Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)PR
Posts
8
Comments
811
Joined
2 yr. ago

  • You can also go on the play store and find a huge list of proprietary apps that haven't been updated.

    You need some actual stats to back up this point. Plenty of proprietary software is unsuccessful because it fails to profit, so its shut down. At least FOSS software will continue as long as someone finds it useful enough to keep it going. Plus the obvious, that if you like a piece of software you can maintain it yourself.

    Also saying that FOSS software is "notoriously low quality" is silly. There's tons of great and important FOSS software and plenty of shit FOSS software, just like proprietary software. Your comments just ignore how much proprietary shovelware exists.

  • What issue are you having? When you go to patch an app Revanced should show you a suggested version. If you tap the suggestion it'll search it for you and you can download it from an apk site. When you download it make sure you get a standard apk, not a bundle.

  • Or they're just adding improvements to the software they heavily rely on.

    I don't trust or like Microsoft, but the likelihood of there being malicious intentions in this is incredibly low. Just imagine the fallout if Microsoft tried to sabotage the kernel.

  • I'm not saying Librewolf is insecure, I'm just saying its a bit less secure. They generally do a good job keeping up to date, but there can be delays if an update conflicts with their changes.

    Librewolf is not just a Firefox config. You can look at the repo and see a number of patches. Without a paid security team to review these patches with every update, it is less secure.

    I'm not saying not to use Librewolf, the likelihood of a zero day specifically targeting it and effecting a significant number of users is very unlikely, simply based off of the size of its userbase compared to more mainstream browsers.

  • It does, but less than Firefox does. Their lack of manpower means delayed updates to fix zero days compared to Firefox. It also means less eyes on any patches introduced, so I'd be more concerned about malicious code being introduced.

  • Do people in this thread not understand that Microsoft frequently contributes to Linux? They've already lost the battle there. They rely on Linux for servers as much as everybody else.

    Not necessarily saying this is a good thing or not, but writing off any Linux contributions Microsoft makes would be pretty silly.

  • Also want to add that this was caused by a configuration issue. If you want security, don't use Firefox (or its forks) default configs, look into Betterfox. Apparently Zen also uses this as the base for its default preferences, which is a good decision.

  • I'm not sure why you linked to this irrelevant 3 week old issue while referring to something that was fixed a year ago. Referring to it as a backdoor also implies that it was malicious, when it was simply incompetence. Have there been any security issues since? (Not trying to imply that not having any would make it safe, just wondering).

    Zen is an amateur hobbyist project, expecting it to be something else is silly. It isn't backed by a company, so you take on these risks when you use the project. The same thing goes for all community run browser forks, and unfortunately, using upstream browsers will 100% be more secure. If you don't want to take those risks, just use Firefox (preferably hardened).

    Security costs money, open source browser forks generally don't have much of that.

    Edit: I'm not trying to shit on this browser, or even say that nobody should use it. Be aware of your attack surface and know what risks you're taking on when using any piece of software. I'm probably still going to play around with Zen, but I probably won't be doing my banking on it.