27 ms·
Chrome is not even open source. They can't use it. If you're referring to Chromium, well, what makes you think it's more secure than Firefox? Also, don't you
by kolme 10y ago
Chrome is not even open source. They can't use it.
If you're referring to Chromium, well, what makes you think it's more secure than Firefox?
Also, don't you think that the developers of the Tor browser are pretty security-aware? That they might make very well informed decisions?
- munin 10y agochromium still has a sandbox
- fapjacks 10y agoAnd mystery binary blobs have made an appearance[0] [0] https://www.reddit.com/r/linux/comments/3a0rz0/chromium_unconditionally_downloads_binary_blob/ https://www.reddit.com/r/linux/comments/3a0rz0/chromium_unco...
- lima 10y agoDistros can choose to disable that feature. Also note that the blob runs _inside_ the sandbox.
- f00_ 10y ago"developers of the Tor browser" probably not, lots of incompetent people in infosec. Tor itself has decent devs, but even they have seen leadership troubles recently, pressure from feds etc. Check the mailing-list. Reminder, this isn't a vulnerability in Tor, but an IP leak in Firefox, or at least the way it's configured in TBB. Maybe a sandbox is irrelevant to an IP leak though, idk.
- lima 10y agoChromium is a magnitude more secure than Firefox. If you find a 0day in the Firefox renderer, bam, code execution with full user permissions. A 0day in Chromium renderer code is pretty much worthless. Firefox has zero additional layers of security. Chromium has a battle-tested sandbox which kills 99% of all exploits in the absence of an additional kernel exploit. Also note how none of the recent Flash 0days was exploitable on Chrome.
- deleted 10y ago[deleted]