full-disclosure - Moox firefox/thunderbird builds. Anyone looked at these yet?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: dk at pwarchitects.com (dk)
Subject: Moox firefox/thunderbird builds. Anyone looked
 at these yet?

Eric Paynter wrote:

> I wonder why somebody would branch just to do performance improvements?
> Why not just work with the mozilla team and apply the changes to the
> source tree?  
>
Well a cursory look at the forums suggest that there is indeed a 
performance gain, and a bit of a following to these builds as well. I 
gather then that it's a stability issue (etc) with the Official Mozilla 
team not using his compiler flags, etc for optimization, which makes 
complete sense in a number of area's (QA for one).
There is also suggestions by other posts [1] that he takes patches not 
integrated into the "official builds", so I gather that he's adding to 
the code himself in places. All of which is fine and dandy by me; the 
guy looks respectful of Mozilla trademarks, (etc) and rather helpful in 
providing this resource.
But as I couldn't find the source he compiles from, (post patches) or 
work he's done /other/ than binary files -- it just smelled a bit funny.

> Or maybe I'm just a super paranoid security professional.
>  
>
Nothing wrong with that now is there?  :)

[1]   http://www.moox.ws/forum/viewtopic.php?t=29

-- 
dk