Default browser in Fedora KDE Plasma

Eli Wapniarski eli at orbsky.homelinux.org
Sun Aug 9 05:22:45 UTC 2015


On Sunday 09 August 2015 03:49:29 Kevin Kofler wrote:
> Reindl Harald wrote:
> > Am 08.08.2015 um 02:14 schrieb Kevin Kofler:
> >> Kevin Kofler wrote:
> >>> Mustafa Muhammad wrote:
> >>>> Some of my points were:
> >>>> 
> >>>> 1) Almost dead upstream for Konq, vs thriving upstream for Firefox,
> >>>> Konq may have undiscovered security vulnerabilities, but the limited
> >>>> number of users is hiding them.
> >>> 
> >>> The limited number of users also means nobody will be targeting
> >>> Konqueror with attacks. IMHO, this is actually an advantage.
> >> 
> >> PS: A Firefox 0-day exploited in the wild:
> >> https://blog.mozilla.org/security/2015/08/06/firefox-exploit-found-in-the
> >> -wild/ Do we really want to expose our users to such risks?
> > 
> > sorry, but *that* is nonsense
> > 
> > while i am firefox user and don't like it as default on live-media just
> > because there was a security bug is nonsense as argument, given that we
> > would need to kill nearly any package out of Fedora because all software
> > in the past few years had more or less critical security bugs
> 
> The point is, as I wrote, Konqueror is very unlikely to get targeted by an
> attack. Firefox, on the other hand, is an attractive target and does get
> exploited in the wild (as the example has shown).
> 
> All software has security holes. But only software with a high market share
> is an interesting attack target.
> 
>         Kevin Kofler

Huh??

That one I have to respond to. While in part true... the other aspect of 
vulnerability is how quickly a response is made to closing the holes. One of 
the hallmarks of Linux based systems is that security is #1. If a hole is 
discovered, it is repaired and released. It is in fact something that I am 
constantly amazed by.

It isn't just the browser that is attacked, but protocols. and the main vector 
when it comes to browser security is the human factor. You cannot blame a 
browser, one way or the other if people keep doing dumb things (and we are all 
guilty of doing dumb things) on the internet. Scripting languages, php, java, 
jscript, etc are other vectors as well.

The problem with Konqueror, is that no serious development is ongoing for it 
and it has been worked on in any serious fashion in a very long time. Other 
people have attempted to start new browsers projects but probably because of 
the organizational force of Mozilla and Google, the interest to push 
development has not been there.

I do not fall on either side of the debate. I understand that the live spin is 
there to show off KDE / Plasma and its applications. Unfortuneately, Konqueror 
is not a shining example of what a KDE app should be. It was when it first came 
out. I loved it, but after the development team deferred development to Apple 
things went south quickly.

An awful lot of people think of computers as communication devices rather than 
extremely sophisticated adding machines (which is what a computer is). If you 
are going to try to sell new users into using KDE on Fedora, you are more than 
likely gonna turn most of them off.

Firefox needs to be included. It should not be exclusive. By the way... If 
there is room on the CD iso so should libreoffice.

I believe that it would be counter productive to maintain an OCD stance when 
trying to promote KDE with applications that you know will turn newbies away. 
Hell, with the current state of affairs, they are turning vetrans away also.

Thats my 2 cents worth.

For your consideration

Eli

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



More information about the kde mailing list