4 ms·
> This is why Mozilla can add spyware to Firefox. Mozilla has some interesting technical solutions to this problem: https://wiki.mozilla.org/Security/Binary_Tr
by Boulth 8y ago
> This is why Mozilla can add spyware to Firefox.
Mozilla has some interesting technical solutions to this problem: https://wiki.mozilla.org/Security/Binary_Transparency https://wiki.mozilla.org/Security/Binary_Transparency
- Sir_Cmpwn 8y agoMozilla is the one adding the spyware, though. https://blog.mozilla.org/press-uk/2017/10/06/testing-cliqz-in-firefox/ https://blog.mozilla.org/press-uk/2017/10/06/testing-cliqz-i... >Users who receive a version of Firefox with Cliqz will have their browsing activity sent to Cliqz servers, including the URLs of pages they visit.
- Boulth 8y agoAnd upstream issues such as this one should be fixed in upstream not patched endlessly with every other distro. That's the approach promoted by Arch Linux.
- Sir_Cmpwn 8y agoMy point is that upstream can't always be trusted. With snaps there's no one between you and a potentially bad actor.
- Boulth 8y agoIf you don't trust upstream why are you running their code? I don't think it's reasonable for such a small group of people as Debian developers (or any other maintainers) to review each change looking for potentially malicious code. Especially in codebases as big as Firefox.