5 ms·
But is that a greater risk than millions running a known-vulnerable browser?
by insertnickname 9y ago
But is that a greater risk than millions running a known-vulnerable browser?
- bitJericho 9y agoNot a single one of those shows a vulnerability. Every one says the bug "could be" exploitable. All software has potential vulnerabilities. The trick is to roll out completely before they become actually vulnerable. That doesn't mean you have to roll out dangerously quickly.
- lizzard 9y agoThere are times when we update users as fast as possible, but that's fairly rare and happens only when there's an exploit disclosed in public (or one definitely being used). So in addition to the security ratings used by Mozilla (defined here: https://wiki.mozilla.org/Security_Severity_Ratings https://wiki.mozilla.org/Security_Severity_Ratings) there are also "incidents" that result in a very fast release to all users (i.e. "chemspill").