[Nix-dev] Chromium: Unpatched CVEs or Missing Features?

Moritz Ulrich moritz at tarn-vedra.de
Mon Nov 7 18:33:22 CET 2016


Shea Levy <shea at shealevy.com> writes:

> [ Unknown signature status ]
> Arbitrary code execution by visiting a web page trumps, IMO. Maybe add
> an assert if flash or widevine are enabled so the eval fails with a
> useful message?

I agree. Critical security issues trumps features. Is it possible to
watch netflix in our Firefox? If so we could just tell users to watch it
there for now.

On the other side, breaking Netflix might lead to a faster fix as
developers can't procrastinate on Netflix anymore ;-)


More information about the nix-dev mailing list