Hacker News Reader

Comment by protimewaster | Hacker News Reader

> Wow - only Google seemed to really prioritize fixing this / had the processes and manpower to get a fix out quickly.

I would have guessed they'd be the quickest, but I wouldn't have guessed they'd be months ahead of the others.

Reading through the Chromium bug report, it looks like the reporter wasn't able to get in contact with Mozilla until February, so after they were aware it only took a month to fix the bug in Firefox. It's unclear when they started trying, and who's fault the delay is.

I can't speak to the prioritization differences between the different browser teams, Chrome was definitely the best which isn't surprising considering their resources. Apple was also quite swift but I imagine it took them some time to decide where to deliver the fix, I myself wasn't sure if this is something that should be blocked at the OS level (the Authentication checking the intent origin) or browser. Mozilla is usually the slowest out of the three but they were still very professional.

Perhaps they had the info before it was disclosed to the others?

https://www.mozilla.org/en-US/security/advisories/mfsa2025-1... links the bug https://bugzilla.mozilla.org/show_bug.cgi?id=1922357

but it's not public, perhaps someone can tell us when it was opened.

The next issue, https://bugzilla.mozilla.org/show_bug.cgi?id=1922358 is from October 2nd 2024

Reply on news.ycombinator.com