4 ms·
Firefox is much less secure than other modern browsers. And Chrome is indeed very secure. But I think it's incorrect to say that it's "orders of magnitude" more
by om2 10y ago
Firefox is much less secure than other modern browsers. And Chrome is indeed very secure. But I think it's incorrect to say that it's "orders of magnitude" more secure than Safari. This hasn't been true since Safari introduced multiprocess and sandboxing. Safari and Edge are closer to Chrome in security level than they are to Firefox. That's why pwn2own doesn't even include Firefox in the competition any more but does include Safari and Edge.
- armitron 10y agoAgreed on Safari/Edge but note that I didn't use the words "very secure" to describe Chrome in isolation. How can something that gets publicly exploited year after year by _teenagers_ (1)(2) be called "very secure" ? The grim reality is that we never had a browser than can be called even remotely secure. Major factors for that are the implementation languages (C++ and C) and the vast attack surface. It's disheartening to see this trend continue. (1) http://www.tomsguide.com/us/pwn2own-browsers-2015,news-20680.html http://www.tomsguide.com/us/pwn2own-browsers-2015,news-20680... (2) http://blog.trendmicro.com/pwn2own-day-2-event-wrap/ http://blog.trendmicro.com/pwn2own-day-2-event-wrap/
- pcwalton 10y ago> Major factors for that are the implementation languages (C++ and C) and the vast attack surface. It's disheartening to see this trend continue. You realize that there's only one browser which is starting to adopt alternative implementation languages, and it's not Chrome, right?
- gcp 10y agoHow can something that gets publicly exploited year after year by _teenagers_ (1)(2) be called "very secure" ? You're underestimating teenagers.
- om2 10y agoI guess I was grading on a curve when I said "very secure".