Hacker News Reader

Comment by Shadonototra | Hacker News Reader

Tor lost all credibility for sticking to firefox, not to mention all the other security issues discovered over the past few years

View on HN

If you actually looked at the numbers you'd see FF has had fewer security issues than any other major browsers.

Also Torbrowser uses a security-hardened version of FF LTS, so it's pretty useless to assume FF vulnerabilities all apply to Torbrowser.

TOR is a privacy tool first; rebasing to a browser that aggressively undermines privacy at every turn would be a questionable use of resources.

Firefox as opposed to what?

Chromium

What advantages would that bring?

Security. I'm a die hard Firefox user. But chromium has insanely good site isolation and some other great security features. It was built with privilege separation in mind almost since day one, something Firefox does not do. My source here is OpenBSD devs, who said that Chromium was easy to sandbox with pledge+unveil, because for the most part the code was already written in such a way (to separate privileges). Firefox was a pain to sandbox, because its code is not written in the same way.

Firefox is only now catching up in regard to site isolation.

> Firefox is only now catching up in regard to site isolation.

Yes, but firefox has other benefits. if only that, a cooperative team that's happy to take patches as part of the "tor uplift" project, whereas Chrome wants to fingerprint every single user and makes projects like TBB harder to implement.

Also, i personally think it's a good thing that TBB is a noscript-first browser. Everything involving JS, even with a 10 feet pole, is a glaring security issue. So yes you can enable JS and the site isolation isn't the best, but truth is just use "Safest" mode and you'll be fine.

Reply on news.ycombinator.com