Re: IE more secure than Firefox ?

2010-08-30 Thread Gen Kanai


On 8/29/10 7:42 PM, Nassim KACHA wrote:
> Hello
>
> Let me send you this message because I have recently been outraged by an
> article in the Algerian press.
>
> One speaker at Microsoft has dared to justify the slowness of IE compared
> to its competitors by its highest level of security. You should know that
> Microsoft makes a wide propaganda in Algeria.
>
> With the aim of drafting an article on my blog, I would like to have the
> view of some Firefox developers about the safety of their product compared
> to Microsoft's IE.
Nassim,

You can see the security features of Firefox 3.6 here:

http://www.mozilla.com/en-US/firefox/security/

The Mozilla Developer Center has Firefox security information here:

https://developer.mozilla.org/en/Security

The Mozilla Security team has a blog with information here:

http://blog.mozilla.com/security/

Other key blogs would be from Mozilla's Sid Stamm and Lucas Adamski who
are on the Security team:

http://blog.sidstamm.com/

http://blog.mozilla.com/ladamski/

I hope this is helpful.

Gen

-- 
Gen Kanai

___
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security


Re: Who is using NSS in their projects?

2010-03-03 Thread Gen Kanai


On 3/3/10 10:31 AM, Jean-Marc Desperrier wrote:
> davidwboswell wrote:
>   
>> I maintain a list of applications that use Mozilla technologies in
>> their projects and wanted to add more examples of projects that use
>> NSS.
>> 
> You obviously forgot to include Google Chrome in the list !! ;-)
The full list is here: (and Chrome is listed as using NSS, NPAPI, NSPR)

https://developer.mozilla.org/En/List_of_Mozilla-Based_Applications

Gen
___
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security


Re: Difference between FF2 and FF3 in phishing site detection

2008-09-11 Thread Gen Kanai

On Sep 12, 2008, at 9:24 AM, Likarish, Peter F wrote:

> Hello,
>
> I'm a grad student doing anti-phishing research and lately I've  
> been comparing the performance of FF2 and FF3 with regard to site  
> detection.  FF2 has been substantially outperforming FF3 against  
> our test set of phishing attacks (generally garnered from published  
> online repositories of phishing attacks).  Based on my outsider's  
> perspective, I was under the impression that both relied on  
> Google's Safebrowsing and was surprised by the disparity between  
> versions.  I am wondering if this is a generally observed  
> phenomenon or if we are doing something odd in testing that could  
> be causing it?  If anyone has a chance to enlighten me, I would  
> greatly appreciate it.


Hi Peter,

This sounds like very interesting research.

Is there anything that has been published in the public that is  
available for review?

This is not my particular area of expertise but I know a number of  
Mozilla folks who will want to investigate this with your support.

Sincerely,

Gen




___
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security