News for hackers. Stuff that matters.

A comment on Mozilla patches two use-after-free vulnerabilities (ab)used in the wild. Parent comment

Re:Mozilla patches two use-after-free vulnerabilities (ab)us... by moonchrome on Saturday March 05, 2022 @04:20PM (#30572009)
Is that different with Firefox? I haven't been paying attention in a while now but I constantly read complaints about UI changes - and Firefox has it's share of experimental features that ended up being exploited or abuse (asm.js comes to mind).
[ Parent | on HN ]
Re:Mozilla patches two use-after-free vulnerabilities (ab)us... by wizzwizz4 on Saturday March 05, 2022 @04:40PM (#30572175)
It's not much different with Firefox, no. I was making a point that browser monopolies are bad; the fact we only have three real browser engines (two of which are based on Konqueror) is a problem.

But at least Mozilla do a basic back-of-the-envelope “is this feature a huge security vulnerability” check before shipping. (Looking at you, <portal>.)

[ Parent | on HN ]
Re:Mozilla patches two use-after-free vulnerabilities (ab)us... by blihp on Saturday March 05, 2022 @06:30PM (#30573095)
Only in the sense that when Google wants a new web standard the Firefox devs need to be convinced before it happens there. That has stopped a few, but not all, user hostile things from becoming defacto standards over the years.
[ Parent | on HN ]