IWETHEY v. 0.3.0 | TODO
1,095 registered users | 0 active users | 0 LpH | Statistics
Login | Create New User
IWETHEY Banner

Welcome to IWETHEY!

New So, how do I sell Mozilla?
I sent my new boss a copy of the CERT recommendation that we drop Internet Explorer for Mozilla, and indicate that we can do this as soon as we roll out the next version of Siebel. I also mention that we should begin planning now rather than later, due to testing requirements, etc.

So, now he wants to talk about it on Tuesday.

I'm planning on covering the following points:

Internet Explorer has key components integrated tightly in to the Windows OS.
These key components increase the vulnerability of the system due to buffer overflows, etc.
Microsoft has x unpatched security flaws in IE that are known, that have not been addressed despite public knowledge of them.
There is software which will fixe IE's problems, but it's better to have a more secure base than to wrap it with security.

Mozilla is a "single directory, all-inclusive" install - this also makes updating easy.
Bugfixes are quick due to the nature of open source development.
Stable and mature.


Anybody got any good ideas or suggestions? Presentations you've made to sell it? Etc?
Tired of lying in the sunshine staying home to watch the rain.
You are young and life is long and there is time to kill today.
And then one day you find ten years have got behind you.
No one told you when to run, you missed the starting gun.
New One thing to note...
...Mozilla, as I have been reminded as recently as last week, is still pre-1.0 software. There are times where, if you upgrade versions of it, it will refuse to start due to a problem with your user directory. In my case, it boiled down to something amiss in the prefs.js file. The problem, however, is that it failed silently. Caused much anguish before I bothered to figure out exactly what the problem was.

So if you are able to convince him to move to Mozilla, be sure you pick a version and stick with it...

Sorry, no help on your real query here, but it's something that you should know first.
-YendorMike

[link|http://www.hope-ride.org/|http://www.hope-ride.org/]
New not quite
Firefox is pre 1.0 (0.9.1 currently)

Mozilla has been past 1.0 for quite some time, 1.7 currently.
--
Steve
New While you're right technically...
...Any software that refuses to start with no meaningful error message when all you've done is upgrade versions fits into the "pre-1.0 release" realm in my book. :)
-YendorMike

[link|http://www.hope-ride.org/|http://www.hope-ride.org/]
New gotcha, agreed!
--
Steve
New Well, you screw with it'sd settings all the time.
WTF you expect?

Internet Explorer does the same thing... the only difference it start with a "sane" set of defaults should things be borked.

Personally I'd rather it fail... quietly no... but fail none the less.

--
[link|mailto:greg@gregfolkert.net|greg],
[link|http://www.iwethey.org/ed_curry|REMEMBER ED CURRY!] @ iwethey

Heard near the SCOG employee entry/exit way:

  Security: We got another Mass Exodus Doorway Jam.
New Actually, no, I don't.
Prior to the breakage experienced last week, I hadn't installed anything new into Mozilla in at least a couple of months. I'd been through quite a few minor upgrades to Moz, and none of those broke.

I think the last thing I installed was one of those tab extensions you'd pointed to a while back. I had that and the User Agent Switcher installed. That's really about it.

The UA switcher hasn't made it back into my latest install yet cuz I haven't had a burning need for it.

And I still hold that an application that fails because it can't read its own configuration file(s) and gives the user no reason as to why (even when run under strace mozilla) is pre-1.0. If it wants to fail, that's perfectly alright. But tell me "Unknown configuration element at /home/mike/.mozilla/default/mumble/prefs.js, Line 103: Element glarblefark=Y not known."
-YendorMike

[link|http://www.hope-ride.org/|http://www.hope-ride.org/]
New LRPD!
Option garblefark=y not known.
-drl
New And we have read...
...The Book of LRPDism.

Hand scribed notes of the creator.

Wow ;-)



If you push something hard enough, it will fall over. Fudd's First Law of Opposition

[link|mailto:bepatient@aol.com|BePatient]
New Re: And we have read...
One of the creator's obsequious minions saw fit to inscribe therein, a missive from the creator himself!
-drl
New Sounds like y'all got the redacted version
The originals are still safely hidden from those who have not tasted the true fruit of knowledge.
New You don't understand
At the party.
The admin.
Notebook in hand.

It was like watching Moses carve the tablets.
New Re: You don't understand
I now present these 15 pages..

(splash)

10 - 10 pages of LRPDisms!
-drl
New But I have tasted...
...and the fruit is sweet.

But to witness creation as opposed to just admiring the results of said creation...priceless.

I have seen the Power and the Glory.

(any more of this and I'm gonna have to fork it to Religion)
If you push something hard enough, it will fall over. Fudd's First Law of Opposition

[link|mailto:bepatient@aol.com|BePatient]
New Only experienced that once
when I foolishly installed-over an existing directory ["Mozilla"]. I also found the .js connection, on that event. It is also true that the Moz notes suggested *against* "installing over", though with only vague 'whys'.

My reasoning was, were I to Uninstall present version first: Am I Sure that a ton of mail + humongous b/mark files, prefs wouldn't also disappear (though backed-up on CD, natch). I have yet to test this thesis. Why bother?

At least 5 installs since that ~ 1.x-RC1, each in its own directory, "Mozilla16, Mozilla17" etc. - never had an iota of a problem; all the necessaries from bookmark to mail being perfectly accessed.

And I don't know shit.

(But yes - utter newbie would have to be Shown/Told - "you must alter the default file location of /yada/'Mozilla' during Install: to its new designation, on each upgrade.) Maybe that's an onerous thing in bizland '04. But compared to IE ..


Ashton
New Stick it on eBay.
ba-dum TISH.


Peter
[link|http://www.debian.org|Shill For Hire]
[link|http://www.kuro5hin.org|There is no K5 Cabal]
[link|http://guildenstern.dyndns.org|Blog]
New Please also stress...
That the "tight" integration with windows* is/was a design decision they are not going to go back on. Has been addressed many times by security people and media et. al..

This single decision cascaded into multiple design decisions to "speed up" and "optimaze" (no, not optimize) the conversation of IE <--> IIS a Traditional request and response session is not required from IE if talking to an IIS server. But any other browsers get the response as an IE, which of course they regurgitate and signal the IIS webserver that it responded wrong, which then IIS defaults back to the proper request response conversation. This has the effect of IIS appearing to SMOKE on IE, but could have significant issue with MITM (Man in the middle) snoops using IIS default response setup to be transparent. Yes it is more difficult than just doing it, but if it is possible... more than likely someone is working on a way to "make useful" the technical snafu.

The non-traditional response sequence causes additional traffic to have to be routed through the Internet, for those non-IE browsers. Another effect, that most Other Webservers in use on the internet fall into the category of traditional request response sessions. Which then causes additional traffic to be required for the IE browser to correctly request and respond to the webservers that are not IIS.

Seeing as IE (Right Now) is the PreDominant Browser, barring cliques like us that use Gecko based browsers heavily, and that the pre-dominant Webserver is apache... you do the piece together.

If you want proof, watch a conversation with IE & IIS, IE & Apache, Mozilla & Apache. Server the exact same page. Just a basic Hello with title page. Capture the entire coversation each time and look.

Good Luck.
--
[link|mailto:greg@gregfolkert.net|greg],
[link|http://www.iwethey.org/ed_curry|REMEMBER ED CURRY!] @ iwethey

Heard near the SCOG employee entry/exit way:

  Security: We got another Mass Exodus Doorway Jam.
New Be historical
Point out the proceedings in the trial where it was demonstrated how Windows and IE were joined at the ass.

And you're not selling. You don't sell to the boss. You calmly and objectively hold out a tray with chocolates and turds, then hope he can smell.
-drl
     So, how do I sell Mozilla? - (inthane-chan) - (17)
         One thing to note... - (Yendor) - (13)
             not quite - (Steve Lowe) - (11)
                 While you're right technically... - (Yendor) - (10)
                     gotcha, agreed! -NT - (Steve Lowe)
                     Well, you screw with it'sd settings all the time. - (folkert) - (8)
                         Actually, no, I don't. - (Yendor) - (7)
                             LRPD! - (deSitter) - (6)
                                 And we have read... - (bepatient) - (5)
                                     Re: And we have read... - (deSitter)
                                     Sounds like y'all got the redacted version - (ChrisR) - (3)
                                         You don't understand - (broomberg) - (1)
                                             Re: You don't understand - (deSitter)
                                         But I have tasted... - (bepatient)
             Only experienced that once - (Ashton)
         Stick it on eBay. - (pwhysall)
         Please also stress... - (folkert)
         Be historical - (deSitter)

Why, that looks so dangerous - I'm sure I'll learn something wonderful!
216 ms