News for hackers. Stuff that matters.

A comment on Google Chromium, sans integration with Google. Parent comment

Re:Google Chromium, sans integration with Google by ta17711771 on Sunday June 07, 2020 @04:03AM (#23445632)
Security is a big one.

No per site process isolation, Firefox on X11/Linux is baaaad, and that's just the beginning.

[ Parent | on HN ]
Re:Google Chromium, sans integration with Google by minitech on Sunday June 07, 2020 @08:27AM (#23446886)
What does Firefox do w.r.t. X11 that’s less secure than other browsers?
[ Parent | on HN ]
Re:Google Chromium, sans integration with Google by est31 on Sunday June 07, 2020 @05:16PM (#23450899)
https://bugzilla.mozilla.org/show_bug.cgi?id=1129492

X11 is an old display protocol predating modern concepts of application sandboxing. It gives gives windows lots of control, like allowing them to move the mouse, enter keystrokes, etc. Basically, anyone who has an X11 handle has the same level of access as the user. In Firefox, the process that's supposed to be sanboxed (the content process) has precisely such a handle.

[ Parent | on HN ]