From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1QpCAb-0001c4-Q8 for garchives@archives.gentoo.org; Fri, 05 Aug 2011 04:38:01 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 419F921C117; Fri, 5 Aug 2011 04:37:48 +0000 (UTC) Received: from mail-fx0-f53.google.com (mail-fx0-f53.google.com [209.85.161.53]) by pigeon.gentoo.org (Postfix) with ESMTP id A87C321C0C7 for ; Fri, 5 Aug 2011 04:36:40 +0000 (UTC) Received: by fxd23 with SMTP id 23so3680520fxd.40 for ; Thu, 04 Aug 2011 21:36:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=HxTIpNAzekoSRMyGcjZJMdruWqgDXuvf1E7quqjTu1c=; b=aWEMNjW4hCU2+f3/XtP6MXra8zBjiiGjSeFWxUEADluoyU7P1Ng1WLVhvJE2H/RJuH wyc7uspPGtu0aBpzOCXDV0VFd/AZLhhSScwYPTJhoV4NOzGFMBk/I3H4WkqXJjwSF+HL CfOxYBch6eHCLWyNkVwevbwR/nusfODHjxhyw= Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Received: by 10.223.6.77 with SMTP id 13mr2295612fay.41.1312518999889; Thu, 04 Aug 2011 21:36:39 -0700 (PDT) Received: by 10.223.28.139 with HTTP; Thu, 4 Aug 2011 21:36:39 -0700 (PDT) In-Reply-To: References: <4E3B6BF6.4090801@asyr.hopto.org> Date: Fri, 5 Aug 2011 00:36:39 -0400 Message-ID: Subject: Re: [gentoo-user] www-client/chromium From: Michael Mol To: gentoo-user@lists.gentoo.org Content-Type: text/plain; charset=UTF-8 X-Archives-Salt: X-Archives-Hash: 93576c578d7c87a4123dd8fbe29f87e0 On Fri, Aug 5, 2011 at 12:23 AM, Adam Carter wrote: > On Fri, Aug 5, 2011 at 2:05 PM, Thanasis wrote: >> I noticed that chromium's code has a lot of vulnerabilities. >> https://bugs.gentoo.org/buglist.cgi?quicksearch=www-client%2Fchromium >> I suppose this is why we see so often version upgrades of it (and it's >> not a small app to build). >> Why is its code so, should I say prone to bugs, compared to >> other browsers? > > You've made an assumption there. Correlation implies causation? > > Perhaps there's more bugs found because of the bounties paid? Or maybe > its because the code is newer than the alternatives.... I don't think > its possible to make a judgement based on the information I have. At least one of the "multiple vulnerabilities" bugs linked to a Chrome update notice which didn't list any vulnerabilities. (Well, except a Flash update, which I didn't dig into) -- :wq