Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Back when I still had to support bleeding-edge web apps more than a few of my bug reports were from Pale Moon users because the devs couldn't configure their compiler properly and were always behind on bug fixes. Impossible to act on that stuff, though I tried. Once I realized how bad PM's security story was I gave up on supporting it, not gonna expose my development machines to that.


[flagged]


Firefox did not have process-level sandboxing till Quantum. Exploit a JS bug in the renderer and you had code execution on the host OS.

"Fake news" accusations aren't welcome on HN, people here prefer to disagree amicably.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: