:: Re: [Dng] Plan for Devuan to use Mo…
Top Page
Delete this message
Reply to this message
Author: Gravis
Date:  
To: John Morris
CC: dng@lists.dyne.org
Subject: Re: [Dng] Plan for Devuan to use Mozilla products as is
> They do not support anything but the current version
> unbuildable on a stable Debian release because they freely import dependencies
> They don't even support RHEL 6


you have this /backwards/, your _software_distributor_ isn't
supporting Chromium. there are literally tens of thousands of
distros, so expecting a software vendor to make a backported package
for $MY_FAV_DISTRO is narcissistic at best.
--Gravis


On Wed, Mar 4, 2015 at 11:48 PM, John Morris <jmorris@???> wrote:
> On Wed, 2015-03-04 at 21:09 -0500, Jude Nelson wrote:
>> > Besides issues related to Chromium's poor support for privacy features,
>> > it also has no real security support.
>>
>> No comment on the privacy features, but I beg to differ on the security.
>> The fact that the Linux build of Chromium runs each tab and plugin in its
>> own seccomp'ed process and runs them all separately from a "kernel" process
>> puts the browser worlds ahead of Firefox in terms of security. Excluding
>> project Electrolysis (which I look forward to), the fact that Firefox runs
>> every tab in the same process means that one bad tab can compromise the
>> whole browser without too much effort. By contrast, Chromium's
>> kernel/process-per-tab factoring has led to secure browser designs [1]
>> where this class of exploit and others are provably impossible.
>
> Methinks you missed the point. Forget the kewl tech and concentrate on
> the people problem. Chromium/Chrome can't be secure on a Linux based on
> Debian, period. Full stop, end of discussion. They do not support
> anything but the current version and it quickly becomes unbuildable on a
> stable Debian release because they freely import dependencies on every
> new and shiny bit they see and expect it to be present in the very
> latest version.
>
> They don't even support RHEL 6, you have to grovel around on the
> Internet for wildly unsupported and dubious procedures (involving
> repackaging Fedora binary packages and shoving them down /opt and
> LD_LIBRARY_PATH trickery) to keep Chrome running, I know because I'm
> supporting fifty some odd workstations right now running CentOS 6 and
> need more than one browser available. They didn't just drop support for
> 6 when RHEL 7/Centos 7 shipped, no they dropped it over a year before
> the beta for 7 even appeared. And that is the 'Enterprise' distro with
> the big corporate accounts; Google doesn't give a crap. Moz didn't
> either, but when enough large sites complained about the constant
> version churn they at least delivered an LTS version.
>
> They are far worse than Moz when it comes to treating Linux
> (Android/Linux and Chrome/Linux excepted of course) as a red headed
> stepchild. If you want Chrome you run Windows, ChromeOS or a bleeding
> edge Linux distro.
>
>
> _______________________________________________
> Dng mailing list
> Dng@???
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
>