Dataloss Bug in Latest Windows Installer Builds Can Delete Contents of Program Files Folder

Thursday February 5th, 2004

A serious bug in the latest Windows installer builds of the Mozilla Application Suite can lead to users having the entire contents of their Program Files folder deleted. The problem is present in the 2004-02-03-18 and later trunk Windows installer and net installer builds. The affected binaries have had the suffix -dangerous added to their filenames and been removed from the latest-trunk and latest directories on the FTP site. Testers are strongly advised not to download these dangerous builds. The issue is being tracked in bug 233014 (please do not add unnecessary comments to this bug). Thanks to Zbigniew Braniecki for alerting us to this problem.

Update: The bug is now fixed and latest Windows installer and net installer builds do not exhibit the problem.

#24 Food for thought...

by Kronosk99

Friday February 6th, 2004 1:15 PM

You are replying to this message

All the linux books I have read shout and point out:

**Never use the system as root unless you want to change something important to the system**

And administrator's account in windows 2K,XP is just as powerfull as the root account. Full and unrestricted access to all files and resources!!! More than enough for a poorly programed program (or even worse a malicious program) to destroy everything.

And most users use their windows systems as administrators. That's in my opinion the worst vulnerability of windows systems!!

I hope the paranoia will stop and people will stop to use the administrator account for everyday computing. And microsoft should definetely work towards this goal.

So in my opinion what happened to many "volunteers testing mozilla" IS NOT a mozilla's fault! It's a problem with Windows configuration!

I would like to hear your coments...