Mozilla makes some money

Mozilla Firefox, better known as the browser you download with IE after you buy your computer because it runs quicker than that slug Microsoft saddles you with, reported some interesting financial numbers for the year 2008. They are another tech company that has seemed to be able to ride out these economic times and grow in profit.

Our revenue and expenses are consistent with 2007, showing steady growth. Mozilla’s consolidated reported revenues (Mozilla Foundation and all subsidiaries) for 2008 were $78.6 million, up approximately 5% from 2007 reported revenues of $75.1 million. The majority of this revenue is generated from the search functionality in Mozilla Firefox from organizations such as Google, Yahoo, Amazon, eBay, and others.

2008 revenues include a reported loss of $7.8 million in investments in the Foundation’s long-term portfolio (approximately 25%) as a result of economic conditions and investment values at the end of 2008. Excluding investment gains and losses, revenues from operational activity were $86.4 million compared to $73.3 million in 2007, an annual increase of 18%.

With Google Chrome, the latest version of IE grumbling in the background, Opera and Safari - there is a lot of competition out there for Mozilla. Although don't count out the devoted fanbase of Firefox, which seems to be growing all the time.

Microsoft out to ruin Mozilla Firefox

If you're a big company that has a PR problem, the last thing you want to do is create an add-on for a competitor browser that creates a serious security issue. Last Tuesday, when Microsoft released its huge update for Windows, one of those updates was to actually help users from getting hacked.

One of the 13 security bulletins Microsoft released Tuesday affects not only Internet Explorer (IE), but also Firefox, thanks to a Microsoft-made plug-in pushed to Firefox users eight months ago in an update delivered via Windows Update.

"While the vulnerability is in an IE component, there is an attack vector for Firefox users as well," admitted Microsoft engineers in a post to the company's Security Research & Defense blog on Tuesday. "The reason is that .NET Framework 3.5 SP1 installs a 'Windows Presentation Foundation' plug-in in Firefox."

The Microsoft engineers described the possible threat as a "browse-and-get-owned" situation that only requires attackers to lure Firefox users to a rigged Web site.

However, some serious issues arose (understatement).

What was particularly galling to users was that once installed, the .NET add-on was virtually impossible to remove from Firefox. The usual "Disable" and "Uninstall" buttons in Firefox's add-on list were grayed out on all versions of Windows except Windows 7, leaving most users no alternative other than to root through the Windows registry, a potentially dangerous chore, since a misstep could cripple the PC. Several sites posted complicated directions on how to scrub the .NET add-on from Firefox, including Annoyances.org.

Annoyances also said the threat to Firefox users is serious. "This update adds to Firefox one of the most dangerous vulnerabilities present in all versions of Internet Explorer: the ability for Web sites to easily and quietly install software on your PC," said the hints and tips site. "Since this design flaw is one of the reasons [why] you may have originally chosen to abandon IE in favor of a safer browser like Firefox, you may wish to remove this extension with all due haste."

Really Microsoft? Come on now. I had read somewhere that it had been fixed but keep a weary eye out for those add-ons.

Be afraid. Be very afraid.