5 ms·
Firefox exploit similar to the 2013 attack[0] The zerodium price list has Firefox 0day at $30k[1] a pop - compared to $100k+ (today ~$1M) for Chrome The long
by nikcub 10y ago
Firefox exploit similar to the 2013 attack[0]
The zerodium price list has Firefox 0day at $30k[1] a pop - compared to $100k+ (today ~$1M) for Chrome
The long term solution for Tor Browser is to build on Chromium + Containers/VM + Isolating proxy
[0] https://www.wired.com/2013/09/freedom-hosting-fbi/ https://www.wired.com/2013/09/freedom-hosting-fbi/
[1] https://www.wired.com/2015/11/heres-a-spy-firms-price-list-for-secret-hacker-techniques/ https://www.wired.com/2015/11/heres-a-spy-firms-price-list-f...
- e12e 10y ago> The long term solution for Tor Browser is to build on Chromium + Containers/VM + Isolating proxy Surely text-mode gopher would also be more secure? (Only half-joking)
- nisa 10y ago> Surely text-mode gopher would also be more secure? I guess early nineties, late 80ies network C code is wonderful for security! On the plus side it let's less to audit. And you rewrite it in a secure language.
- amluto 10y agoIt wouldn't be particular hard to sandbox Tor Browser on Linux and use namespaces such that the browser itself has limited ability to fingerprint its host or learn its host's IP.