tragicpapercut
Joined 7 years ago
Joined 7 years ago
Most "asshole" traffic I see falls into one of two categories - attempts to exploit vulnerabilities (../../../etc/passwd stuff) and account takeover attacks.
The first I can forgive, I don't frankly care where that traffic comes from and the responsibility is entirely mine as website admin to prevent these types of attacks through good coding practices, WAF, etc.
The second I have less control over because customers / the general public sucks at security. They re-use passwords they've had for 10 years and won't opt-in to 2fa. And as a merchant, my company generally eats the cost of fraud that these attacks generally result in.
If no or little legitimate traffic is coming from Tor, and a significant percentage of malicious traffic is coming from Tor - at great cost to me / my company - why the hell would I allow it to continue?
Firefox, IE, Opera have all been way late to the game on some or all of these features.
In the past I have been in the position to help make decisions on browser support at my company. We easily decided on Chrome because it was faster and more secure than IE, but more manageable than Firefox at an Enterprise level. Firefox is just starting to catch up to these feature sets. IE gave up. Safari is a literal running joke even amongst the most ardent of MacOS supporters at my company - features are simply non comparable.
I never once saw an incompatibility problem in Firefox that made me open Chrome. I currently run 2 browser sessions on my main computer - one in Firefox for personal use and one in Chrome for work use. I like and use Firefox, but Chrome has momentum.
I'm glad someone open sourced such basic security concepts and I don't care that it was Amazon.