My browser recommendation, if you’re looking for something that’s open source and pretty competent, it’s a fork of Firefox with some pretty unique functionality.

        • Kissaki@programming.dev
          link
          fedilink
          English
          arrow-up
          2
          ·
          7 hours ago

          The attack surface is the flaw. The chain of trust is the flaw/risk.

          Who’s behind the project? Who has control? How’s the release handled? What are the risks and vulnerabilities of the entirely product delivery?

          It’s much more obvious and established/vetted with Mozilla. With any other fork product, you first have to evaluate it yourself.

        • CameronDev@programming.dev
          link
          fedilink
          arrow-up
          2
          ·
          8 hours ago

          No, this is (to my knowledge anyway) a theoretical problem. But it is very much a real risk, as demonstrated by the xz backdoor.

          We should be very careful who we trust, especially for browsers, because a compromise could be catastrophic.