News Blog

Update 12:23 p.m. PDT: The official Firefox 3 download site is live; the record-setting attempt began at 11:16 a.m. PDT. Update 10:53 a.m PDT: See this separate blog post on the Mozilla download site troubles. Update 10:02 a.m. PDT: Mozilla is having some technical issues with the site but expects the download to be available shortly. Update 6:43 a.m. PDT: I added the scheduled launch time, 10 a.m. PDT.

Mozilla plans to release Firefox 3 on Tuesday, and the open-source project is opening a new front in the browser wars.

As the Web transforms from a static repository of content into a foundation for applications such as word processors and graphics editors, browsers are growing up from mere gateways into the tool that makes those applications possible. In this new era, it's Firefox--the heir to the Netscape legacy--that's going up against the victor of the last era, Internet Explorer.

"It gives you the horsepower you need to experience rich Internet apps as they should be from a performance standpoint," said Damon Sicore, Mozilla's director of platform engineering, mentioning Gmail and Google Maps specifically as applications where users don't want to wait. "As these apps get bigger and more complicated, faster browsers are going to become more critical."

The Firefox 3 'awesome bar' can give faster access to Web addresses.

Specifically, it takes 60 milliseconds to change Gmail from showing one message to another with Firefox 3, Sicore said, compared with 413 milliseconds for IE 7 and 227 for Firefox 2.

Microsoft is toiling away on IE8, though, with a first beta released and a second scheduled to emerge in August. The program has been reworked to improve performance, said Dean Hachamovitch, Microsoft's general manager in charge of IE. With no prompting, he mentioned Gmail as one area where the company has received favorable feedback, and he clearly welcomes the competition.

"IE is the browser of choice for more people on the Web than anything else," Hachamovitch said. "There's an all-around quality, whether in ease of use, reliability, the security we stand by, that makes it a better choice."

Vying for share
Mozilla is a force to be reckoned with, with 18 percent market share to 74 for IE, according to Net Applications statistics. That's enough to ensure that major Web sites have to support Firefox.

Apple's Safari--now available for Windows, too, is in third place with 6 percent share. The next contender, Opera, has less than 1 percent, but it's scrappy: "The browser is the single most important piece of software made today, so innovation is incredibly important if you want to extend the reach of the Web," the company said in a statement.

Firefox is the second-ranked browser in market share for May 2008.

(Credit: Net Applications)

Microsoft knows the stakes are high, with a richer Web coming into being. "It is a particularly fertile period. A bunch of pieces started lining up magically in the last couple years to get some innovation going here," Hachamovitch said

Firefox isn't shying away from competition either. To try to heighten its profile, Mozilla hopes to set a 24-hour download record with Firefox 3, which has been code-named Gran Paradiso. The download period is scheduled to begin at 10 a.m. PDT.

Perhaps a more fruitful alternative to whipping fans into a lather through, though, would be to court business users.

"Mozilla needs to show corporations some love," said Forrester analyst Thomas Mendel in a recent report. "Large-scale, companywide deployments are not yet typical. Mozilla continues to expend little energy on wooing IT managers to formally adopt Firefox," for example by offering paid support services, he said.

Firefox 3 features
Faster performance is one Firefox 3 improvement Sicore points to. Two others are better memory handling and what's known as the "awesome bar."

To test memory use, Firefox programmers load 500 pages from top sites on the Web then closes and opens them thousands of times. Through that process, Mozilla stamped out many memory "leaks" under which Firefox 2 wouldn't relinquish memory once it was no longer needed, Sicore said. The company also reduced the amount of memory the browser requires overall.

But memory is hidden under the covers. Front and center is awesome bar, officially called the Smart Location Bar, which lets users type real words rather than sometimes abstruse URL addresses to call up Web sites.

For example, typing "maps" into the bar on my computer retrieves a list of some recent stories I've written involving maps as well as recent maps I've requested off the Internet. That's handy for retrieving recently visited Web sites quickly. Another example of how the feature worked well: I was trying to relocate a Web site I used to monitor Amazon.com's Web site performance, and typing "Amazon" into the bar showed the site--GrabPerf--as one of the options.

Mozilla uses its own formula to determine what results pop up in the list, weighting by factors such as how recently and how frequently you visited various sites. Typing "n" gets me to News.com in no time flat, but your own results will vary according to your browsing habits.

Firefox 3 has been steadily climbing in usage through its testing period.

(Credit: Net Applications)

The awesome bar has its detractors who'd like the feature to be optional. (Tweakers can disable the awesome bar by editing their Firefox configuration.)

Among other features in Firefox 3:

• A prominent warning when a user tries to open a page that has been shown to host malware such as viruses or spyware or that's involved in phishing--the attempt to fool people into entering personal information into a counterfeit Web site.

•  Offline data access, a feature that can make Web applications usable even when the network is unavailable. That's a potential boon for Web apps, but future versions of IE 8 and Safari also support the technology.

Web-based protocol handlers, which lets the browser launch a Web application rather than a PC program for certain actions such as a Web site "mailto" link that otherwise would create an e-mail in software such as Outlook.

• The Cairo graphics engine that lays the foundation for better direct integration with a computer's video hardware. "Video inside the browser is coming," Sicore said.

• animated PNG (Portable Network Graphics), another nail in the coffin of the GIF (Graphics Interchange Format) image type.

• A better full-page zoom feature that devotes maximum screen real estate to the browser. Moving the mouse pointer over a thin strip across the top of the screen temporarily pulls down the browser controls.

• A star button to quickly add bookmarks; double-clicking opens a dialog box that lets users describe bookmarks with tags.

• Support for Windows Vista's parental controls.

• And better support for Mac OS X. For example, it has a Mac-native appearance and has been re-plumbed internally to use Apple's Cocoa technology, a necessary step on the road toward 64-bit support.

Plug-in problems
One of Firefox's claims to fame is the wide collection of add-ons that are available. It's been a bumpy ride coaxing coders to support the new browser, though.

Some major add-ons now have arrived, including Yahoo's Delicious and the Firebug tool for Web site developers.

However, not everybody made the leap. One is Google Browser Sync, which synchronizes bookmarks, passwords, and other settings across multiple installations of Firefox 2. "Phasing out Google Browser Sync was a tough call, but we have decided to focus our efforts on other products, like Toolbar and Gears, that also extend the capability of multiple browsers," Google said of the Labs project in a statement. Happily, there are other alternatives--I like Foxmarks.

Of the top add-ons, "the majority have upgraded 3.0," Sicore said. The laggards will have a grace period "on the order of months" before Firefox 2.0 versions will automatically suggest installing the upgrade.

Firefox is set to top 20 percent global market share in July, continuing its steady trend toward world domination through, er, open-source liberation.

Unlike Microsoft's Internet Explorer, which relied on all sorts of tricks and tying to achieve its dominant status, Firefox's gains seem to be coming for two reasons:

1. It works better (Better security, better performance, better functionality).
2. It's much more customizable.

As ReadWriteWeb points out, the game is increasingly Firefox's to lose. Internet Explorer used to command 96 percent of the market. Now it's struggling to hold onto 80 percent, with Firefox chipping away, 1 percent at a time.

Better software doesn't always win. In today's market, in fact, the superior marketing budget generally wins.

But not in the IE versus Firefox war, for some reason. Firefox continues to gain market share. Perhaps this time "better" really will translate into market share.

Someday, browsers will make it easy to retrace our Web steps by providing total recall of every page we've opened. Until then, we get the imperfect history features in Internet Explorer and Firefox.

They're imperfect because they seem to remember every page I've visited except the only one I actually need to return to. At least Firefox gives you a few more options for changing how it records your surfing history. With Internet Explorer, the only two options you get are to 1) change the number of days your history is stored and to 2) clear your history completely.

Tweaking Firefox's history settings
To adjust the history settings in Firefox, click Tools > Options > Privacy. Here, you can reset the number of days the browser remembers the sites you visit (the default is nine), or tell Firefox not to record the data you enter into forms and the search bar. You can also erase Firefox's memory of the files and programs you download. The default in both cases is to remember.

Reset the number of days Firefox remembers your browsing history via the Privacy Options dialog box.

(Credit: Mozilla Firefox)

When you press Ctrl-Shift-Delete to clear Firefox's private data, you're shown seven options, five of which are selected. I usually just want to clear the cache--Gmail sometimes balks at downloading my in-box unless I clear out the browser's store of temporary files.

To change the defaults, reopen the Privacy Options, and click Settings in the Private Data section. Check the items you want to clear, uncheck those you don't, and click OK. The next time you open the Clear Private Data dialog box, your new defaults will be the only ones checked.

Customize the categories of private data that Firefox deletes by default when you click Clear Private Data.

(Credit: Mozilla Firefox)

By default, Firefox shows up to 50 entries in each history folder. You can reduce Firefox's memory consumption (and possibly slow some page reloads) by reducing this entry via the browser's configuration options. Type about:config in the address bar, and press Enter. Scroll to and double-click browser.sessionhistory.max_entries, and enter the maximum number of pages you want Firefox to remember for each site you visit.

Internet Explorer's meager history options
When you click Tools > Delete Browsing History in Internet Explorer 7, you're given five options: Temporary Internet Files, Cookies, History, Form data, and Passwords. Or click "Delete all" to clear all five.

Internet Explorer 7's Delete Browsing History dialog box gives you five options.

(Credit: Microsoft)

To change the number of days IE stores your browsing history, click Tools > Internet Options, click Settings under "Browsing history" on the General tab, and click the up or down arrows in the History section at the bottom of the resulting dialog box.

Change the number of days Internet Explorer 7 retains a list of the sites you've visited via the Browsing History Settings dialog box.

(Credit: Microsoft)

Tomorrow: a Firefox add-on that shows all the files downloaded by the current page.

Microsoft on Tuesday issued five "critical" security patches designed to address vulnerabilities in Windows, Microsoft Office, and Internet Explorer.

The five critical patches were included among . The bulletins covered a total of 10 vulnerabilities.

One of the five critical patches is designed to resolve a flaw in Microsoft Office Project, which could allow attackers to take complete control of users' systems if they open a malicious Office Project file.

A second critical patch is designed to tackle GDI (Graphics Device Interface) vulnerabilities in Windows that could allow attackers to remotely execute malicious code if users open malicious EMF or WMF image files. Two years ago, Microsoft faced similar vulnerabilities, forcing the software giant to rush out a fix outside of its monthly patch cycle, noted Dave Marcus, security research and communications manager at McAfee Avert Labs.

This security flaw, along with two Internet Explorer-related vulnerabilities are at the top of the list as a must fix, Marcus said.

One of the security bulletins is a cumulative patch for IE, and the other is designed to resolve vulnerabilities in ActiveX Kill Bits. Both flaws affect users who visit malicious Web sites with IE, which, in turn, allows malicious attackers to execute remote code from their systems.

"We live in a Web 2.0 world," Marcus said. "It's getting more and more popular to send people e-mails with link spam...It's becoming an effective way to compromise people's machines."

Microsoft also issued a critical Windows patch for vulnerabilities in its VBScript and JScript Scripting engines, which could provide attackers with access to users' systems and allow them to install programs, as well as view and change data.

As new Web applications debut, and older ones are enhanced, we spend more of our work time in a browser. Unfortunately, we also seem to be spending more time trying to figure out why our browsers aren't displaying the sites we visit correctly, or at all.

These days it's tough being a Web designer. Even if you create sites that comply with the latest HTML and other Web standards, you can't be sure that the pages will open or function as intended for all of the site's visitors. The fact is, Internet Explorer plays by its own set of rules, so in effect sites need to be designed twice.

Microsoft claims that Internet Explorer 8--currently in beta--will support more standards, but this itself could cause problems as sites designed for IE7 don't load correctly in the new release. Web designers will be able to add a "meta element" to pages that allows them to open in the new IE release as they would in IE7.

Get Internet Explorer 7 back on track
Microsoft offers an IE7 troubleshooting guide, but I can save you some time by summarizing its advice: First, check for Windows updates; second, scan your computer for viruses; third, if you don't mind losing your customizations, reset the browser to its default settings by clicking Tools > Internet Options > Advanced > Reset (a last resort); and fourth, disable your add-ons and toolbars, and enable them one at a time to find the one causing the problem.

Before you resort to option 3 or 4, try what Microsoft describes as options 5, 6, and 7: Delete your temporary Internet files, browser history, and cookies. Doing so is simple, relatively painless (sites you revisit will load more slowly), and most importantly, the likeliest source of the problem. Choose Tools > Internet Options > General, click Delete under Browsing History, and select Delete files under Temporary Internet Files, History, and Cookies. Click Yes at each warning, and then Close and OK.

If the problem persists, go the no-add-on route. To open IE7 with no add-ons or toolbars enabled, click Start > Run (in XP), or press the Windows key (in Vista), type iexplore.exe -extoff, and press Enter. If the problem disappears, close IE and reopen it normally. Disable all your add-ons but one to determine if that's the source of the problem: Click Tools > Manage Add-ons > Enable or Disable Add-ons, select the add-ons one at a time, and click Disable for each, but keep one enabled. If IE works OK, enable another and test the browser again. Enable the add-ons one by one until the problem recurs. When it does, you've found the troublemaker.

Disable all the add-ons in Internet Explorer except one, and then re-enable them one at a time to find the source of the problem.

(Credit: Microsoft)

In the event that none of these steps cures what ails IE7, it's time to break out the big guns: Boot into Safe Mode with Networking, log into a different user account, or go the clean-boot route. Microsoft offers step-by-step guides for these and other IE7 advanced-troubleshooting techniques.

Diagnose Firefox failures
Figuring out what's wrong with Mozilla's open-source browser is similar to the troubleshooting steps for IE, with two big exceptions: First, you can search for solutions at the Bugzilla service; and second, if you think you've discovered a bug in the program, you can report it (Bugzilla account required).

As with IE, start your Firefox troubleshooting by updating to the most recent version of the browser by clicking Help > Check for Updates. Next, update your add-ons by selecting Tools > Add-ons > Find Updates. MozillaZine provides a list of problematic extensions.

Recently Firefox refused to load my Gmail in-box. I fixed the problem in a jiffy by clearing the browser's cache: Click Tools > Options > Advanced > Network > Clear Now > OK. MozillaZine describes other standard Firefox diagnostics, and it also provides a Firefox support forum.

Clearing Firefox's cache can be a quick fix for many common problems.

(Credit: Mozilla Foundation)

Bonus tip: All the attention paid to Firefox and Internet Explorer makes it easy to forget that there are many other worthy browsers available--for free. One of my favorites is Opera, currently at version 9.26. This browser has a reputation for being lightweight but full-featured. I've also been spending time with Apple's version of Safari for Windows, but I prefer browsing with Firefox on a Mac, and I haven't seen anything in the Windows version of Safari that would make me want to switch. If you spend a lot of time on social-network sites, you may find the Firefox-based Flock Browser to your liking.

Monday: better ways to search Outlook, Thunderbird, and Gmail.

Mozilla Firefox's share of the enterprise desktop market has reached 18 percent, according to a new Forrester report noted by ZDNet's Mary Jo Foley.

This number will seem low to those who have seen higher numbers elsewhere (for example, as high as 30 percent in Europe). This simply reflects the bias of the report toward formal enterprise adoption, a route that Mozilla has explicitly not taken. Basically, Firefox is not an alternate universe into which you will be banished.

Forrester's report states:

Mozilla's share of the browser market rose steadily throughout 2007, only slowing for the quarter directly following the release of Internet Explorer 7 (IE 7) in late 2006. Adoption in the enterprise nearly doubled to 18 percent by the end of 2007, but large-scale, companywide deployments are not yet typical. Mozilla continues to expend little energy on wooing IT managers to formally adopt Firefox....

And yet it's getting them, all the same.

Why?

Modern browsers are much better than their predecessors at keeping your Web activity private and your data safe. Still, you may not have your browser configured to provide optimum security. Take a few minutes to give Internet Explorer 7 and Firefox 2 a safety check.

Batten down IE7's hatches
The version of IE7 for Vista adds the Protected Mode, which allows Web sites to access only the Temporary Internet Files folder on your PC. According to Microsoft, this feature is on by default for the Internet, Intranet, and Restricted zones, but disabled for the Trusted Sites and Local Machine zones. On my machine it was enabled for all zones. You'll see "Protected Mode: On" in the status bar when it's active, or click Tools > Internet Options > Security, and make sure "Enable Protected Mode (requires restarting Internet Explorer)" is checked at the bottom of each zone.

Maximize security in IE7 for Vista by making sure Protected Mode is enabled.

(Credit: Microsoft)

There have been some reports of Protected Mode causing problems, so if a particular page won't load or run correctly, disabling this feature may solve the glitch, though I don't recommend keeping Protected Mode off. The Web's not getting any safer, and you need all the protection you can get.

Another great new feature in IE7--for XP and Vista alike--is the Phishing Filter. Why the filter is off by default I'll never know. To activate it, click Tools > Phishing Filter > Turn On Automatic Website Checking > OK. Unfortunately, choosing Tools > Phishing Filter > Phishing Filter Settings merely opens the Advanced Internet Options dialog box, where you can scroll down to the Phishing Filter section under Security, only to find that your only two options are to disable the filter, and to "turn off automatic website checking." But while you're in the Advanced Options settings, make sure "Automatically check for Internet Explorer updates" is checked in the Browsing section. Click OK when you're done.

Get into the habit of covering your browsing tracks on a regular basis. In IE7 you can wipe out your browser history, Temporary Internet Files, cookies, saved form data, and saved passwords at one time by clicking Tools > Delete Browsing History > Delete All. Or erase each category separately by clicking the appropriate button in the Delete Browsing History dialog box.

Wipe your browser's history clean by clicking Delete All in IE7's Delete Browsing History dialog, or clear each category separately.

(Credit: Microsoft)

Stay safe while browsing with Firefox
Just because Mozilla's open-source browser has a reputation for security doesn't mean you can use it to visit any site on the Web without a care in the world. Last month I described NoScript, a free Firefox add-on (donationware, actually) that lets you decide which scripts can run on which Web pages on a case-by-case basis. If you use Firefox regularly and you haven't added NoScript, download and install it, and in no time you'll wonder how you ever browsed without it.

There's another simple step you can take to improve Firefox's security: Make sure you have the browser set to update automatically. The current version is 2.0.0.12; to check your copy's version, click Help > About Mozilla Firefox, and look for the version number under the product's name. To verify that the program updates automatically, click Tools > Options > Advanced > Updates, and make sure Firefox is checked under "Automatically check for updates to." You may also want to check "Automatically download and install the update" under "When updates to Firefox are found." I also check "Installed Add-ons" under the former, and "Warn me if this will disable any of my add-ons" under the latter.

Set Firefox to check for updates automatically via the Advanced Options dialog box.

(Credit: Mozilla Foundation)

Not long ago an attempt was made to spoof Firefox's address bar to fool people into thinking they were on a site other than the one they were actually visiting when a link opened in a new window. The simplest way to avoid this is by setting Firefox to open links in a new tab rather than a new window: Click Tools > Options > Tabs, and make sure "A new tab" is selected under "New pages should be opened in." You can also disable this feature by typing about:config in the address bar, pressing Enter, navigating to dom.disable_window_open_feature.location, and double-clicking it to change it to "true".

Web sites often know the page you were on before you opened one of their pages. To block this referrer header, type about:config in the address bar, press Enter, navigate to network.http.sendRefererHeader, double-click it, and set the integer value to 0.

Tomorrow: Get your Office docs online with Office Live Workspace.

If you use the RealPlayer on Internet Explorer, watch out. Researcher Elazar Broad has posted to the Full Disclosure mailing list a so-called heap overflow vulnerability that makes it possible for an attacker to modify heap blocks after they are freed and overwrite certain registers. This could allow code execution on a compromised machine. The vulnerability affects all versions of RealPlayer running under Internet Explorer.

Exploit code for this flaw has not yet been made public.

Without a patch from RealPlayer, security experts recommend disabling the killbit for the following ActiveX ClassIDs:

• 2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93
• CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA
  

To avoid the loss of functionality, security experts recommend using RealPlayer in a browser that doesn't support ActiveX, such as Mozilla Firefox (for Windows and Mac).

Social Web surfing tool Me.dium is one of the first apps ready for Internet Explorer 8 beta, which Microsoft unveiled at Mix '08 in Las Vegas Wednesday.

The browser add-on enables users to chat with each other and see which Web pages they're visiting. This release takes advantage of new WebSlices and Activities features within IE 8.

With WebSlices, users can subscribe to dynamic updates of specific parts of Web pages they visit, with new content displaying within the Me.dium sidebar.

Activities capabilities enable users to bring up maps or Web searches of highlighted text on a page. The Discovery activity offers real-time content recommendations related to the pages users are browsing. The feature maps and ranks the popularity of users' ongoing activities.

Upon Microsoft's request, the Me.dium (more here) team reportedly built the tool for IE 8 within a week.

For the sake of security, Me.dium allows stealth settings so users can hide from each other, and it shuts off at bank sites.

roundup
Mixing it up with Microsoft

Click here for full Mix '08 coverage.

Users testing IE 8 can download Me.dium here. Some rival social browsing tools, however, don't require installation.

The extension, also available for Firefox, added support for IE 7 in September.

Me.dium is ready for Internet Explorer 8.

(Credit: Me.dium)