4 ms·
All browsers have about the same amount of bugs but Chrome's design or as they say "defense in depth" acknowledges that there will always be bugs so tries to ma
by greggman 10y ago
All browsers have about the same amount of bugs but Chrome's design or as they say "defense in depth" acknowledges that there will always be bugs so tries to make it as hard as possible for bugs to allow bad things.
Compare vulnerabilities
Chrome 6% code execution, 0.4% gain privileges
Firefox 48% code execution, 8.4% gain privileges
Safari 60% code execution, 9.4% gain privileges
IE 79% code execution, 7.2% gain privileges
Edge 55% code execution, 16.4% gain privileges
Before you complain Firefox and IE are older is older we can compare just the last 2 years of vulerabilities
https://docs.google.com/spreadsheets/d/1nqBd7zmg6grVBEws_UPXFBIdZT_0ISjIaHPK4cJvjII/edit?usp=sharing https://docs.google.com/spreadsheets/d/1nqBd7zmg6grVBEws_UPX...
I expect Firefox's newer stats to get better on this front as they move to electrolysis and servo
It's interesting to note that Safari has zero "gain privileges bugs" for the last 2 years even if it has 22x the code execution bugs as Chrome
http://www.cvedetails.com/product/15031/Google-Chrome.html?vendor_id=1224 http://www.cvedetails.com/product/15031/Google-Chrome.html?v...
http://www.cvedetails.com/product/3264/Mozilla-Firefox.html?vendor_id=452 http://www.cvedetails.com/product/3264/Mozilla-Firefox.html?...
http://www.cvedetails.com/product/2935/Apple-Safari.html?vendor_id=49 http://www.cvedetails.com/product/2935/Apple-Safari.html?ven...
http://www.cvedetails.com/product/9900/Microsoft-Internet-Explorer.html?vendor_id=26 http://www.cvedetails.com/product/9900/Microsoft-Internet-Ex...
http://www.cvedetails.com/product/32367/Microsoft-Edge.html?vendor_id=26 http://www.cvedetails.com/product/32367/Microsoft-Edge.html?...
- fjarlq 10y agoIt looks like you've made several errors quoting from cited spreadsheet. Aren't these the correct numbers according to the spreadsheet? Browser vulnerabilities 2015/01 - 2016/10 ========================================= Browser Code Execution Gain Privileges ------- -------------- --------------- Chrome 2.89% 0.58% Firefox 43.59% 2.88% Safari 69.11% 0.00% IE 69.08% 6.07% Edge 55.22% 2.24% Source: https://docs.google.com/spreadsheets/d/1nqBd7zmg6grVBEws_UPXFBIdZT_0ISjIaHPK4cJvjII https://docs.google.com/spreadsheets/d/1nqBd7zmg6grVBEws_UPX...
- deleted 10y ago[deleted]
- greggman 10y agoI didn't quote from the spreadsheet. I quoted from the totals on the webpages. In other words, the quoted values are from when each browser was first created to today. The spreadsheet is just 2015-2016
- fjarlq 10y agoOh, I see, thanks. Well, I've copied in the values for just the past two years for easy comparison, then!
- threeseed 10y agoThe whole spreadsheet is a bit useless to be honest. The percentages refer to vulnerabilities discovered between 2015 and 2016 and so may apply to older software. And it's not Safari but rather WebKit as in there are issues listed for specifically the AppleTV which doesn't even run Safari.