advisories were released for clamav, kernel, squid, kppp, helixplayer, tzdata, libtool, firefox, ipsec-tools, dmraid, gaim, libexif, gimp, yum, grip, libXpm, xv, ImageMagick, Hashcash, mlterm, dcoidlng, curl, gftp, cyrus-imapd, unixODBC, and mc. The distributors include Conectiva, Debian, Fedora, Gentoo, Mandrake, Red Hat, and SuSE.

LynuxWorks details there version of Linux capable of EAL-7 security certification, military level.

LynuxWorks says it will ship a new super-high-security operating system in July, 2005 that was designed to meet the very highest levels of military certification. The LynxSecure Separation Kernel will run BlueCat Linux and LynxOS-178 applications within ultrasecure user-mode partitions, LynuxWorks says.

I had to change the title of this article, it didn't make any sense. What you see is my version. This article focuses on the journey SELinux has made towards mainstream Linux adoption.

The National Security Agency built a version of Linux with more security tools that its technologists believe could help make the country's computing infrastructure less vulnerable. They won over the Linux developer community with the changes. But its success depends on the adoption by U.S. companies and government agencies, something that remains very much in doubt.

The week in security warnings, involving the GNU/Linux operating system and all of the open source programs that come bundled with it.

This week, advisories were released for mod_python, bsmtpd, gaim, bind, gnucash, dhcp, at vixie-cron, lam, pvm, radvd, selinux-targeted- policy, tcsh, openoffice, gamin, cmd5checkpw, uim, UnAce, MediaWiki, phpBB, phpWebSite, xli, xloadimage, firefox, squid, kdenetwork, nvidia, curl, uw-imap, and cyrus-sasl. The distributors include Conectiva, Debian, Fedora, Gentoo, Red Hat, and SuSE.

We have written a range of guides highlighting excellent free books for popular programming languages. Check out the following guides: C, C++, C#, Java, JavaScript, CoffeeScript, HTML, Python, Ruby, Perl, Haskell, PHP, Lisp, R, Prolog, Scala, Scheme, and SQL.