Pale Moon 25 Released

Thanks for the info!

 

http://www.ghacks.net/2015/08/04/pale-moon-blocks-adblock-plus/
Pale Moon forum • View topic - Adblock Plus blocked.

 

WARNING: there is a bit of a flame war going on, so please prepare yourself for some fireballs!

Just read some of the commits and it really ticked me off!

 

Pale Moon forum • View topic - Pale Moon 26 (Goanna) beta1 published!

 

If it will support uBlock Origin then I am game to try it.
EDIT: Have installed Palemoon Goanna beta 26.0 and so far running well in Sandboxie although I had to revert back to sandboxie 5.01.3 because of flash and plugin container crashing while in Sandboxie 5.01.6. Also no problem with uBlock origin running in PM Goanna.

 

https://www.palemoon.org/releasenotes.shtml

 

Out of Palemoon Goanna for now and updated back into Palemoon 25.7. Will go back into Goanna when there is a stable release.

 

Beta 2 is out of the Goanna engine, please visit here to get a copy: http://www.palemoon.org/WIP/. And to report any issues, please do it here: https://forum.palemoon.org/viewtopic.php?f=5&t=9360. Thanks!

 

Re Goanna - Have it installed and testing it out as we speak.

 

I've installed Palemoon as a newbie to this browser, and I'm liking it so far (Firefox would freeze and 'not responding' all the time). I may be a convert.

I'm unsure however as to the security aspects of this browser, does it have all the latest security updates as per the latest Firefox version? Or are they 2 different beasts? I like to be secure.

 

Hello @cnople, hope this may help to answer your questions:
https://www.palemoon.org/faq.shtml#Is_Pale_Moon_safe_to_use

https://www.palemoon.org/technical.shtml#Firefox_Differences

Addressing any security concerns promptly is always a priority for the Pale Moon developers, and its userbase has grown a lot in recent years (to 500K+ users), often as a result of Firefox users becoming tired of Mozilla's apparent direction.

Here are a couple of threads from the PM forum, which might help to allay any concerns:
Pale Moon forum • View topic - [solved] OCSP security
Pale Moon forum • View topic - Critical Firefox bug - Palemoon safe?
Pale Moon forum • View topic - Mozilla, Google, and Microsoft will disable RC4

 

If security is your primary concern then palemoon is not the browser for you.I suggest chrome as it has a security sandbox.
I see no reason to use this over firefox to be honest especially on a linux machine and the maintenance of the linux version seems iffy at the best of times.

its your call but i would stick with well known companies rather than relatively new small outfits like palemoon.

Thanks.

 

The main developer behind Pale Moon is very responsive to security vulnerabilities, and focused on avoiding foreseeable problems with the direction FF updates have gone in.

If you read the release notes, the general approach is to include relevant security patches immediately (i.e. before general updates). They also tend to avoid adding new features if they think it'll increase the surface area for possible exploits e.g. certain HTML5 components and inline PDF browser.

Generally (IMO) this means that Pale Moon is likely to be more secure than Firefox. Of course, this has to be balanced by the risk of exploits being found for old code that Palemoon still uses, and new version of FF not.

Combined with NoScript (even if just for XSS protections etc), ad blocking (uBlock Origin), and MBAE it should be pretty solid IMO.

 

Just further to my first reply:

FWIW You can run browser security tests yourself, such as http://www.browserscope.org/security/test

Firefox and Pale Moon all fail the same tests:
Firefox portable 37.0.1 fails 3/17
Firefox portable 41.0 fails 3/17
Pale Moon 25.7.0 (without NoScript) fails 3/17
(toStaticHTML API; X-Content-Type-Options; Origin header)

Pale Moon 25.7.0 (with NoScript) fails 1/17
(Origin header)

Chrome and secure variants all fail the same test:
Google Chrome 45.0.2454.99 fails 1/17
SWare Iron (based on Chromium) 43.0.2300.0 fails 1/17
SWare Iron (based on Chromium) 45.0.2400.0 fails 1/17
(toStaticHTML API)

Opera portable 12.17 build 1863 fails 6/17
(toStaticHTML API, X-Content-Type-Options, Sandbox attribute, Origin header, Content Security Policy, Block visited link sniffing)


So to reiterate, with NoScript you can have it just passively block XSS, Clickjacking, CSRF, etc without using the per site whitelist/blacklisting of scripts, thereby increasing the security of FF/PaleMoon.

Other browser security related sites:
http://browserspy.dk/
http://www.pcflank.com/browser_test1.htm
https://www.ssllabs.com/ssltest/viewMyClient.html
https://www.browserleaks.com/

 

That's my setup with Palemoon, uBlock Origin with Dynamic filtering and NoScript as above. Also have flashDisable installed as well. Oh, I also run Palemoon in Sandboxie, thought I had better mention that as well.

 

Thanks for the clarification. I have uBlock Origin and Diconnect installed as a matter of course, and MBAM premium and MBAE free. So I feel better about it.

I did however just have to switch to Chrome (which I dislike) for a website that required Adobe Reader plugin to view.

 

Not much will get through a setup like that Even Cryptolocker type malware won't be able to do damage provided Sandboxie settings are blocking direct write access to user folders.

No worries. Well with the divergence between FF and PM I expect more and more websites not to behave properly with PM, but I've never had a website that requires Adobe Reader plugin to work properly. My journal sites just download the PDF instead of viewing them inline, which is what I want. Out of curiosity what site was it?

I keep portable versions of Firefox, Opera, and Iron browser handy.

 

It was an insurance company site, with a letter embedded in the page. It was greyed out and linked me to Adobe Reader, which I politely declined. I knew Chrome would handle it, but as I said, I dislike Chrome, and Google generally.

 

https://www.palemoon.org/releasenotes.shtml

 

Updated via the updater. Working well.

 

installed, thank you!!

 

https://www.palemoon.org/releasenotes.shtml

 

Thank you D!!

 

Updated via the updater.(See that there's another wolf in the area)

 

http://www.palemoon.org/releasenotes.shtml