Update: Firefox 127.0 released

[HansV]

See Version 127.0, first offered to Release channel users on June 11, 2024

[HansV]

Version 127.0.1 was released today; it contains several bug fixes.

[HansV]

Version 127.0.2 was released on June 25, 2024. More bug fixes.

[OneSecondStreet]

Genuine question: let's say version 65 (pulling a number out of the air...) worked perfectly well for me. Why do I have to endlessly keep updating to their newest version or getting popups telling me to? Why can't I simply stick with version 65 and be happy?

[Leif]

That would be a good argument if scammers and the like froze all development on their nefarious activities, but unfortunately they don't. I would update on security grounds alone.

Personally, I have Firefox update in the background automatically and typically never notice it has updated - just occasionally I will double-check that it has.

[stuck]

...Why do I have to endlessly keep updating to their newest version or getting popups telling me to? Why can't I simply stick with version 65 and be happy?

Wot Leif said. It is unwise to not keep your browser's security up to date.

Ken

[OneSecondStreet]

OK, understood. But...
Is this one of those things where people are living in fear of something that may or may not happen, and may in fact never happen? Eg, the y2k debacle? Has anyone here ever actually had their computer damaged due to (and only due to) not updating firefox? And if so, can you legitimately pinpoint the fact that it was a lack of updating that caused it?

[StuartR]

Absolutely yes. Out of date software!, especially Web browsers, is a very common attack vector for hackers

[OneSecondStreet]

Absolutely yes. Out of date software!, especially Web browsers, is a very common attack vector for hackers

Right. So, since this has never happened to me, what exactly are these hackers trying to do through my browser? What do they want from "me" or "my browser". I'm really trying to understand this.

[StuartR]

Typically they take over your PC to use in a botnet for attacking their real target. They may also steal your passwords or other information

[OneSecondStreet]

Typically they take over your PC to use in a botnet for attacking their real target. They may also steal your passwords or other information

They do this through vulnerabilities in the browser?

[Leif]

They do this through vulnerabilities in the browser?

Yes, either because the bad guys have come up with a new method that the good guys haven't thought about, or the good guys made an 'improvement' that they didn't realise at the time exposed a way for the bad guys to get in.

[ChrisGreaves]

Right. So, since this has never happened to me, what exactly are these hackers trying to do through my browser? What do they want from "me" or "my browser". I'm really trying to understand this.

Let's suppose that you live in Australia and are worried about losing your hard-earned cash. You deposit your banknotes and cheques in the local branch of a bank.
This report suggests that "Of the 26,565 victims of (armed and unarmed) robbery recorded Australia-wide for the year 2001, 458 (or 1.7 per cent) were victimised in a bank."

You can, of course, find current figures for your home location.

Bank robbers are nasty people, right? But, you say "... since this has never happened to me, ..." and for sure, never have you been held up at gun-point, let alone in a bank. But banks are a business, like any other business; they are out to make a profit. So next year interest rates will go up, bank charges will go up, to make up for the $50,000 shortfall in the till.

The bank robbers aren't out to get You specifically, but you (and I) will bear the burden.

In terms of browser-hacking, perhaps the hackers aren't out to damage your computer, but when they steal my email address from your copy of Thunderbird, i will bear the burden of increased spam, increased possibility of a mail filter tossing a real message into a Spam folder etc.

Any kind of scam - bogus car insurance claims, shoplifting, cheque fraud and so on - might use an innocent store or business as a vehicle, but the population in general pays.

I suspect that for the majority of unprotected personal computers the "innocent" user is not aware that their computer is working overtime to help defraud people.

Cheers, Chris

[OneSecondStreet]

Let's suppose that you live in Australia and are worried about losing your hard-earned cash.

Now THIS I can relate to...

But banks are a business, like any other business; they are out to make a profit. So next year interest rates will go up, bank charges will go up, to make up for the $50,000 shortfall in the till.

Right. I see this. I just had a similar thing where last year my house insurance got jacked up by some ridiculous amount due to all the claims being made (none by me), and this year it got jacked up again, but this time, "in anticipation of the claims which will be made". So now they're just inventing reasons to make me pay more. So I can definitely relate to what you're saying here.

the hackers aren't out to damage your computer, but when they steal my email address from your copy of Thunderbird, i will bear the burden of increased spam

And now I feel guilty

Alright, I'll update my browser now.

(Although one reason for my hesitancy is that I've in the past had the setting to "update automatically" and at times it will decide it now doesn't support some add-in that I have, which I use all the time, and basically refuse to live without.)

[Leif]

... and at times it will decide it now doesn't support some add-in that I have, which I use all the time, and basically refuse to live without.

Just remember - there may be a good security reason why your browser won't support those add-ins any more!

[OneSecondStreet]

I now have another reason to NOT want to continually update firefox: every time I do, any and every website that has "trusted" my browser no longer trusts it. I have to go through all the rigmarole of 2-factor authentication etc etc etc. If anyone can show me how to make this stop happening I'll keep updating firefox; if not, it's not worth the hassle and it'll need to stay un-updated.