143
submitted 20 hours ago by Charger8232@lemmy.ml to c/privacy@lemmy.ml

I made this post, outlining my verdict about whether or not Chromium is more secure than Firefox. At the very end of the post, I noted "GrapheneOS did not respond to my requests for a comment."

Well, after weeks with no reply, they finally responded. I don't plan to do any more research about this topic, but this information is still incredibly valuable. Keep in mind the questions I asked the GrapheneOS team were created before I had done much research about the topic. Here are the questions and GrapheneOS's replies:

Does Firefox have isolation between tabs?

incomplete

Is Firefox's implementation of tab isolation as secure as Chromium's?

no, it's incomplete and their sandbox is significantly weaker across all platforms, but it varies based on platform

Firefox uses Fission to isolate embedded content from the main website. Is Fission used for tab isolation as well?

it's incomplete

Is Fission the main cause of concern about Firefox's security?

there are many ways in which it's less secure than Chromium, but the weak sandbox particularly that's entirely not implemented on Android is one of the main issues

Are there other reasons why Chromium is more secure than Firefox, besides Fission?

Chromium uses full garbage collection for a lot of the C++ objects, has much more hardened memory allocators for native allocation, has the V8 sandbox as another layer of security missing in Firefox before the OS sandbox, has much more fuzzing, auditing, etc. and much more modern exploit mitigations implemented too

Firefox is far behind in nearly every way and laid off a lot of their security people

Isolation of embedded content is important to prevent Spectre and Meltdown exploits, but is this actually something that an everyday user will be majorly affected by? It seems that, unless you are logging in through embedded content, there is far less risk associated with this from an everyday standpoint. Again, more security is obviously better, but is this as big of an issue as it's made out to be?

yes it impacts users because browser vulnerabilities are widely exploited in the wild and the OS sandbox is one of the main defenses against it, as is the V8 sandbox feature entirely missing in Firefox

Google heavily monitors for browser exploits and catches a lot of it happening in the wild

Mozilla / Firefox has little visibility into it

therefore, it's much more widely reported for Chrome but does not mean it isn't happening with Firefox regularly

Is Firefox less secure on Linux (besides Qubes, Tails, etc.) than other desktop operating systems?

Tails is not a hardened OS at all, that's a misconception about it, and it has nearly all the problems of desktop Linux

Firefox on desktop Linux has weaker sandboxing than elsewhere

on Android they haven't even implemented a content sandbox, although the OS provides an app sandbox around it as a whole but that's not the same thing

In which ways are Fission less secure than Chromium's Site Isolation?

it's not even completed yet, the issue is still open since not everything is isolated yet and there are known ways out

Does Brave provide the same privacy against fingerprinting as the Tor Browser?

Tor Browser's anti-fingerprinting is greatly overestimated and does not really work with JavaScript enabled, which it is for most users

Brave's is not strictly better or worse

neither anti-fingerprinting approach works well

Could you provide good resources for my article about the state of Firefox security on Android?

no, but it is awful, they don't even implement any content sandbox let alone site isolation, and have almost no exploit mitigations or anything implemented

Would it be easy for a developer to create a fork of Firefox for Android that uses isolatedProcess?

no, but it's easy for them to do it relative to doing it elsewhere

Would using isolatedProcess in Firefox fix isolation issues? If not, what would still need done?

no, but it would allow them to provide a content sandbox on Android and partial site isolation to the extent they implement it overall

Is there tab isolation for Firefox on Android? Is this as secure as Chromium's?

there's an incomplete implementation, and no, it's not nearly as secure aside from being incomplete

top 18 comments
sorted by: hot top controversial new old
[-] limitsomething@lemmy.ml 2 points 3 hours ago

Very informative , thank you so much

[-] boboliosisjones@feddit.nu 48 points 13 hours ago

While Firefox doesn't seem very well managed at all right now, I feel like I have to use it. If every browser uses chromium then it seems to me Google has the power to dictate how the web works, which I do not want. I just really want there to be other browser engines out there.

[-] Broken@lemmy.ml 1 points 2 minutes ago

This concept is very understated. We need more options.

[-] GnuLinuxDude@lemmy.ml 9 points 11 hours ago

I use Firefox as I actually like it more, except for the lack of Chrome-style tab groups (in development). But it does seem like it's mismanaged and I wonder what that means for it in upcoming years.

[-] DollarColonial@lemmy.ml 18 points 15 hours ago* (last edited 15 hours ago)

As far as I understand, you kinda choose better security using Chromium or better privacy using Firefox with addons/forks

Lot of ressources say Brave is trash compared to Ungoogled, but Brave still adds stuff

Complicated, GrapheneOS recommends Vanadium or at least Brave on mobile

[-] XTL@sopuli.xyz 16 points 10 hours ago

Brave is a series scam company.

[-] z3rOR0ne@lemmy.ml 32 points 18 hours ago* (last edited 17 hours ago)

Great work. They haven't commented on this matter for some time now and its good to see an updated comment on this issue.

I use Grapheme OS, but do use Mull. I also use Vanadium and base Chromium. Each for different uses. Mull for general browsing (I have many extensions, but I feel a bit more secure by running NoScript).

Vanadium is for when I need more functionality, and raw Chromium for inspecting responsive design of my own sites.

The GrapheneOS community is a great asset to the Android ecosystem, and their mentality has always seemed to be security above all else (even above privacy), which is a voice that is needed in any organization.

Again, thanks for doing this investigation.

[-] umami_wasbi@lemmy.ml 13 points 16 hours ago

So use what browsers? Chrome sounds more secure (I didn't read previous post), yet I don't want an advertising company looking at my browsing habbits, nor supporting them dominating the browser market share and have a powerful influence on every web standards.

[-] Charger8232@lemmy.ml 14 points 15 hours ago* (last edited 15 hours ago)

Chrome sounds more secure

Chromium is not the same as Chrome. I highly suggest reading the previous posts.

yet I don’t want an advertising company looking at my browsing habbits

There are more privacy respecting options such as ungoogled-chromium and Brave (which can be configured to minimize data collection and bloat).

In the end, the choice is yours.

[-] masterofn001@lemmy.ca 5 points 15 hours ago

Regarding tab isolation etc, do you know if in about:config setting the storage partitioning (by site, proxy, eyc) and/or disabling automatic storage access makes a difference? There are options for strict site isolation in there, too, but I don't know if toggling one thing will break another.

Also, don't containers on FF on Linux do that? browser.discovery.containers.enabled
privacy.usercontext.enabled

[-] apostrofail@lemmy.world 1 points 9 hours ago

Fx* on Linux

[-] Charger8232@lemmy.ml 3 points 15 hours ago

I do not know, sorry. Someone who does know is free to answer this, otherwise you could try researching using some of the sources listed in my previous post, or contact some knowledgeable people such as the GrapheneOS team, Mozilla, etc.

[-] masterofn001@lemmy.ca 3 points 14 hours ago* (last edited 14 hours ago)

BTW, thanks for these posts.

Sadly moz Dev is ... Difficult to find info about things other than the function and how to call it. The source is all there, and some things are buried so deep in some topic or obscure inaccessible part of their site. But practical functionality and actual results of use are difficult to determine on my lonesome.

I use the tests on https://librewolf.net/docs/testing/ to do some things, but there are just so many unknowns.

Thanks again.

[-] Telorand@reddthat.com 14 points 19 hours ago

That's interesting. Always good to be able to make informed choices

[-] MonkderVierte@lemmy.ml 8 points 18 hours ago* (last edited 18 hours ago)

WASM disabled and uBlock Origin with third-party frames blocked. Try that in chromium, who's more secure now?

Btw, since i used the Magisk webview switcher and then removed it and bromite (since it didn't had cromite, which is actively maintained), Mull gets used for webview.

[-] kevincox@lemmy.ml 8 points 18 hours ago

Why WASM? It seems to me that the attack surface of WASM is negligible compared to JavaScript (and IIUC disabling JavaScript will also disable WASM).

Third-party frames is definitely a good way to reduce your attack surface though. Ad embeds are often used to distribute exploits.

[-] MonkderVierte@lemmy.ml 1 points 3 hours ago* (last edited 3 hours ago)

Why WASM?

I misunderstood the bit about C++ as wasm.

this post was submitted on 04 Nov 2024
143 points (96.7% liked)

Privacy

31601 readers
384 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS