4 ms·
They lost a lot of funding and VM escapes are a bit hotter than browser exploits. Also, Firefox installs generally still come with Flash which is easier to exp
by rockdoe 11y ago
They lost a lot of funding and VM escapes are a bit hotter than browser exploits.
Also, Firefox installs generally still come with Flash which is easier to exploit than the browser itself, and reaches a broader audience.
Officially, they claimed its because "Firefox security has not advanced in the last year" but that is just utter BS.
- tptacek 11y ago"Utter BS" is a pretty categorical statement. In what ways has Firefox security advanced in the last year?
- pcwalton 11y agoHigh entropy ASLR, for one: https://bugzilla.mozilla.org/show_bug.cgi?id=1020362 https://bugzilla.mozilla.org/show_bug.cgi?id=1020362 (A few months older than one year, but close enough. Also, of course I'm not going to claim that sandboxing is unimportant.)
- kbrosnan 11y agoFirefox does not come with Flash preinstalled.