With the year coming to an end, I was thinking about what would make me switch away from FF. There's only one thing: security. With a dwindling market share, and a C-suite that seems to be distracted at best, the risk is that the team is too small.<p>What do you think?<p>Looking at raw numbers of cve reports, FF is doing better than chrome:<p>https://www.cvedetails.com/product/3264/Mozilla-Firefox.html?vendor_id=452<p>https://www.cvedetails.com/product/15031/Google-Chrome.html?vendor_id=1224<p>But the severity of those reports is another matter. One single report could make a night and day difference.
Advertising networks are vectors for malware:<p><a href="https://www.cisecurity.org/insights/blog/malvertising" rel="nofollow noreferrer">https://www.cisecurity.org/insights/blog/malvertising</a><p><a href="https://www.malwarebytes.com/malvertising" rel="nofollow noreferrer">https://www.malwarebytes.com/malvertising</a><p><a href="https://theconversation.com/spyware-can-infect-your-phone-or-computer-via-the-ads-you-see-online-report-213685" rel="nofollow noreferrer">https://theconversation.com/spyware-can-infect-your-phone-or...</a><p>Even the FBI recommends ad blockers:<p><a href="https://www.ic3.gov/Media/Y2022/PSA221221?=8324278624" rel="nofollow noreferrer">https://www.ic3.gov/Media/Y2022/PSA221221?=8324278624</a><p>So if you're concerned about security then you want the browser with the best ad blocker.<p>uBlock Origin works best in Firefox:<p><a href="https://github.com/gorhill/uBlock/wiki/uBlock-Origin-works-best-on-Firefox">https://github.com/gorhill/uBlock/wiki/uBlock-Origin-works-b...</a>
I have the same worry (although I have no evidence, and haven’t done much research into finding evidence).<p>I've slowly transitioned from FF to Chrome over the past year, for this reason. I still use both, but am trying to prepare myself for a time that comes when FF is no longer a viable primary browser.
Just going on what vulnerbilities that have been found (and assigned a CVE number) is one thing.
The real question should be, how big is the real number of vulnerbilities that have not been found yet.
Looking at this from a pure CVE perspective, using Firefox rather than Chrome may reduce your exposure simply due to the fact that Firefox has a lower market share.