Re: Packaging a free Firefox

[Mark H Weaver]

Pjotr Prins <address@hidden> writes:

> On Mon, May 21, 2018 at 04:07:10PM -0400, Mark H Weaver wrote:
>> 45.5.1?  That's ancient, with a large number of known security flaws.
>> Why are you running such an old version?
>
> Ancient? November 2016 released. Ancient is my thinpad and ancient is
> me ;). Security matters, but my system is not *that* vulnerable. Note
> that I run the browser in a degraded mode (noscript, noflash etc.).
> That actually matters most.

November 2016 is ancient for a web browser, which has an extraordinarily
large attack surface.  While it's true that disabling javascript helps,
there are known vulnerabilities in several other parts of the code.

Your system is vulnerable to attack.  If you think otherwise, you are
mistaken.

      Mark