News for hackers. Stuff that matters.
Re:OpenBSD won't update Firefox, advises users to switch to ESR by superkuh on Saturday January 11, 2020 @08:13PM (#22023702)
Yes. Firefox forks that forked before Mozilla jumped the shark (v37, then multiprocess, then rust) that evolved into their own thing without all the features/attack surfaces that aren't strictly required for a browser to just render html and execute JS.
Re:OpenBSD won't update Firefox, advises users to switch to ESR by snazz on Saturday January 11, 2020 @08:19PM (#22023743)
Simpler, sure. Safer and more secure, how? There's been a lot of new security features in Firefox recently that you'd be missing out on if you used something that old. You can't put "just" in front of "execute JS" (or "render HTML" for that matter); that's a pretty complex task with a lot of security concerns. I can't imagine that the communities of these Firefox forks can keep up with backporting upstream security fixes, especially since the modern Firefox codebase has diverged so much.
Re:OpenBSD won't update Firefox, advises users to switch to ESR by samantohermes on Saturday January 25, 2020 @04:13PM (#22148651)
Re:OpenBSD won't update Firefox, advises users to switch to ESR by c0nducktr on Saturday January 11, 2020 @09:35PM (#22024078)
Pretty sure this bug existed in v36 as well.