Although Mozilla is a company and surely its main motivation is to earn income, it seems that it is true that it cares about the security and privacy of its users. It has always been said that Firefox is a very secure browser, and recently they have introduced more security with features like ETP than now blocks crypto mining and fingerprinting software. Fox's browser will be even more secure in the near future, at least for some users.
The users who will take advantage of the new security technology in the coming weeks are those of Linux and macOS. And it is that Firefox uses several external libraries to render the audio, video and images, and these libraries can be exploited by attackers to introduce malicious code. To avoid this, Mozilla will introduce a new lightweight sandboxing architecture, an RLBox that uses a web assembly sandbox to stop vulnerabilities that may affect us from third-party libraries.
RLBox will make Firefox more secure on Linux and macOS, for now
RLBox It is a technology that will make the browser components remain in safe sandboxes so that attackers cannot access or exploit the user's system through the aforementioned third-party libraries. It is a method that was developed at the universities of California and Texas in collaboration with the Mozilla Firefox team.
Currently, some browsers such as Chrome isolate all applications on a website or the entire page on sites such as Google or Amazon to prevent attacks between pages. On the other hand, Firefox uses a process level at the sandboxing level and the lightweight programming language Rust to avoid any security problem. The method that will come in the next few weeks will go even further.
The new security technology is now available in versions for Linux and macOS channel browser Beta y Nightly, that is, in Firefox 74 and 75. Therefore, we will be able to take advantage of it from next March 3, if they decide to launch it in the next version, or on April 7, in the strange case that they decide to delay the launch for some reason. Windows users will still have to wait a bit longer.