34
Zen browser(Firefox based browser) had a backdoor enabled by default. (news.ycombinator.com)
submitted 1 week ago* (last edited 1 week ago) by Tea@programming.dev to c/firefox@fedia.io
7 comments fedilink hide all child comments

Relevant: https://github.com/zen-browser/desktop/pull/927

top 7 comments
sorted by: hot top controversial new old
[-] notanapple@lemm.ee 22 points 1 week ago

This is apparently an old issue that somehow got resurfaced again (pull).

tl;dr dev had enabled remote debugging back when the project was new to make debugging easier, apparently forgot about it, someone noticed and reported it, dev apologized and said he was learning and won't do it again:

Maybe I underestimated the actual risk of this? Yes, but again, it was probably on the first month of development, we learn from our mistakes so we can now provide the most private and secure experience we can. Thanks

[-] jmcs@discuss.tchncs.de 12 points 1 week ago

enables remote debugging by default and removes the prompt

I thought it just allowede easier debugging, sorry

Dunning–Kruger strikes again.

Unfortunately browsers are probably the single most complex piece of software in a computer nowadays, and doing it right is very difficult if you don't have the resources to back it up. And it doesn't help if it's being done by someone that removes security warnings because they don't understand them.

[-] notanapple@lemm.ee 11 points 1 week ago

This. I personally avoid random firefox forks because there is such a large surface to make mistakes or hide backdoors. If people want a private, hardened firefox, Mullvad's fork (or Tor) is the best option. If you only want to disable telemetry, you can use betterfox user.js with Firefox.

[-] pfr@lemmy.sdf.org 2 points 1 week ago

Fuck! I was just starting to like that browser. Back to librewolf

[-] southsamurai@sh.itjust.works 10 points 1 week ago

It's fud

[-] FeelzGoodMan420@eviltoast.org 1 points 1 week ago* (last edited 1 week ago)

I'd expect nothing less from these fucking Garbage firefox communities. They were dogshit on Reddit and they're dogshit on Lemmy.

[-] pfr@lemmy.sdf.org 1 points 1 week ago

Damn, I'm glad. I took the bait for a second there

this post was submitted on 22 Mar 2025
34 points (97.2% liked)

Firefox

4 readers
21 users here now

The latest news and developments on Firefox and Mozilla, a global non-profit that strives to promote openness, innovation and opportunity on the web.

You can subscribe to this community from any Kbin or Lemmy instance:

Related

Rules

While we are not an official Mozilla community, we have adopted the Mozilla Community Participation Guidelines as far as it can be applied to a bin.

Rules

  1. Always be civil and respectful
    Don't be toxic, hostile, or a troll, especially towards Mozilla employees. This includes gratuitous use of profanity.

  2. Don't be a bigot
    No form of bigotry will be tolerated.

  3. Don't post security compromising suggestions
    If you do, include an obvious and clear warning.

  4. Don't post conspiracy theories
    Especially ones about nefarious intentions or funding. If you're concerned: Ask. Please don’t fuel conspiracy thinking here. Don’t try to spread FUD, especially against reliable privacy-enhancing software. Extraordinary claims require extraordinary evidence. Show credible sources.

  5. Don't accuse others of shilling
    Send honest concerns to the moderators and/or admins, and we will investigate.

  6. Do not remove your help posts after they receive replies
    Half the point of asking questions in a public sub is so that everyone can benefit from the answers—which is impossible if you go deleting everything behind yourself once you've gotten yours.

founded 2 years ago
MODERATORS
yoasif@fedia.io