[deleted]
How far behind is each major Chromium browser?
61–70 of 71 posts
Re: How far behind is each major Chromium browser?
#62I would like to see all "desktop" applications that use Electron listed and how big of a Chromium drift is there, especially how many applications are shipping runtimes with unfixed vulnerabilities.
I imagine that looks pretty bad. On the other hand, Electron apps often aren't running untrusted code, which makes it quite a bit harder to exploit.
I guess an elephant-sized exception to this are the popular code editors that support extensions? Or perhaps such editors’ extensions typically aren’t constrained at all anyway.
Re: How far behind is each major Chromium browser?
#63I use Firefox, btw
Firefox has its own forks, by the way: GNU IceWeasel → IceCat, LibreWolf etc.
Fennec, for Android too. The unfortunate part is that it doesn't (by default, on F-Droid) use Firefox Beta - meaning custom extension packs can't be used
This matters for things like Redirector (www.reddit -> old.reddit), Greasemonkey (hckrnews dark theme), and (for my keyboard-equipped Android) Vimium
Re: How far behind is each major Chromium browser?
#64Earlier quoted context omitted.
I imagine that looks pretty bad. On the other hand, Electron apps often aren't running untrusted code, which makes it quite a bit harder to exploit.
I guess an elephant-sized exception to this are the popular code editors that support extensions? Or perhaps such editors’ extensions typically aren’t constrained at all anyway.
The last one. It would make sense to have a sandbox system, but they don’t.
Re: How far behind is each major Chromium browser?
#65> Why does Chromium version lag matter? > users are exposed to known, already-patched security vulnerabilities Then why only focus on major versions? Don't minor versions/revisions have security fixes?
Yes and also stable isn't the only maintained branch of Chromium, there's also extended stable (currently 146.x). LTS exists too (144.x), but I believe it's meant only for ChromeOS.
The Vivaldi build I have locally explicitly mentions "Extended Stable channel (may also include additional security patches)" on its "About" page.
Re: How far behind is each major Chromium browser?
#66Re: How far behind is each major Chromium browser?
#67The page says old chromium means insecure. Isn't anybody backporting fixes anymore?
"your browser is no longer supported" is just so terribly useful, for so many ..
Re: How far behind is each major Chromium browser?
#68Why is Vivaldi listed as behind when it's on the extended stable branch, which is a maintained branch?
Also, aside from that, it also perpetuates a silly idea that's popular in tech which is that security patches can't be backported or added by someone who forks software.
Like, the founder of Brave is one of the OG Mozilla guys, founder of Vivaldi did Opera, Edge is MS... These aren't dumb teams.
Re: How far behind is each major Chromium browser?
#69> Why does Chromium version lag matter? > users are exposed to known, already-patched security vulnerabilities Then why only focus on major versions? Don't minor versions/revisions have security fixes?
Yes and also stable isn't the only maintained branch of Chromium, there's also extended stable (currently 146.x). LTS exists too (144.x), but I believe it's meant only for ChromeOS.
The website does seem fairly misleading, if you and GP are correct.
Re: How far behind is each major Chromium browser?
#70Earlier quoted context omitted.
Yes and also stable isn't the only maintained branch of Chromium, there's also extended stable (currently 146.x). LTS exists too (144.x), but I believe it's meant only for ChromeOS.
The Vivaldi build I have locally explicitly mentions "Extended Stable channel (may also include additional security patches)" on its "About" page.
The most recent updates says it includes the 147 security fixes too "[Chromium] Update to 146.0.7680.218 ESR (includes security fixes from 147.0.7727.137/138)" https://vivaldi.com/blog/desktop/minor-update-eight-7-9/