4 ms·

I still trust Chrome's sandbox - I have less understanding of where Firefox does sandboxing, how it works across platforms, etc. Whereas I have a solid understa

I still trust Chrome's sandbox - I have less understanding of where Firefox does sandboxing, how it works across platforms, etc. Whereas I have a solid understanding of how Chrome uses seccomp on Linux. While pieces of Firefox are moving to Rust the majority of attack surface is still in C++, so I want a strong sandbox if I'm going to run that browser.

pcwalton 9y ago
> I have less understanding of where Firefox does sandboxing, how it works across platforms, etc. Whereas I have a solid understanding of how Chrome uses seccomp on Linux. It's described in detail here: * https://wiki.mozilla.org/Security/Sandbox https://wiki.mozilla.org/Security/Sandbox * http://www.morbo.org/2017/11/linux-sandboxing-improvements-in.html http://www.morbo.org/2017/11/linux-sandboxing-improvements-i...