News for hackers. Stuff that matters.

A comment on Elementary OS 0.3 “Freya” is released. Parent comment

Re:Elementary OS 0.3 “Freya” is released by xorcist on Saturday April 11, 2015 @01:52PM (#9360014)
A browser that's not Firefox or Chrome scares me slightly, considering the amount of resources that go into securing them, yet they all fall at cansecwest.

How vulnerable can I expect to be running Midori?

[ Parent | on HN ]
Re:Elementary OS 0.3 “Freya” is released by TazeTSchnitzel on Saturday April 11, 2015 @02:05PM (#9360065)
Midori is WebKit-based, so it's only as vulnerable as Safari.
[ Parent | on HN ]
Re:Elementary OS 0.3 “Freya” is released by psgbg on Saturday April 11, 2015 @06:39PM (#9361112)
That's not actually true. A browser is not as secure as it's engine. The thing is really more complex than that.

There are configurations concern, certificates, security layer, apps/plugins/add-ons, bugs within the ui layer...

[ Parent | on HN ]
Re:Elementary OS 0.3 “Freya” is released by TazeTSchnitzel on Sunday April 12, 2015 @07:19AM (#9362957)
Sure, but the bulk of the issues are in the renderering engine, and for that they are sorted.
[ Parent | on HN ]
Re:Elementary OS 0.3 “Freya” is released by psgbg on Tuesday April 14, 2015 @02:32PM (#9376320)
I know, it's the exposed part after all, but still I wouldn't recommend it as "secure as safari".
[ Parent | on HN ]
Re:Elementary OS 0.3 “Freya” is released by setpatchaddress on Saturday April 11, 2015 @05:02PM (#9360830)
WebKit isn't the only possible source of insecurity in an app that uses it. It may not even be in the top 10 versus things like image and font rendering libraries.
[ Parent | on HN ]