The Mac Observer

Skip navigational links

You're viewing an article in TMO's historic archive vault. Here, we've preserved the comments and how the site looked along with the article. Use this link to view the article on our current site:
Study: Firefox Most Secure Browser

Study: Firefox Most Secure Browser

by , 4:10 PM EDT, July 1st, 2008

One way to evaluate the security of a Web browser is to determine what percentage of its users are using the latest version. In a study released on Tuesday by S. Frei et al, it was found that Firefox users are most likely to be up to date.

Now that modern software and hardware firewalls have blocked incoming intrusions via TCP/IP ports, the most favored method of attack on computers connected to the Internet is via data returned to the Web browser that exploits browser code or plug-in vulnerabilities. As a result, keeping the browser updated to the latest version these days is paramount.

The authors, in their paper, "Examination of vulnerable online Web browser populations and the 'insecurity iceberg'" look at the rates of adoption of the latest browser versions and the impact it has on users.

Their definition of the most secure browser was as follows. "...the most secure browser designates the latest official public release of a vendor's Web browser at a given date. Beta versions are not considered an official public release."


From the Authors' Paper

The chart above shows the rate of adoption of the latest major version of each browser, for example Firefox 2 or IE 7.

By this standard, Firefox is the most secure browser because 83.3 percent of the users have the very latest version. Safari was ranked second at 65.3 percent, Opera third with 56.1 percent and IE 7 last at 47.6 percent. Note that, unlike the chart above, these numbers speak to the very latest version, for example Safari 3.1.2.

The paper raises some interesting questions. It's understandable how IE could lag thanks to corporate rules and compatibility testing with internal products. That can slow dow the rate of adoption. However for users who can use automatic update notifications, like Safari, Opera and Firefox, there are key difference in the methodology.

For example, the update mechanism of Firefox was considered noteworthy: "We believe the auto-update mechanism as implemented within Firefox to be the most efficient patching mechanism of the Web browsers studied. Firefox's mechanism regularly polls an online authority to verify whether a new version of the Web browser is available and typically prompts the user to update if a new version exists....

"With a single click (assuming that the user has administrative rights on the host), the update is downloaded and installed. Just as importantly, Firefox also checks for many of the currently installed Firefox plug-ins if they are similarly up to date, and, if not, will prompt the user to update them," the authors noted.

In contrast, the authors pointed out that "While Firefox and Opera check for updates when the browser is used, Safari relies on an external Apple-updater that appears to only poll for new updates at scheduled regular intervals while Internet Explorer gets updated as part of the monthly distributed Windows patches."

This scheduled updates for Safari can be as seldom as "never" if the user elects to uncheck the "Check for Updates box" in the Software Update. In addition, the Adobe Flash plug-in has no automatic update feature, and users must attended to that update manually. TMO notes that all this could explain the lag Safari has compared to Firefox.

There is much more detail in the paper, including a discussion of plug-in vulnerabilities. While some of the content is quite technical, any user interested in browser security should take a look at this report.

Recent TMO Headlines - Updated October 15th

Tue, 1:11 PM
Coach Lasso is Back... on Apple TV+
Tue, 12:06 PM
Code Reveals Tencent Only Gets Your Data if Your Device's Region is Set to China
Tue, 11:23 AM
'The Missing Cryptoqueen' is 'Serial' With a Tech Twist
Tue, 9:54 AM
Amazon's Move Into the Elections Market
Tue, 9:36 AM
Apple Pay Expands to ABN Amro and Other Key European Banks
Tue, 8:45 AM
Apple Card Credit Reporting is Rolling Out Now, Company Source Claims
Mon, 6:46 PM
Productivity Coach Brittany Smith - TMO Background Mode Interview
Mon, 4:29 PM
Developer Offers Tips for How to Handle Getting Sherlocked
Mon, 4:00 PM
North Korea Targets Macs with Fake Cryptocurency Trading Site and App
Mon, 3:45 PM
Apple Launches Dedicated Press Site for Apple TV+ Original Content
Mon, 3:18 PM
Fortnite Sucks Island into Black Hole in Season 'The End' Finale
Mon, 2:41 PM
Bitcoin Top Crypto on the Darkweb, but Privacy-Oriented Cryptos Are Gaining Steam
  • __________
  • Buy Stuff, Support TMO!
  • Podcast: Mac Geek Gab
  • Podcast: Apple Weekly Report
  • TMO on Twitter!