Chrome source code tree is a Dumpster Fire! Chrome 89.0.4389.72, released by Google for Windows, Mac, and Linux this week, comes with a total of 47 security fixes. One exploit is critical to patch. WARNING!

(post is archived)

[–] • 1 pt

(edited )

FBI,CIA etc uses this exploit to root code into Poal.co users computers remotely.

Many browsers use Chrome Source code (which Originally Apple wrote, before Google forked it).

Opera, Microsoft Edge, Vivaldi, and Brave are over 70% CHROME SOURCE CODE too!

Really, almost every browser but dying Firefox spyware uses Apple's 2013 Webkit (Chrome).

https://en.wikipedia.org/wiki/WebKit

Google's Chrome drifted since 2013 from Apple, so hopefully Safari is not exploited this week too.

Details of the worst bug letting FBI into your computer for this week are still top secret this hour , when I check here :

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21166

CVE-2021-21166 can only be revealed early by comparing early binaries and dissassembling (IDA-Pro, Hex Rays typically) the diff to study what Google patched and why.

link

[+] [deleted] • 1 pt

[–] • 0 pt

70% Chrome is made using latest Chromium source.

Do not be so pedantic.

Read.

parent
link

[+] [deleted] • 1 pt

[–] • 0 pt

(edited )

70% of Chrome is made using latest Chromium source.

why are you changing the topic? We all know what Chrome is and what Chromium is, but you seem to not know.

Chrome uses Chromium to build and MAJORITY of Google Chrome, the vast majority of code, is Chromium

In September 2008 both Chromium and Chrome were 100% identical source code , not 70% like now, but 100% :

Google Chrome was introduced in September 2008, and along with its release, the Chromium source code was also made available.

https://en.wikipedia.org/wiki/Chromium_(web_browser)

Nearly ALL remaining existing browsers are majority of source code based on Chromium, and Chromium is of course written by Apple in 2013 (WebKit) from Safari

Basically millions of lines of Safari code are in nearly all web browsers because only Apple chose to be WWW consortium fully compliant and be the only browser to pass all WWW standards tests. It was easier to give up and use apples fast source code than to fix thousands of bugs to meet WWW rules.

I used NO WRONG TERMS in the post entry you are trying to criticize.

The exact spelling is and was :

Chrome source code tree is a Dumpster Fire! Chrome 89.0.4389.72, released by Google for Windows, Mac, and Linux this week, comes with a total of 47 security fixes. One exploit is critical to patch. WARNING!

That is clear and factual.

Whether the bug is ALSO in chromium is unknown until binary diffs are made and leaked before next patches and uploads to Chromium itself. The bug is secret still after two whole weeks, so now its 75% likely a bug in all browsers based on WebKit or Chromium.

parent
link

Load more (1 reply)

[–] • 0 pt

You have 3 options at this point: Browsers based on Chrome, browsers based on Firefox, or Safari. I know KDE is working on a Linux only browser but it's a LONG way from being mature. Bottom line: what exactly are we supposed to do?

link

[–] • 0 pt

My honest opinion?

Now that Google less than 4 weeks ago declared war on the official open source Chromium tree used by all of Googles competitors... I would suggest using a clean vanilla Chromium build, lacking the 30% of hidden stuff Google , Microsoft, Brave, keeps in private source.

Real Chromium is messy this month, but if everyone jumped to it and created a funded non-leftist non-woke foundation to keep it organized... Chromium could rapidly replace Google Chrome :

https://www.chromium.org/getting-involved/download-chromium

That being said, until this patch is made in this thread, and where the bug is, theres no telling if its a Chromium bug or a Google Chrome bug. I think its sadly a chromium bug, but we will all know next tuesday.

parent
link

[–] • 1 pt

I'll stick with Brave for the time being. But I'm really hoping that KDE browser can get a foothold. I'd legit swap my DE to use it if it matures enough. We NEED an alternative that doesn't drink woke kool-aid

parent
link

[–] • 0 pt

(edited )

Brave

Brave this month alone got caught TWICE leaking your IP of your house across the internet when trying to be anonymous or on tor

Feb 25: Latest Brave browser update fixes Tor .onion DNS Leak:
https://www.ghacks.net/2021/02/25/latest-brave-browser-update-fixes-tor-onion-dns-leak/

parent
link

Load more (2 replies)