Captchas I have read the instructions. I have searched existing issues and avoided creating duplicates. I am not filing an enhancement request. What happened? There are multiple privacy and telemtr...
I’m not sure why you linked to this irrelevant 3 week old issue while referring to something that was fixed a year ago. Referring to it as a backdoor also implies that it was malicious, when it was simply incompetence. Have there been any security issues since? (Not trying to imply that not having any would make it safe, just wondering).
Zen is an amateur hobbyist project, expecting it to be something else is silly. It isn’t backed by a company, so you take on these risks when you use the project. The same thing goes for all community run browser forks, and unfortunately, using upstream browsers will 100% be more secure. If you don’t want to take those risks, just use Firefox (preferably hardened).
Security costs money, open source browser forks generally don’t have much of that.
Edit: I’m not trying to shit on this browser, or even say that nobody should use it. Be aware of your attack surface and know what risks you’re taking on when using any piece of software. I’m probably still going to play around with Zen, but I probably won’t be doing my banking on it.
I’d like to take this opportunity to say Mullvad browser is maintained by Mullvad and Tor Project which in my eyes sets it way apart from these hobby forks (including librewolf)
Also want to add that this was caused by a configuration issue. If you want security, don’t use Firefox (or its forks) default configs, look into Betterfox. Apparently Zen also uses this as the base for its default preferences, which is a good decision.
I’m not sure why you linked to this irrelevant 3 week old issue while referring to something that was fixed a year ago. Referring to it as a backdoor also implies that it was malicious, when it was simply incompetence. Have there been any security issues since? (Not trying to imply that not having any would make it safe, just wondering).
Zen is an amateur hobbyist project, expecting it to be something else is silly. It isn’t backed by a company, so you take on these risks when you use the project. The same thing goes for all community run browser forks, and unfortunately, using upstream browsers will 100% be more secure. If you don’t want to take those risks, just use Firefox (preferably hardened).
Security costs money, open source browser forks generally don’t have much of that.
Edit: I’m not trying to shit on this browser, or even say that nobody should use it. Be aware of your attack surface and know what risks you’re taking on when using any piece of software. I’m probably still going to play around with Zen, but I probably won’t be doing my banking on it.
I’d like to take this opportunity to say Mullvad browser is maintained by Mullvad and Tor Project which in my eyes sets it way apart from these hobby forks (including librewolf)
I agree, Mullvad is the only fork that I have confidence in the security of (ignoring Tor ofc since it’s not really for general use).
I’ll bite: what’s wrong with LibreWolf?
It just lacks manpower unfortunately. Going with a browser that has the funding for a security team is the safer option.
Also want to add that this was caused by a configuration issue. If you want security, don’t use Firefox (or its forks) default configs, look into Betterfox. Apparently Zen also uses this as the base for its default preferences, which is a good decision.