3 ms·

Tor lost all credibility for sticking to firefox, not to mention all the other security issues discovered over the past few years

yjftsjthsd-h 5y ago
TOR is a privacy tool first; rebasing to a browser that aggressively undermines privacy at every turn would be a questionable use of resources.
mike_hock 5y ago
Firefox as opposed to what?
- Shadonototra 5y ago
  Chromium
  - edgyquant 5y ago
    What advantages would that bring?
    - 0xdeadb00f 5y ago
      Security. I'm a die hard Firefox user. But chromium has insanely good site isolation and some other great security features. It was built with privilege separation in mind almost since day one, something Firefox does not do. My source here is OpenBSD devs, who said that Chromium was easy to sandbox with pledge+unveil, because for the most part the code was already written in such a way (to separate privileges). Firefox was a pain to sandbox, because its code is not written in the same way. Firefox is only now catching up in regard to site isolation.
      - southerntofu 5y ago
        > Firefox is only now catching up in regard to site isolation. Yes, but firefox has other benefits. if only that, a cooperative team that's happy to take patches as part of the "tor uplift" project, whereas Chrome wants to fingerprint every single user and makes projects like TBB harder to implement. Also, i personally think it's a good thing that TBB is a noscript-first browser. Everything involving JS, even with a 10 feet pole, is a glaring security issue. So yes you can enable JS and the site isolation isn't the best, but truth is just use "Safest" mode and you'll be fine.
pfundstein 5y ago
If you actually looked at the numbers you'd see FF has had fewer security issues than any other major browsers. Also Torbrowser uses a security-hardened version of FF LTS, so it's pretty useless to assume FF vulnerabilities all apply to Torbrowser.

yjftsjthsd-h 5y ago

TOR is a privacy tool first; rebasing to a browser that aggressively undermines privacy at every turn would be a questionable use of resources.

mike_hock 5y ago

Firefox as opposed to what?

Shadonototra 5y ago
Chromium
- edgyquant 5y ago
  What advantages would that bring?
  - 0xdeadb00f 5y ago
    Security. I'm a die hard Firefox user. But chromium has insanely good site isolation and some other great security features. It was built with privilege separation in mind almost since day one, something Firefox does not do. My source here is OpenBSD devs, who said that Chromium was easy to sandbox with pledge+unveil, because for the most part the code was already written in such a way (to separate privileges). Firefox was a pain to sandbox, because its code is not written in the same way. Firefox is only now catching up in regard to site isolation.
    - southerntofu 5y ago
      > Firefox is only now catching up in regard to site isolation. Yes, but firefox has other benefits. if only that, a cooperative team that's happy to take patches as part of the "tor uplift" project, whereas Chrome wants to fingerprint every single user and makes projects like TBB harder to implement. Also, i personally think it's a good thing that TBB is a noscript-first browser. Everything involving JS, even with a 10 feet pole, is a glaring security issue. So yes you can enable JS and the site isolation isn't the best, but truth is just use "Safest" mode and you'll be fine.

pfundstein 5y ago

If you actually looked at the numbers you'd see FF has had fewer security issues than any other major browsers. Also Torbrowser uses a security-hardened version of FF LTS, so it's pretty useless to assume FF vulnerabilities all apply to Torbrowser.