5 ms·
Why is firefox not in the list?
by webaholic 11y ago
Why is firefox not in the list?
- cbr 11y agoSee https://news.ycombinator.com/item?id=11323584 https://news.ycombinator.com/item?id=11323584
- rockdoe 11y agoThey lost a lot of funding and VM escapes are a bit hotter than browser exploits. Also, Firefox installs generally still come with Flash which is easier to exploit than the browser itself, and reaches a broader audience. Officially, they claimed its because "Firefox security has not advanced in the last year" but that is just utter BS.
- tptacek 11y ago"Utter BS" is a pretty categorical statement. In what ways has Firefox security advanced in the last year?
- pcwalton 11y agoHigh entropy ASLR, for one: https://bugzilla.mozilla.org/show_bug.cgi?id=1020362 https://bugzilla.mozilla.org/show_bug.cgi?id=1020362 (A few months older than one year, but close enough. Also, of course I'm not going to claim that sandboxing is unimportant.)
- kbrosnan 11y agoFirefox does not come with Flash preinstalled.