> Sandboxing, modularization, vulnerability surface reduction, and least privilege are already established as best practices for improving software security. A

> Sandboxing, modularization, vulnerability surface reduction, and least privilege are already established as best practices for improving software security. And yet Tor Browser Bundle still uses Firefox, which is going to get sandboxing Real Soon Now (8 years after Chrome released with it). Just two weeks ago, we heard about another FBI malware discovered in the wild exploiting a Firefox 0-day to deanonymize Tor users; who knows how long it was used before being discovered, or what other exploits may be lurking out there. To be fair, I'm not sure whether the Chromium sandbox protects against 'mere' IP address disclosure, but still...