Live data from Hacker News

Ask HN: Is Firefox better than Chrome when it comes to user security?

news.ycombinator.com

81–90 of 99 posts

Re: Ask HN: Is Firefox better than Chrome when it comes to user security?

#81
post #78

Earlier quoted context omitted.

The average user doesn't care about the underlying browser engine. Why should Mozilla add that to their advertising when no other browser maker on iOS is?

Err.. most other browsers on iOS do have an adblocker built in. It’s solely Mozilla dumping their users out in the cold. These days ads are an attack vector. I’d never let my parents browse the web without a blocker.

The two most popular browsers on iOS do not support ad blocking, unless there's something I'm not aware of. I've never seen an ad blocker in iOS Safari or Chrome. Firefox on iOS has tracking protection which can block some ads if you believe the description of the setting.

Re: Ask HN: Is Firefox better than Chrome when it comes to user security?

#82
I think it comes down to your threat model.

For the vast majority of people (ie, 99%) there's no difference between the major browsers and the overall security they provide.

For that 1% the difference may be noticeable but pale in comparison to other things like solid opsec, etc. For instance, it doesn't matter what browser you use if you are using SMS 2FA and get hit with a sim-swap because you're bragging on Twitter about how your Coinbase account is sitting at $2MM.

On the other hand, if you're international arms dealer your browser choice probably matters a lot more. Though, the three letter agencies already have your poster on their wall and you were pwned a year prior anyway. Even worse, if you're outside the US the drones have already been deployed.

The US isn't beyond blowing up hackers, look at Junaid Hussain[1].

[1]: https://en.wikipedia.org/wiki/Junaid_Hussain

Re: Ask HN: Is Firefox better than Chrome when it comes to user security?

#83
post #2

Firefox is much more private, but Chrome is more secure, although I don’t know to what extent and whether there is a difference in practice. The main consideration is chance of zero days. Anyone knows?

This is only an indirect measure, but:

1. CVE Chrome vulnerabilities: 3415 (https://www.cvedetails.com/product/15031/Google-Chrome.html)

2. CVE Firefox vulnerabilities: 2622 (https://www.cvedetails.com/product/3264/Mozilla-Firefox.html)

Re: Ask HN: Is Firefox better than Chrome when it comes to user security?

#84

I will make a controversial comment: My experience is that security is a function of simplicity and individuals having a complete understanding of the code and implications of changes. Implications: - A smaller team will generally lead to more secure software than a larger team. - Many security layers are counterproductive. In studies, bugs per KLOC are relatively consistent. A 100-line program can be fully auditable…

not sure why you say it's a "controversial comment"... What you say is well documented and you made a reasonable comment! The bigger the software, the more likely it is to be exploited...

This is actually completely contrary to documented best practices. Best practices involve a lot of layers and processes. Defense-in-depth is best practice.

My experience is that only helps if each layer is carefully designed and analyzed at a level impractical for most real-world systems.

In most cases, unless you're designing Unix from the ground up, the better approach is KISS.

Re: Ask HN: Is Firefox better than Chrome when it comes to user security?

#86

Earlier quoted context omitted.

Brave with its default settings is both less private and less secure than LibreWolf. > On iOS, Firefox has refused for years to implement an adblocker. Blame Apple.

Mozilla deserves some of the blame for misleading users into thinking that Firefox is available on iOS when all they really provide is a Safari reskin.

Not really. That's all Apple. Mozilla wants to try and provide the UI and experience and are doing so as best they can to satisfy their users requesting it.

Re: Ask HN: Is Firefox better than Chrome when it comes to user security?

#87
post #79

Earlier quoted context omitted.

Brave with its default settings is both less private and less secure than LibreWolf. > On iOS, Firefox has refused for years to implement an adblocker. Blame Apple.

> Blame Apple. Blame Mozilla. Most iOS browsers have built-in adblocking.

No. Exit the RDF please. Apple and only Apple prevent you having choice over what browser engine to install.

Re: Ask HN: Is Firefox better than Chrome when it comes to user security?

#88
post #78

Earlier quoted context omitted.

The average user doesn't care about the underlying browser engine. Why should Mozilla add that to their advertising when no other browser maker on iOS is?

Err.. most other browsers on iOS do have an adblocker built in. It’s solely Mozilla dumping their users out in the cold. These days ads are an attack vector. I’d never let my parents browse the web without a blocker.

Not real adblocking. If you care about your parents, get them a better device.

Re: Ask HN: Is Firefox better than Chrome when it comes to user security?

#89
post #79

Earlier quoted context omitted.

> Blame Apple. Blame Mozilla. Most iOS browsers have built-in adblocking.

No. Exit the RDF please. Apple and only Apple prevent you having choice over what browser engine to install.

Yes. Like, you are a laughably wrong. I can literally see the Brave “shield” icon staring right back at me right there in the bottom right of the screen.

Re: Ask HN: Is Firefox better than Chrome when it comes to user security?

#90
post #89

Earlier quoted context omitted.

No. Exit the RDF please. Apple and only Apple prevent you having choice over what browser engine to install.

Yes. Like, you are a laughably wrong. I can literally see the Brave “shield” icon staring right back at me right there in the bottom right of the screen.

I guess you must be in the EU and on iOS 17.4 or later. I forgot the Apple were forced to allow other browser engines to be installed in the EU recently.

But aside from that recent exception, no one ever had anything except Safari on iOS, even if they thought otherwise.

Post reply on HN