the IDN spoofing vulnerability in FF has been known since February '05 (just google "network.enableIDN" or "network.IDN_show_punycode") BUT while i agree "fixes" will become slower as time goes on, it will NEVER be as slow as IE and MS' fixes...this is due to the community based support system that the Mozilla foundation relies on...very similar to how DRM is developed by one company and easily hacked by the multitude of users around the world in a fraction of the time it took to develop/implement/deploy...it's undeniable that the knowledge and capabilities of an infinite support system surpass that of even the MS goliath....especially since goliath wears a ten-ton backpack around (read: helluva lot of other stuff to worry about at the same time)...

i pointed out in the other browser fan-boi thread that (at that time of posting) Secunia lists 85 security vulnerabilities for IE of which 20 were unpatched, 21 for FF of which 3 were unpatched and 8 for Opera of which 0 were unpatched...now which browser has been around the longest? has the most money behind it? should be patched the quickest? oh right, it's IE

http://club.cdfreaks.com/showpost.ph...&postcount=127

p.s. above numbers have changed since original posting...but not by much...

see these links:

MS IE - http://secunia.com/product/11/ (now 19 or 85 unpatched)
Mox FF - http://secunia.com/product/4227/ (now 3 of 22 unpatched)
Opera - http://secunia.com/product/4932/ (still 0 of 8 unpatched)

so in the span of 3 weeks, MS addressed 1....