Please update to Firefox 27.0.1 immediately, then try again. 25 is insecure and no longer supported.

Odd you would state 25 is no longer supported.

Tried 27, same result.

Equally surprised you say that 25 is insecure - which I interpret as not secure - since a secure browser is what Mozilla has been producing for years, since I was a FF 2+ user.

Any other suggestions - perhaps other than try another FF version - since that doesn't address the issue.

I ask because, as a software consultant, I report to over 27000 home PC users and (at this time) nearly 16000 are FF users - all 25.0.1 due to my latest recommendation, prior to this current issue of course.

Thanks in advance.

Martin

Firefox 25 was dropped from support as soon as Firefox 26 was released, and that was dropped from support as soon as Firefox 27 was released. Firefox updates every 6 weeks and it is vital that you update to each release as each release fixes vulnerabilities in the older version that are then publicly announced (see https://www.mozilla.org/security/known-vulnerabilities/firefox.html). Please make sure that anyone you recommend use Firefox have automatic updates enabled and keep Firefox up to date.

Firefox does connect to the internet to update blocklists, databases, etc. Do you know what Firefox is trying to access from your logs?

Regarding 6 weeks, understood.

Cannot recommend automatic updates to anyone since many users employ addons, for exampe - ree Download Manager, that will fail to work with the latest FF release(s).

You state, "Firefox does connect to the internet to update blocklists, databases, etc." I do not find the relevance to my posting. Please explain.

To answer your question, "Do you know what Firefox is trying to access from your logs?" I would say that Firefox is NOT accessing my logs, but the Security Log that I referenced in my initial post is tracking FF activity while idle or active - which continuous polls the Internet every 3 to 4 seconds, for consistently an hour or better without me touching the keyboard or mouse or any activity whatsoever.

I could post an image of the Log, but it would only show a fraction of the actual entires and yet it would state entries in to the mid-thousands after I open FF 25 or FF 27 (per your suggestion). With thousands of Security Log entries, without persistent deletion, the size of the file inflates deep into 100s of MBs over time and likely into the GB range if not checked and reset (which most folks do not do on a regular basis).

Any other thoughts?

Thank you.

Martin

Oh, if its not too much trouble . . . could you please explain in some detail why FF 25.0.1 is not a secure browser, and why FF 27.0.1 is a secure browser?

I am truly confused by your initial statement because that would suggest Mozilla had not employed any security for FF until (and I am presuming here) FF 27.

Thanks in advance for the clarification.

Martin

Firefox 25 is no longer secure because when Firefox 26 was released, it fixed 14 security issues we found in Firefox 25. We also publicly announced these holes when we released Firefox 26, meaning anyone still running 25 could easily be hacked if they don't update. The same thing happens on every single update of Firefox. Each version is deprecated with a newer version.

And no, I didn't say Firefox is trying to access your logs, I'm asking if your logs give any insight into What Firefox is trying to access on the web. What URI it's trying to reach, etc.

And yes, Firefox does do some stuff in the background, updating add-on blocklists, telemetry pings if you have that enabled, etc. So even if Firefox isn't being used and is just being idle, it will connect to the internet to do some stuff in the background.

What is actually the problem you are having

You say "...no, I didn't say Firefox is trying to access your logs," and you also said "Do you know what Firefox is trying to access from your logs?"

Excuse my interpretation, I'm a simple minded engineer, with due respect to your support, but it is quite clear that you said "...Firefox is trying to access from (my) logs. That being said, Windows Security Log does not define what is being accessed, it merely reports the activity and logs the time/date/event/etc. If you are not familiar with Windows 7, or 8 for that matter, you can find the same info on your PC under

You say "Firefox does do some stuff in the background, updating add-on blocklists, telemetry pings if you have that enabled, etc." Okay. Then let's disable all these features - how do I accomplish that? Perhaps using about:config?

Since the Security Log records persistent activity with FF open (and without my surfing or other user activity) for over an hour each time FF is initially opened, just how long does FF take to "...do some stuff in the background, updating add-on blocklists, telemetry pings if... enabled, etc?

You say "So even if Firefox isn't being used and is just being idle, it will connect to the internet to do some stuff in the background." I understand this point, but I am quite concerned that this behavior lasts over an hour with Windows 7, but not Windows XP using the same FF version. Are you suggesting that FF25 or FF26 or FF27 or FF28betas, with Windows 7, do some stuff in the background every 3 to 4 seconds for over an hour, when I confirm that FF25, FF26, FF27 and FF28betas, with Windows XP do not?

You say "What is actually the problem you are having" and as noted in my intial post (amended here to reflect usage with Windows 7) - Windows Logs > Security > Audit Success which confirms the problem as it continuously records events every 3 to 4 seconds when Firefox is open to any webpage without any actions taken - completely static or no activity or input. And (as stated above, paraphrased from my previous response), if unchecked, cleared, etc, the Security Log File file will grow into the 100s of MG, perphaps even GBs due to FF activity (while open and not surfing).

I should add that my Windows 7 Home Premium SP1 installation was cleanly installed, free of Windows Event Log errors and warnings - except for the Security Log problems described hereinabove.

Any other thoughts?

Thanks again!

Martin

That's it, huh?

Wildcard guesses . . . no concrete approach other than update/upgrade to the latest version because there are nothing but MORONS moderating this room?

I think I am going to contact my bank, Wells Fargo, and request a stop payment on the $2500 check I cut Mozilla last month. If that doesn't work, I will file a mechanics lien against the corporation.

Thanks for nothing but amateur guesswork.

With due disdain,

MS

You could check some settings in about:config. A partial list:

• browser.send_pings -> false
• browser.send_pings.require_same_host -> true
• datareporting.healthreport.uploadEnabled -> false
• datareporting.policy.dataSubmissionEnabled -> false
• dom.enable_performance -> false
• dom.indexedDB.enabled -> false
• dom.storage.default_quota -> 0
• dom.storage.enabled -> false
• media.navigator.permission.disabled -> false
• network.protocol-handler.external.shell -> false
• toolkit.telemetry.enabled -> false
• toolkit.telemetry.rejected -> true

Well first your refuse to upgrade to a supported version, so you severely limit the help we can provide. Second, empty threats aren't appreciated on this forum and will result in you not getting any help for your issue. Please maintain a professional attitude on this forum.

@ finitarry . . . Thanks for your input - I will try your suggestion.

@ Tyler Downer . . . You state, "Well first your refuse to upgrade to a supported version" and yet in my second post (second line - posted at 3/6/14 2:51 PM according to the forum) I clearly stated "Tried 27, same result." So, Tyler Downer, either you cannot read plain English, or you intentionally choose to ignore the facts.

@ Mozilla . . . Wells Fargo states they can recover my donation to Mozilla, but it will take 3 to 5 business days.

@ Tyler Downer . . . As an engineer familiar with libel, slander and defamation, let me be abundantly clear . . . I'm so happy I get my money back because Tyler Downer has proven himself to be totally useless.

@ Mozilla . . . Shortly following this email, I will initiate a broadcast email to 72682 clients, employees, professional associates, family members and friends - updating them with my perspective on Tyler Downer and Firefox lack of qualified support A.K.A. Tyler Downer "install the latest version" guesswork.

Thanks for 7 days of nothing, Tyler Downer.

Wells Fargo recovers my 100% of my $2500 Mozilla donation, and to date, 49013 lients, employees, professional associates, family members and friends now avoid Firefox 16+ due to Tyler Downer's incompetent technical support - truly less than technical in this register professional engineer's opinion.

Thanks again for nothing, Tyler Downer.

Glad to hear it. Have a nice day!