6 ms·

> If that's the short term cost of getting Firefox to the same level of security that Chrome is at, it seems more than worth it. Without the extensions I perha

> If that's the short term cost of getting Firefox to the same level of security that Chrome is at, it seems more than worth it. Without the extensions I perhaps see no point to FF. Is secure and dead worth it? Plus is there evidence of issues around this in the wild? Is it worth the risk of being a possible FF killer?

pcwalton 11y ago
> Plus is there evidence of issues around this in the wild? Is there evidence of browser RCEs in the wild? Yes.
- warkdarrior 11y ago
  > Is there evidence of browser RCEs in the wild? Yes. Is there evidence of browser RCEs caused by extensions?
  - tptacek 11y ago
    Is there evidence of browser RCEs that work by in part by privilege-escalating browser-chrome Javascript? Yes.
    - jb613 11y ago
      Firefox hsa NoScript (disable Javascript) - while Google is motivated (by ad $revenues) to ensure Javascript executes. Yet in other threads you concretely have stated Chrome > FF.
Ellipsis753 11y ago
I'm in the same boat as you. I use Firefox purely for a large number of quite complex extensions (which have no Chrome equivalent). If these no longer work or ever extension has a similar version in Chrome I guess I'll switch to Chromium. Then again. Perhaps there will be some kind of long term fork of Firefox before the switch?
- joenathan 11y ago
  If my FF extensions break I'll probably switch to Edge, it's faster and will be using the same extension API. The only reason I use FF is the extensions that can't be found anywhere else.
rufugee 11y ago
Maybe one valid point is having an internet browser that is not manufactured by an advertising company?
- jfb 11y ago
  Albeit one that exists solely at the sufferance of the advertising industry.
Tomte 11y ago
I've just switched to Edge to really give it a chance, infuriating as it is at times. Up to a few weeks ago I exclusively used Firefox. Installed plugins? Let me think. AdBlock Plus, but not really, has been deactivated for months now. Lazarus. Active, but never used in many months. Nothing more, I think. And I'm a power user, not some grandmother who uses webmail once a month. Firefox has lots of reasons to be used, even without plugins.

pcwalton 11y ago

> Plus is there evidence of issues around this in the wild? Is there evidence of browser RCEs in the wild? Yes.

warkdarrior 11y ago
> Is there evidence of browser RCEs in the wild? Yes. Is there evidence of browser RCEs caused by extensions?
- tptacek 11y ago
  Is there evidence of browser RCEs that work by in part by privilege-escalating browser-chrome Javascript? Yes.
  - jb613 11y ago
    Firefox hsa NoScript (disable Javascript) - while Google is motivated (by ad $revenues) to ensure Javascript executes. Yet in other threads you concretely have stated Chrome > FF.

Ellipsis753 11y ago

I'm in the same boat as you. I use Firefox purely for a large number of quite complex extensions (which have no Chrome equivalent). If these no longer work or ever extension has a similar version in Chrome I guess I'll switch to Chromium. Then again. Perhaps there will be some kind of long term fork of Firefox before the switch?

joenathan 11y ago
If my FF extensions break I'll probably switch to Edge, it's faster and will be using the same extension API. The only reason I use FF is the extensions that can't be found anywhere else.

rufugee 11y ago

Maybe one valid point is having an internet browser that is not manufactured by an advertising company?

jfb 11y ago
Albeit one that exists solely at the sufferance of the advertising industry.

Tomte 11y ago

I've just switched to Edge to really give it a chance, infuriating as it is at times. Up to a few weeks ago I exclusively used Firefox. Installed plugins? Let me think. AdBlock Plus, but not really, has been deactivated for months now. Lazarus. Active, but never used in many months. Nothing more, I think. And I'm a power user, not some grandmother who uses webmail once a month. Firefox has lots of reasons to be used, even without plugins.