• 4 Posts
  • 109 Comments
Joined 1 year ago
cake
Cake day: July 6th, 2023

help-circle




  • FutileRecipe@lemmy.worldtoAndroid@lemmy.worldWe need LibreWolf of android.
    link
    fedilink
    English
    arrow-up
    14
    arrow-down
    1
    ·
    2 months ago

    or randos on the internet then?

    I mean isn’t that practically everyone on the Internet that you don’t know personally? Or do you actually know the Firefox and/or Librewolf team, and audit their code as well?

    If no to both…sounds like you are putting some measure of trust into “randos on the Internet.” Which is not abnormal. Trust is required at some point in most processes.


  • FutileRecipe@lemmy.worldtoAndroid@lemmy.worldWe need LibreWolf of android.
    link
    fedilink
    English
    arrow-up
    10
    arrow-down
    8
    ·
    2 months ago

    My thing against Firefox/Librewolf is lack of security…unless it’s improved?

    Avoid Gecko-based browsers like Firefox as they’re currently much more vulnerable to exploitation and inherently add a huge amount of attack surface. Gecko doesn’t have a WebView implementation (GeckoView is not a WebView implementation), so it has to be used alongside the Chromium-based WebView rather than instead of Chromium, which means having the remote attack surface of two separate browser engines instead of only one. Firefox / Gecko also bypass or cripple a fair bit of the upstream and GrapheneOS hardening work for apps. Worst of all, Firefox does not have internal sandboxing on Android. This is despite the fact that Chromium semantic sandbox layer on Android is implemented via the OS isolatedProcess feature, which is a very easy to use boolean property for app service processes to provide strong isolation with only the ability to communicate with the app running them via the standard service API. Even in the desktop version, Firefox’s sandbox is still substantially weaker (especially on Linux) and lacks full support for isolating sites from each other rather than only containing content as a whole. The sandbox has been gradually improving on the desktop but it isn’t happening for their Android browser yet.

    Ref: https://grapheneos.org/usage#web-browsing







  • if used for work…Features? Don’t care.

    Most organizations care about maintaining document compatibility, especially formatting, and that usually means Office365. Microsoft is notorious for publishing a standard and then ignoring their own standard, making it exceedingly difficult to use other office suites.

    I’ve heard OnlyOffice does the best at maintaining compatibility.


  • if they can’t do what the board needs… They aren’t a good fit either

    But does the board need it, or just want it to maximize profits, like boards usually do in their typical chase of infinite growth that isn’t sustainable?

    And if the person won’t stick up for what they think is best for the company and the people (which they’ve deemed firing 50 people is that), maybe they’re not a good fit that way. But hey, they are sticking up for said company and 50 people, so maybe they are.



  • Yeah billy should be build IUDs not 3d printed guns

    I see the /s but…The Ukraine war videos don’t show how to build IEDs, though. And even if they did, who would the parents sue? Ukraine, a nation at war? As opposed to 3D printed guns show you how to make them, and you could try to sue the gun company who it belongs to. And YouTube in both cases.

    we didn’t do a good job transitioning from religious to secular values in that way.

    A lot of religions were founded on and/or expanded by violence (Pilgrims to America, Knights Templar, Spanish Inquisition, etc), so I don’t remotely think “religious to secular” is the reason.