Hacker News Reader

Comment by sneak | Hacker News Reader

Chrome is a lot more robust and secure against exploitation than Firefox is. This is a very unpopular fact, and every time I point it out the rabid Mozilla people get upset, despite it being the truth.

I use Ungoogled Chromium.

View on HN

Once upon a time that may have been a very hard to dispute thing, but I'm not so sure anymore.

For starters, recent Firefox versions do proper process isolation per domain, similar to Chrome, which has long been claimed to be the primary security benefit of Chrome-based browsers.

In addition, the Firefox codebase is partially rewritten in Rust. This effort is incomplete and likely always will be, but it's still significant. Keep in mind that according to Google, 70% of security vulnerabilities in Chrome are related to memory unsafety!

There’s no such thing. You use a Chromium that doesn’t report data back to Google, but the entire project is a Google project that pushes Google’s aims on the web.

Mmmm is there any source or a deep analysis from you for such a statement?

Could you provide some sources for the true facts you're asserting?

I have used the internet since, well, since back when a 56k modem was a dream. I have had zero security incidents via a browser. On the other hand Google collect data on me 100% of the time I start a Chrome browser. "What if" versus "this actually happens" is the typical argument.

I wouldn't say "a lot". Though the multi-process model Chrome uses and the V8 sandbox do provide a lot of security isolation (more than just running the browser in a VM). Though a lot of these protections are disabled on low-end mobile devices because of the associated overhead. Firefox has been making good progress implementing some of the same isolation mechanisms and is farther along rewriting components in Rust to avoid memory safety issues.

I solved the security problem by using Firefox in VMs on Qubes OS. Works great.

Reply on news.ycombinator.com