4 ms·
While this is welcome, I still feel goosey using Firefox given its (I believe still) lack of sandboxing. Privacy and security go hand in hand, and recent Pwn2Ow
by peatmoss 12y ago
While this is welcome, I still feel goosey using Firefox given its (I believe still) lack of sandboxing. Privacy and security go hand in hand, and recent Pwn2Own competitions haven't been kind to Firefox.
- mbrubeck 12y agoSince last week, Firefox Nightly has process separation enabled by default: https://groups.google.com/forum/#!topic/mozilla.dev.platform/OQCFwGn5sXg https://groups.google.com/forum/#!topic/mozilla.dev.platform... A patch to enable the content process sandbox by default was posted for review a few days ago: http://bugzil.la/928044 http://bugzil.la/928044 The sandboxing implementation isn't complete yet (it requires separate work for each OS that Firefox supports) and there's a significant list of known issues before this can be turned on in release builds, but there is now a team working full-time on this project, so it should improve quickly. Tracking bug for sandboxing: https://bugzilla.mozilla.org/showdependencytree.cgi?id=925570&maxdepth=1 https://bugzilla.mozilla.org/showdependencytree.cgi?id=92557... General docs on process separation: https://wiki.mozilla.org/Electrolysis https://wiki.mozilla.org/Electrolysis