1–10 of 99 posts
It feels like Chrome being made by Google can employ more folks, respond to 0-days, with integrations for Google accounts, it provides a decent password management experience, passkeys, etc.
I understand folks have concerns with Google as a company, but ignoring that would the average user be safer using Chrome?
The main consideration is chance of zero days. Anyone knows?
I would say other things like tracking for example poses a higher security risk and for that reason makes Firefox the safer choice. But you have other browsers that builds on their engines like Librewolf and similar that are even safer.
Firefox is much more private, but Chrome is more secure, although I don’t know to what extent and whether there is a difference in practice. The main consideration is chance of zero days. Anyone knows?
About security: Chrome has a biggest workforce, yes. but let's think about this a bit...
First, let's not forget that chrome is also a bigger target.
let's imagine this: Consider that 90% of the users worldwide use chromium-based browsers, and you are an hacker who wants to steal peoples data or access their computers.
Would you bother targeting 10% of the users. Or would you just go after those 90%???
now add another detail into that thinking:
people who use Firefox are mostly techies, people who know about computers, gnu/linux users, developers, more security-conscientious users, people who actually know and care about the tech that goes bellow, people that knows what's happening in the IT world, and people that simple don't go with the flock without studding it's path first... now... would you really bother targeting those when you have 90% of people - where probably 85% don't know anything about computers or just don't give a #$%& about it???
Would you go easy bait, or would you try to outsmart those who might be at the same level you are???
(sure, there is always exceptions!!!)
but then again... maybe that's just me...
Most of cyber-criminals however, will target Chrome because it's way more used.
In term of control the password manager of firefox don't need you to have an account. That is very important because, you want to use a password manager on the web and to be able to actually trust it. Google can close you account without previous notice.
I don't think 0-day will be wasted on targeting random nobody.
To be more secure, only way is to reduce surface area. Someone like journalist should disable JS/cookies, all plugins and extensions and preferably browse through a locked down VM. Don't know if there is any minimal browser that has actively removed features.
If you're willing to include Chrome forks then I'd say Brave is, despite the issues surrounding their love for crypto, more secure than Chrome, and it has much better anti-fingerprinting if you care about that.