At the O'Reilly Open Source Convention in Portland, Ore., last week, I had the opportunity to sit down for a few minutes with Mozilla Corp.'s Mike Schroepfer to talk about Firefox development, security, updates to JavaScript, and cooperation with Linux vendors and other downstream providers of Firefox.

By adding an automatic update feature to Firefox, its developers have made huge progress towards ensuring that security updates are pushed out quickly to all users of the browser. However, the automatic update feature is useful only for users who get the browser directly from Mozilla; users who get Firefox packaged with their Linux distribution have to rely on their vendor to push out a release, and these often trail the official Mozilla release by up to a week.