One large step towards bringing some security parity with Chrome

  • XLE@piefed.social
    link
    fedilink
    English
    arrow-up
    13
    ·
    1 day ago

    From GrapheneOS:

    Firefox does not have internal sandboxing on Android. This is despite the fact that Chromium semantic sandbox layer on Android is implemented via the OS isolatedProcess feature, which is a very easy to use boolean property for app service processes to provide strong isolation with only the ability to communicate with the app running them via the standard service API. Even in the desktop version, Firefox’s sandbox is still substantially weaker (especially on Linux) and lacks full support for isolating sites from each other rather than only containing content as a whole. The sandbox has been gradually improving on the desktop but it isn’t happening for their Android browser yet.

    Does this change their current assessment substantially?

    • helpImTrappedOnline@lemmy.world
      link
      fedilink
      arrow-up
      10
      ·
      1 day ago

      Possibly, they’ll likely re-evaluate when this is actually done. However, they also state the desktop version is weaker than the chrome counterpart, If that remains true for the android version as well, I suspect their stance will remain the same.

      • Yoz@lemmy.world
        link
        fedilink
        arrow-up
        1
        arrow-down
        7
        ·
        1 day ago

        It has th e beat privacy overall when I tested Firefox and Brave. It isolate cookies better than Firefox.

        I know many people here just go by what the company claims, not many have done individual level testing. For people who don’t know Firefox is mostly funded by google to keep it in the game so that they dontncrush by competition watchdog.

        • XLE@piefed.social
          link
          fedilink
          English
          arrow-up
          5
          ·
          1 day ago

          Firefox is mostly funded by google

          Brave’s source code is mostly written by Google. Use what you’d like (and there’s good reason to criticize Firefox!) but pretty much the only independent browser that’s usable across most websites is Safari.

      • Yoz@lemmy.world
        link
        fedilink
        arrow-up
        3
        arrow-down
        3
        ·
        1 day ago

        This is an old article plus google Facebook etc have done far most sinister things and still doing it so I can live with Brave