Linked by Wes Bascas on Wed 3rd Jul 2013 11:00 UTC
Mozilla & Gecko clones Over the weekend, the crew at Tom's Hardware was busy testing the recently-released Firefox 22 using the usual bevy of benchmarks. This roundup included Chrome 27, Firefox 22, IE10, and Opera 12, along with the new Chromium-based build of Opera Next (alos known as Opera 15).
Thread beginning with comment 566184
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[2]: Comment by lucas_maximus
by Fergy on Wed 3rd Jul 2013 22:44 UTC in reply to "RE: Comment by lucas_maximus"
Fergy
Member since:
2006-04-10

Speed is fine but not when its at the cost of security and having the browser run at the same rights as the user is just dumb,especially when we are talking about a security feature that first came out in windows Vista which is about to become 4 releases ago. It would also probably be trivial to adapt low rights mode to work with AppArmor and SELinux so there really is no excuse not having such a useful security feature.

So this feature only works on vista/win7/win8 with IE? It does not work on linux, winxp, macos, android? And it does not work with Firefox, Chrome, Opera, Safari?

All those users must be nuts using the web on those machines!

Reply Parent Score: 1

bassbeast Member since:
2007-11-11

Nice straw man, shame if this match were to get too close...whoosh!

Nice attempt at trying to spread FUD but you fail when it comes to browser knowledge, since Chrome as well as any based on it or based on IE ALREADY HAVE low rights mode, in fact the Chromium team added support less than 6 months after the release of Vista.

As for Linux I'm sorry but a simplistic R/W/E schema doesn't cut it, hence why AppArmor and SELinux were created which again it should be trivial to adopt the same mechanism so that Linux could enjoy a low rights browser in SELinux and AppArmor so its really no excuse.

But if you want to claim FF is only usable on Linux fine, do that, but good security practices are good practices and bad is bad, and having the browser run at the same rights as the user is not only bad security practice its just plain stupid. Remove the browser as a vector and malware drops right off the chart, as I have found thanks to low rights mode, but if you want to support bad security practices that is your choice, just as its mine to warn people who may not know all browsers are NOT created equal.

But FYI I haven't used IE in over a decade and I don't recommend IE to my customers, but its kind of sad when even IE has better security practices than FF which is the case now. Use Chrome,Chromium, Comodo Dragon,SWIron, plenty to choose from that won't make you sacrifice security just to surf the web.

Reply Parent Score: 2

Fergy Member since:
2006-04-10

Nice straw man
I have no idea where I strawman you.
Is that feature really that important? If it is is Mozilla just really really dumb or just incompetent?

Years ago when it was introduced in Vista there was talk about it at Mozilla. Their security people thought it was more a gimmick.

I am no security researcher but I trust Mozilla over MS.

Reply Parent Score: 1

lvl21ogre Member since:
2013-07-04

Next you'll be telling me to not use Chrome because it uses the same NSS/NSPR networking library that Mozilla created. Take a look at cvedetails before trying to tell me that Chrome is safer.

Reply Parent Score: 2