Why is Tor Browser still using FF instead of Chrome or something?
A sandbox is necessary, and I'm 100% sure there are a ton of 0-days in all browsers.
A sandbox is necessary, and I'm 100% sure there are a ton of 0-days in all browsers.
>Our efforts to work with the Chrome team to add missing APIs were unsuccessful, unfortunately. Currently, it is impossible to use other browsers and get the same level of protections as when using the Tor Browser.
https://blog.torproject.org/blog/google-chrome-incognito-mod...
If you're referring to Chromium, well, what makes you think it's more secure than Firefox?
Also, don't you think that the developers of the Tor browser are pretty security-aware? That they might make very well informed decisions?
[0] https://www.reddit.com/r/linux/comments/3a0rz0/chromium_unco...
Reminder, this isn't a vulnerability in Tor, but an IP leak in Firefox, or at least the way it's configured in TBB.
Maybe a sandbox is irrelevant to an IP leak though, idk.
Firefox has zero additional layers of security. Chromium has a battle-tested sandbox which kills 99% of all exploits in the absence of an additional kernel exploit.
Also note how none of the recent Flash 0days was exploitable on Chrome.
Certainly there are other higher level data exposure problems that could manifest, but I'm so utterly sick of C-level security exploits that I'm ready to throw everything out with the bathwater.