5 ms·

We got a huge company using IE11, they could not update to Chrome because "it was not secure" according to their IT department

unethical_ban 5y ago
That's odd. Both Chrome and Firefox have strong "enterprise" controls now, well integrated with Windows/Active Directory/etc.
- ocdtrekkie 5y ago
  The biggest issue with newer browsers is actually probably the feature cycle. Every couple months browsers introduce at least one horrible feature I need to update our policies to disable.
  - unethical_ban 5y ago
    Firefox does ESR - https://support.mozilla.org/en-US/kb/choosing-firefox-update-channel https://support.mozilla.org/en-US/kb/choosing-firefox-update... It might not be IE6 stable, but better than running nightly.
    - ocdtrekkie 5y ago
      I generally do the normal Firefox release and just put up with it, but I can understand why larger organizations might be frustrated with keeping modern browsers secure. They're worried about info leaks while browser vendors are interested in figuring out how to hook websites up to USB devices and VR headsets, and figuring out how to ad new advertising experiences to the new tab page.
donio 5y ago
Technically that's true since none of the browsers are. But not a very good justification obviously.
- spookthesunset 5y ago
  I mean, considering the surface area of a browser.... they seem pretty damn solid to me. Am I missing something?
  - kevincox 5y ago
    Yes, considering the surface area they are relatively secure. But the surface area is absolutely massive and I have no doubt in my mind that there are multiple full remote code execution zero-days in all major browsers. Treating security as an absolute is rarely useful because very few things are completely secure. No browser will be completely secure for the foreseeable future.
- userbinator 5y ago
  It's a great justification if you see just how much Google's spyware browser phones home...
ben509 5y ago
They probably had to rotate their password three times while writing that memo.

unethical_ban 5y ago

That's odd. Both Chrome and Firefox have strong "enterprise" controls now, well integrated with Windows/Active Directory/etc.

ocdtrekkie 5y ago
The biggest issue with newer browsers is actually probably the feature cycle. Every couple months browsers introduce at least one horrible feature I need to update our policies to disable.
- unethical_ban 5y ago
  Firefox does ESR - https://support.mozilla.org/en-US/kb/choosing-firefox-update-channel https://support.mozilla.org/en-US/kb/choosing-firefox-update... It might not be IE6 stable, but better than running nightly.
  - ocdtrekkie 5y ago
    I generally do the normal Firefox release and just put up with it, but I can understand why larger organizations might be frustrated with keeping modern browsers secure. They're worried about info leaks while browser vendors are interested in figuring out how to hook websites up to USB devices and VR headsets, and figuring out how to ad new advertising experiences to the new tab page.

donio 5y ago

Technically that's true since none of the browsers are. But not a very good justification obviously.

spookthesunset 5y ago
I mean, considering the surface area of a browser.... they seem pretty damn solid to me. Am I missing something?
- kevincox 5y ago
  Yes, considering the surface area they are relatively secure. But the surface area is absolutely massive and I have no doubt in my mind that there are multiple full remote code execution zero-days in all major browsers. Treating security as an absolute is rarely useful because very few things are completely secure. No browser will be completely secure for the foreseeable future.
userbinator 5y ago
It's a great justification if you see just how much Google's spyware browser phones home...

ben509 5y ago

They probably had to rotate their password three times while writing that memo.