Zero days in browsers

Topic

New Reply

Now while Chrome has more foundation in security than Internet Explorer did, it’s a reminder that if you are someone who also holds back on updating y
[See the full post at: Zero days in browsers]

Susan Bradley Patch Lady

4 users thanked author for this post.

abbodi86, wEarwOlf505cole, JohnW, AlphaCharlie

Reply | Quote

Replies

Susan Bradley wrote:

Edge is also based on Chrome and thus updates soon after. Other browsers built on the Chrome base include Opera, Vivaldi.Brave, Opera Neon, Comodo Dragon, SRWare Iron (among others).

No thanks, too close to Google, and I have neither trust nor faith in anything Google other than their hoovering up every little bit of data they can from anything they can get their tentacles into.

Sure, they have zero day exploits, too, but I still trust Mozilla/Firefox more than Google/Chrome.

Create a fresh drive image before making system changes/Windows updates, in case you need to start over!

We all have our own reasons for doing the things that we do. We don't all have to do the same things.

Computer Specs

6 users thanked author for this post.

Steve S., GeeBeeDee, Mark, Microfix, Biiljoy, Fred

Reply | Quote

there are many more good browsers, safe for larger environments too….
perhaps is good to concider that a browser doesn’t need all the functionality to open or pass through everything from the wwweb.

* _ the metaverse is poisonous _ *

Reply | Quote

Just a few days ago Chrome patched it’s 6th zero day this year. Ensure that you are on 105.0.5195.102

Chrome also patched a nasty video bug in Windows and Android.
Edge still has the bug and Microsoft take its time for a fix.

Reply | Quote

What’s nasty about it? Is it a security issue?

Windows 11 Pro version 22H2 build 22621.1485 + Microsoft 365 + Edge

Reply | Quote

Without Firefox ESR there were be zero reason to even have a computer. The internet is NOT a place one wants to go UNLESS one has PRIVACY and only Fx ESR provides it. I’m a Netscape over IE person from way back in the late 90’s. I haven’t even moved to the Fx ESR 102 branch. I am still on 91.13 for a few more weeks. A browser is the LAST thing I update (except for security patches) and the only other browser I have used and liked besides Netscape, Mozilla Suite, and Fx from its inception is Basilisk. I still have Basilisk as my default browser even though it is no longer developed. It is forked off Fx 52.9 ESR and that was the last Fx that was really great. Still, newer Fx versions are a million times better than other browsers. I can’t get used to Brave as it can’t hold a candle to Fx 91 ESR and Vivaldi I abandoned a year or so ago when it got so extremely cluttered and irritating. As for Google Chrome browser, you couldn’t pay me to use it.

6 users thanked author for this post.

SueW, Charlie, Mark, Microfix, alejr, Fred

Reply | Quote

Mele20 wrote:

I’m a Netscape over IE person from way back in the late 90’s.

Also a big Netscape over MSIE (or Chrome, or Edge, or… pretty much any other browser) fan, but I started out using NCSA Mosiac back in 1993, then progressed to Netscape Navigator, Netscape Communicator and, when Mozilla decided to turn Netscape into Firefox and strip out all the extra features, SeaMonkey (an “open source” continuation of Netscape) which is my current browser.

Reply | Quote

Don’t forget Netscape Composer, along with Internet Assistant (an add-on for Word 95) which I used to produce my first web pages back when.

 

Reply | Quote

I don’t see version 105.0.5195.102. I checked Edge at 7:51 a. m. Pacific time today, Wednesday September 7, and Edge reports that it is up to date with version 105.0.1343.27.

Reply | Quote

280park wrote:

I don’t see version 105.0.5195.102.

That’s Chrome, not Edge.

280park wrote:

I checked Edge at 7:51 a. m. Pacific time today, Wednesday September 7, and Edge reports that it is up to date with version 105.0.1343.27.

That is the latest Edge.

Windows 11 Pro version 22H2 build 22621.1485 + Microsoft 365 + Edge

1 user thanked author for this post.

280park

Reply | Quote

b wrote:

What’s nasty about it? Is it a security issue?

Doesn’t load/play videos in many sites.

Reply | Quote

Half a dozen out of 1.7 billion is not “many”.

Windows 11 Pro version 22H2 build 22621.1485 + Microsoft 365 + Edge

Reply | Quote

Webkit/ blink rendering chromium based browsers are the new ‘adobe flashplayer’ 😛

Keep IT Lean, Clean and Mean!

Reply | Quote

Chrome and Edge are just my backup browsers, thankfully. 🙂

I keep Firefox, my default browser, updated to the latest stable release.

1 user thanked author for this post.

Microfix

Reply | Quote

I have said myself before that I held onto Firefox ESR 78.15.0 for almost a whole year because I don’t like the changes brought in Firefox 89+ and 91 ESR, and I only recently updated to Firefox ESR 91 after I found a way to revert the unwelcome change to one I can accept.

Contrary to what you recommend, Susan, I believe security risk has to be balanced against other things like usability. I am one to hold back on browser updates (without nags), for a long time if necessary, if it prevents me from working in the way I want. That is why I use Firefox ESR (with NoScript), because it allows me to do just that, not to say the privacy problems which Chrome (and perhaps Edge also) is notorious for.

By the way, perhaps someone can tell me, as a normal user (not Enterprise), how I can prevent Chrome automatic updates from kicking in when connected to the internet? I have been testing that in virtual machines but so far I have been unsuccessful.

Does stopping these services in Windows as instructed here works?
https://www.makeuseof.com/tag/stop-automatic-chrome-updates-windows/

Hope for the best. Prepare for the worst.

Reply | Quote

James Bond 007 wrote:

By the way, perhaps someone can tell me, as a normal user (not Enterprise), how I can prevent Chrome automatic updates from kicking in when connected to the internet? I have been testing that in virtual machines but so far I have been unsuccessful.

Actually, that link is only “partially” right.

If you disable both of those services, you won’t be able to update Chrome at all, even “manually” using the Help > About Google Chrome menu option.

To stop the “automatic” updates, only disable the Google Update Service (gupdate) service and you’ll still be able to “manually” update it when desired.

Reply | Quote

I use Waterfox “classic” (fork of pre-Quantum FF) that gets security updates about every 2 months.  I do have a UA setting extension that currently I have UA set to FF 60.0.  But some MS sites don’t like my browser (Github is my biggest problem) so I end up having to use Edge on those.

 

Like others here had gone from text-mode Lynx to Mosaic.  I was on OS/2 and for Warp IBM rolled their own browser, but IBM gave that up and switched to Netscape as the default browser.  So have been in the Netscape/Firebird/Firefox eco system ever since.

Reply | Quote

I still use IE11 with agent switcher. My other browser is Firefox 60ESR, it has worked best but might have to move to 68ESR soon since some addons are not working.

 

Will not use Edge or Chrome since too much spyware in them, MS has added more to Edge than Google did.

Reply | Quote

b wrote:

Half a dozen out of 1.7 billion is not “many”.

I assure you there are billions with this problem on Windows (Chrome, Edge), Android (Chrome)… they just didn’t register to Chrome bugs forum to report.

Google has fixed the bug in Windows and Android within days (even fixed beta version) while Microsoft is sleeping.

Reply | Quote

I was referring to the number of sites affected (which your “many” represented). I could only find six at the link you provided.

Windows 11 Pro version 22H2 build 22621.1485 + Microsoft 365 + Edge

Reply | Quote

Alex5723 wrote:

Microsoft is sleeping.

I just tested five videos at the example URLs reported at your link and they all work fine in Edge (105.0.1343.33).

Windows 11 Pro version 22H2 build 22621.1485 + Microsoft 365 + Edge

Reply | Quote

See https://www.sport5.co.il/articles.aspx?FolderID=7803&docID=414477

I get a blank frame instead of video.

Issue 1358542 in chromium has many other examples.

Reply | Quote

Alex5723 wrote:

See https://www.sport5.co.il/articles.aspx?FolderID=7803&docID=414477

I get a blank frame instead of video.

That video plays fine for me in Edge.

Alex5723 wrote:

Issue 1358542 in chromium has many other examples.

There you go with “many” again.

I tested all the video URLs that I could find listed in that issue.

Windows 11 Pro version 22H2 build 22621.1485 + Microsoft 365 + Edge

Reply | Quote

b wrote:

That video plays fine for me in Edge.

Not for me and couple of friend using Edge Version 105.0.1343.33 (Official build) (64-bit) . It doesn’t even load.
Windows 10 Pro 21H2 Aug. updates.

Reply | Quote

All those videos also play just fine in Edge v105.0.1343.33 on my PC.

Try “temporarily” disabling your Edge extensions and see if that lets it play?

The “easy” way to do this is create a new shortcut (msedge.exe −−disable-extensions) to start Edge and it’ll “act” as if no extensions are installed (i.e. the extensions item will be grayed out.)

This way you can “test” for any possible extension problems while your “regular” shortcut will still start it with all the extensions enabled.

If that works, then one of your extensions is causing your problem.

BTW, this process also works for Chrome and most other “Chrome based” browsers.

Reply | Quote

I may be missing something here, but I thought all these browsers are Chromium based – an open source software project. Has this changed so that they are Chrome based, because many people are saying Chrome based?

Eliminate spare time: start programming PowerShell

Reply | Quote

No. (Many?)

Windows 11 Pro version 22H2 build 22621.1485 + Microsoft 365 + Edge

Reply | Quote

Susan started it, others have repeated Chrome (rather than Chromium) so not correcting her. ‘Many’ is relative – it seems to be quite a few on here, but perhaps should have been ‘some’, but these ‘some’ are regulars on this forum.

Eliminate spare time: start programming PowerShell

1 user thanked author for this post.

b

Reply | Quote

alejr wrote:

Try “temporarily” disabling your Edge extensions and see if that lets it play?

Edge “fixed” by allowing JavaScript on sites.

Reply | Quote