Skip to content

Top Best Ask Show New Jobs

Ask HN: Is Firefox team too small to do serious security tests?

11 pointsurlwolf2y ago7 comments

With the year coming to an end, I was thinking about what would make me switch away from FF. There's only one thing: security. With a dwindling market share, and a C-suite that seems to be distracted at best, the risk is that the team is too small.

What do you think?

Looking at raw numbers of cve reports, FF is doing better than chrome:

https://www.cvedetails.com/product/3264/Mozilla-Firefox.html?vendor_id=452

https://www.cvedetails.com/product/15031/Google-Chrome.html?vendor_id=1224

But the severity of those reports is another matter. One single report could make a night and day difference.

7 comments

7 comments · 5 top-level

clouddrover2y ago· 2 in thread

Advertising networks are vectors for malware:

https://www.cisecurity.org/insights/blog/malvertising

https://www.malwarebytes.com/malvertising

https://theconversation.com/spyware-can-infect-your-phone-or...

Even the FBI recommends ad blockers:

https://www.ic3.gov/Media/Y2022/PSA221221?=8324278624

So if you're concerned about security then you want the browser with the best ad blocker.

uBlock Origin works best in Firefox:

https://github.com/gorhill/uBlock/wiki/uBlock-Origin-works-b...

mindcrash2y ago

Another good choice would be Brave which has a builtin ad blocker which natively supports uBlock Origin style block lists.

AtomicOrbital2y ago

yes and it doesn't hurt to be off OSX and Microsoft Windows

botanicalfriend2y ago

I have the same worry (although I have no evidence, and haven’t done much research into finding evidence).

I've slowly transitioned from FF to Chrome over the past year, for this reason. I still use both, but am trying to prepare myself for a time that comes when FF is no longer a viable primary browser.

TXCSwe2y ago

Just going on what vulnerbilities that have been found (and assigned a CVE number) is one thing. The real question should be, how big is the real number of vulnerbilities that have not been found yet.

Sayrus2y ago

Looking at this from a pure CVE perspective, using Firefox rather than Chrome may reduce your exposure simply due to the fact that Firefox has a lower market share.

aborsy2y ago

Is there a meaningful difference between the major browsers in terms of security? It’s hard to say to be honest!

j / k navigate · click thread line to collapse