News for hackers. Stuff that matters.
Re:Bypassing Browser Security Warnings with Pseudo Password ... by gruez on Thursday November 02, 2017 @09:28AM (#15610196)
>Someone wants to watch a video: install a codec. [...] Introducing 1000&1 vulnerabilities, where there should be none

I'd rather use a codec maintained and updated by Mozilla every 6 weeks than some "community maintained" codec that I installed years ago and has to be manually updated.

Re:Bypassing Browser Security Warnings with Pseudo Password ... by drdaeman on Thursday November 02, 2017 @07:09PM (#15615210)
YMMV, but I'd rather prefer browser vendor to work on a browser, rather than try to become an operating system, with its own libraries and update channels.

A web browser shouldn't normally bundle image decoders, audio or video codecs, on-screen keyboards or printer and video card drivers.

Obvious exceptions apply, of course - e.g. if OS doesn't have built-in image decoder for a specific format it totally makes sense to bundle one.

But this is really getting off-topic.