Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Chrome’s security model is light-years beyond any other shipping browser.

It’s almost not even a competition anymore.



Without denying or confirming that Chrome's security is better than any other browser, how often have you heard of someone with an up-to-date Firefox, Edge, Safari, Chrome, or some other major browser, being hacked this way? If you do an honest risk analysis, how big is the extra risk of using a less secure browser (assuming your statement is true)? And is a single 0day (which Chrome has just as well) enough to compromise your entire life, like, you would probably have defense in depth (running the browser in a VM, for example) if you're that worried in the first place?

For those who think I'm just jabbing and that a VM would be too unpactical: at work (we're a security firm) we have a fresh VM for each new project for compartmentalization. Our browser, tools, everything runs in there and nothing should ever reach the host --- unless, of course, you have a VM escape, but then you need two zero-days instead of one. For more sensitive projects, even more measures are taken, but that's rare: you have to draw the line somewhere.

Just saying "Chrome is the only secure option" is a little too short-sighted I think.


When a browser removes your ability to block ads and trackers, it is creating a giant security hole. Even Google's own ads trick users into clicking on them while believing that they are going to legitimate sites.

https://www2.computerworld.com/article/2978984/who-can-stop-...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: