Re: chromium and firefox - myths and facts?

2018-06-13 Thread Kevin Chadwick
On Mon, 11 Jun 2018 07:56:50 -0600 > In a browser, there are 2 main security components you want: The main > security advantage is privsep. The other is W^X jit. Other security > effects will follow from those design choices, especially if you have > privsep. For instance, the chrome privsep i

Re: chromium and firefox - myths and facts?

2018-06-12 Thread Darren S.
On Tue, Jun 12, 2018 at 2:46 PM Stuart Henderson wrote: > On 2018-06-12, Darren S. wrote: > > One other factor with Firefox is the use of the platform to push > > "experiements" and "studies" in their nightly builds, as discussed in > > these posts: > > It's unfair to single out Firefox for that

Re: chromium and firefox - myths and facts?

2018-06-12 Thread Stuart Henderson
On 2018-06-12, Darren S. wrote: > One other factor with Firefox is the use of the platform to push > "experiements" and "studies" in their nightly builds, as discussed in > these posts: It's unfair to single out Firefox for that (plus, they're disabled in the OpenBSD port). > https://drewdevault

Re: chromium and firefox - myths and facts?

2018-06-12 Thread Darren S.
One other factor with Firefox is the use of the platform to push "experiements" and "studies" in their nightly builds, as discussed in these posts: https://drewdevault.com/2017/12/16/Firefox-is-on-a-slippery-slope.html https://utcc.utoronto.ca/~cks/space/blog/web/FirefoxNoNightly Decisions made b

Re: chromium and firefox - myths and facts?

2018-06-12 Thread lampshade
Maybe this time mail will be encoded properly. >Chrome and Safari both derive from Apple WebKit which itself is a fork >of the KHTML rendering engine developed by the KDE project, and has >*always* been, LGPL licensed code since its first release in 1998. >Yet today, Firefox is held up as the ope

Re: chromium and firefox - myths and facts?

2018-06-12 Thread Lampshade
>Chrome and Safari both derive from Apple WebKit which itself is a fork>of the KHTML rendering engine developed by the KDE project, and has>*always* been, LGPL licensed code since its first release in 1998.>>Yet today, Firefox is held up as the open-source darling and>Chrome/Safari is seen as t

Re: chromium and firefox - myths and facts?

2018-06-12 Thread Roman Zolotarev
On Tue, Jun 12, 2018, at 07:08, flipchan wrote: > Im currently using qutebrowser which is written in python 3 and pledge > has started to get in to the python world so i hope that will be > supported soon Which version of qutebrowser are you using? Have you tried to build/install qutebrowser v1.

Re: chromium and firefox - myths and facts?

2018-06-12 Thread flipchan
Im currently using qutebrowser which is written in python 3 and pledge has started to get in to the python world so i hope that will be supported soon On June 12, 2018 12:40:18 AM UTC, Stuart Longland wrote: >On 11/06/18 21:28, Marko Cupać wrote: >> I don't understand neither browser's code. Ho

Re: chromium and firefox - myths and facts?

2018-06-11 Thread Stuart Longland
On 11/06/18 21:28, Marko Cupać wrote: > I don't understand neither browser's code. However, current propaganda > that reaches me goes along the lines "Firefox is made by non-profit > organization with users' freedom in mind, while Chromium is made by > for-profit organization for the purpose of ext

Re: chromium and firefox - myths and facts?

2018-06-11 Thread BergenBergen BergenBergen
> Answered it in the long, the short version is: Chrome/Iridium is safer code. Chrome is also way more comfortable to develop y'all web/mobile apps in. Win-win! All the best, Murk On Mon, Jun 11, 2018 at 4:29 PM, Theo de Raadt wrote: > > In that case, are the Chromium updates in current worth

Re: chromium and firefox - myths and facts?

2018-06-11 Thread Theo de Raadt
> In that case, are the Chromium updates in current worth attempting to > backport to stable? the team does not do significant backports like that. > Or are the stable builds safer than the backported Firefox builds > throughout the six months or so that they remain frozen? Answered it in the lo

Re: chromium and firefox - myths and facts?

2018-06-11 Thread Patrick Harper
In that case, are the Chromium updates in current worth attempting to backport to stable? Or are the stable builds safer than the backported Firefox builds throughout the six months or so that they remain frozen? -- Patrick Harper paia...@fastmail.com On Mon, 11 Jun 2018, at 06:56, Theo de

Re: chromium and firefox - myths and facts?

2018-06-11 Thread Theo de Raadt
Marc Espie wrote: > Chrome is a relative newcomer to browser land, and it was designed from > the start from a security point of view, so it got a headstart there. In a browser, there are 2 main security components you want: The main security advantage is privsep. The other is W^X jit. Other s

Re: chromium and firefox - myths and facts?

2018-06-11 Thread Marc Espie
On Mon, Jun 11, 2018 at 01:28:04PM +0200, Marko Cupa�? wrote: > Hi, > > over last few years, I got an impression that OpenBSD project seem to > favour Chromium over Firefox. For example, in: > > https://www.openbsd.org/papers/BeckPledgeUnveilBSDCan2018.pdf > > "We know it's right when we can do

chromium and firefox - myths and facts?

2018-06-11 Thread Marko Cupać
Hi, over last few years, I got an impression that OpenBSD project seem to favour Chromium over Firefox. For example, in: https://www.openbsd.org/papers/BeckPledgeUnveilBSDCan2018.pdf "We know it's right when we can do chrome." "[...]chrome - the stuff we use frequently" I don't understand neith