4 ms·

Firefox has way better privacy controls than Chrome, however, their track record on security is abysmal. In fact, a 0-day was just found last week targeting Coi

Firefox has way better privacy controls than Chrome, however, their track record on security is abysmal. In fact, a 0-day was just found last week targeting Coinbase employees. I wish I could switch to Firefox for privacy reasons, but good security is table stakes and Firefox just doesn't have nearly the security credentials that Chrome does at the moment. This definitely could change in the future, and I hope it does, but for now, I'm stuck in privacy hell because I can't compromise on security.

spappal 7y ago
> Firefox just doesn't have nearly the security credentials that Chrome does at the moment I think this claim deserves a justification. Not saying you're wrong but I'm interested in how to compare browser security. (Counteranecdote: the HN-popular article [0] which explained the Firefox zero-day, mentioned in it's last paragraph a Chrome zero-day from March 2019.) [0] https://www.zdnet.com/article/mozilla-patches-firefox-zero-day-abused-in-the-wild/ https://www.zdnet.com/article/mozilla-patches-firefox-zero-d...
- mda 7y ago
  Firefox added proper sandboxing and process / site isolation a lot later than Chrome. There are many examples in vulnerability database that is marked as critical for Firefox but similar ones are ended up as only high for Chrome. My take, Chrome security was much better in past, but Firefox is decent nowadays (but not better than Chrome). Check last 6-7 years pwn2own records.
K0nserv 7y ago
> Firefox has way better privacy controls than Chrome, however, their track record on security is abysmal. In fact, a 0-day was just found last week targeting Coinbase employees. All complex codebases, especially web browsers, will suffer from 0-days and other critical bugs. You cannot use the occurrence of 0-days as a measure of security maturity. what matters is how such occurrences are handled, incidentally Mozilla handled the last 0-day well. In between Google crippling Chrome users ability to control the code that runs on their machines and Mozilla’s investment in security innovation at the lowest levels(Rust) I am pretty happy as a Firefox user.
yoasif_ 7y ago
>In fact, a 0-day was just found last week targeting Coinbase employees. And this happened to Chrome last month: https://www.zdnet.com/article/google-reveals-chrome-zero-day-under-active-attacks/ https://www.zdnet.com/article/google-reveals-chrome-zero-day...

spappal 7y ago

> Firefox just doesn't have nearly the security credentials that Chrome does at the moment I think this claim deserves a justification. Not saying you're wrong but I'm interested in how to compare browser security. (Counteranecdote: the HN-popular article [0] which explained the Firefox zero-day, mentioned in it's last paragraph a Chrome zero-day from March 2019.) [0] https://www.zdnet.com/article/mozilla-patches-firefox-zero-day-abused-in-the-wild/ https://www.zdnet.com/article/mozilla-patches-firefox-zero-d...

mda 7y ago
Firefox added proper sandboxing and process / site isolation a lot later than Chrome. There are many examples in vulnerability database that is marked as critical for Firefox but similar ones are ended up as only high for Chrome. My take, Chrome security was much better in past, but Firefox is decent nowadays (but not better than Chrome). Check last 6-7 years pwn2own records.

K0nserv 7y ago

> Firefox has way better privacy controls than Chrome, however, their track record on security is abysmal. In fact, a 0-day was just found last week targeting Coinbase employees. All complex codebases, especially web browsers, will suffer from 0-days and other critical bugs. You cannot use the occurrence of 0-days as a measure of security maturity. what matters is how such occurrences are handled, incidentally Mozilla handled the last 0-day well. In between Google crippling Chrome users ability to control the code that runs on their machines and Mozilla’s investment in security innovation at the lowest levels(Rust) I am pretty happy as a Firefox user.

yoasif_ 7y ago

>In fact, a 0-day was just found last week targeting Coinbase employees. And this happened to Chrome last month: https://www.zdnet.com/article/google-reveals-chrome-zero-day-under-active-attacks/ https://www.zdnet.com/article/google-reveals-chrome-zero-day...