Mozilla Firefox 13 Set to Improve Security with ASLR

http://www.internetnews.com/blog/skerner/mozilla-firefox-13-set-to-improve-security-with-aslr.html
and
Bug 728429 - Mandatory ASLR on Windows for binary components
From the first link ...

Add-on junkies may be in for interesting times.

 

As a Firefox user I am quite pleased to see this.

 

I assume this is the beginning of the effects of dropping Win2k support.

 

Good to hear that mozilla is implementing this. Good decision.

 

Well, only addons with binary elements will be affected, i.e. most addons won't.

 

As Tlu said this only effects add-ons with binaries such as the Mcaffee toolbar. Your typical extension will not be effected.

 

Yes, AV toolbars, downloads manger plugins, WinZip Courier, Adobe Acrobat Plugins, etc. All of the things that break with the new versioning system when updates are released. I hope that besides this they find a way to increase compatibility as well.

 

Well, I suppose I'll have to wait & see, I'll probably be OK. On the bright side SeaMonkey is looking really good at the moment, so I have a good back-up if Firefox becomes difficult for me to use. If I wanted to use a browser with little or no extension capability I would use Chrome more often!

I 'heart' my Firefox extensions LOL.

 

I don't use anything like the McAfee toolbar. How about the effect on things like Kairo's Jökulsárlón Download Manager?

 

Does it install any executable files? If so, it will probably now be forced to use ASLR.

 

Probably. I use Download Studio and the Firefox 11 beta is installed and it currently does not integrate. Nor would the Norton toolbar if I had it installed. Kaspersky toolbars work with 11 but not newer. Which reminds me, Password Managers are another category. LastPass works, things like Sticky Password need to be updated.

 

I'm not sure, does this mean Kairo will have to upgrade it, or can it be compatible with ASLR?

 

They will have to recompile it with support for ASLR.

 

OK thanks.

 

How can one tell if an extension has binary elements?

 

Firefox 13 on April 24th 2012? Was that a joke?

 

If they follow their new 6 week release cycle that should be the release date of Firefox 12

 

Is it just me or is this rapid release cycle stuff starting to sound plain scary?