3 ms·

> The Enterprise™ spends a lot of money on (often dubious) security products > a browser with built-in security features (both against malware and other featur

> The Enterprise™ spends a lot of money on (often dubious) security products > a browser with built-in security features (both against malware and other features such as DLP, blocking/filtering/monitoring without middleboxes) It'll be hard to outdo Google at security research and hardening

Retric 4y ago
Last month Google announced 30 new security including critical vulnerabilities in chrome. They might be doing a great job at hardening, but they don’t have a great reputation.
- meibo 4y ago
  What is that supposed to say about reputation? It's the most popular browser by far, and they actually do have a very publicized team that reports bugs to not just Chrome, but Apple and Mozilla as well. In my circles this is well respected, and personally, it inspires more confidence in the infrastructure around Chrome to me. I'd be wary of any "new" browser engines in unsafe languages.
  - Retric 4y ago
    > What is that supposed to say about reputation? Just that people don’t consider chrome extremely secure, it may be acceptable 99% of the time, but it doesn’t get a free pass in extreme security environments.
    - pvg 4y ago
      What is the 'extreme security environment' you have in mind? Very little end-user software operates in an environment and with operational parameters as adversarial as a modern web browser's.
- imajoredinecon 4y ago
  Do you mean “30 security vulnerabilities, 1 of which was critical”? Because that seems to be the reality: https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html?m=1 https://chromereleases.googleblog.com/2022/05/stable-channel...
- georgemcbay 4y ago
  > Last month Google announced 30 new security including critical vulnerabilities in chrome. This doesn't mean chrome is less secure than other options, it means people are heavily incentivized to find and report security problems and google is open about issues that are found. This makes me feel better about chrome's security, not worse, and I say this as someone who is overall kind of iffy on google these days.
Nextgrid 4y ago
Vulnerabilities in the browser engine is only part of the issue. Plenty of malicious activity involves tricking the user or silently spying on them - blocking advertising/spyware/etc domains will greatly help with that.

Retric 4y ago

Last month Google announced 30 new security including critical vulnerabilities in chrome. They might be doing a great job at hardening, but they don’t have a great reputation.

meibo 4y ago
What is that supposed to say about reputation? It's the most popular browser by far, and they actually do have a very publicized team that reports bugs to not just Chrome, but Apple and Mozilla as well. In my circles this is well respected, and personally, it inspires more confidence in the infrastructure around Chrome to me. I'd be wary of any "new" browser engines in unsafe languages.
- Retric 4y ago
  > What is that supposed to say about reputation? Just that people don’t consider chrome extremely secure, it may be acceptable 99% of the time, but it doesn’t get a free pass in extreme security environments.
  - pvg 4y ago
    What is the 'extreme security environment' you have in mind? Very little end-user software operates in an environment and with operational parameters as adversarial as a modern web browser's.
imajoredinecon 4y ago
Do you mean “30 security vulnerabilities, 1 of which was critical”? Because that seems to be the reality: https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html?m=1 https://chromereleases.googleblog.com/2022/05/stable-channel...
georgemcbay 4y ago
> Last month Google announced 30 new security including critical vulnerabilities in chrome. This doesn't mean chrome is less secure than other options, it means people are heavily incentivized to find and report security problems and google is open about issues that are found. This makes me feel better about chrome's security, not worse, and I say this as someone who is overall kind of iffy on google these days.

Nextgrid 4y ago

Vulnerabilities in the browser engine is only part of the issue. Plenty of malicious activity involves tricking the user or silently spying on them - blocking advertising/spyware/etc domains will greatly help with that.