Bryan Steele
Follow

Landry Breuil committed his pledge(2) work along with the 60.0 update to -current!

Other interesting/noteworthy changes:
• Pocket extension is disabled by default.
• "activity-stream/sponsored content" is no longer displayed by default in new tabs.

marc.info/?l=openbsd-ports-cvs

It's still a pretty broad set of promises, compared to chrome. But at least content processes cannot fork/exec, and even a broad pledge is a significant attack surface reduction that can be further reduced over time. Nice work landry@!

Sign in to participate in the conversation
Mastodon

Follow friends and discover new ones. Publish anything you want: links, pictures, text, video. This server is run by the main developers of the Mastodon project. Everyone is welcome as long as you follow our code of conduct!