Agreed but running Windows in VirtualBox on Solaris *is* an option.
>
> Mozilla is substantially funded by Google and is a U.S. entity with U.S.
> employees. So, Firefox is similarly tainted because Mozilla's economic
> motives and susceptibility to government intervention closely parallel
> Google's.
One important difference is Chromium has mostly been used on close source OS
(Windows and MacOS). The people there are not used to auditing code. Firefox
is very popular on open source OS and there are many people looking at it. From
the number of eyes I think it will be harder to to hide something in Firefox
than in Chromium. Firefox builds are still being done by Oracle China AFAIK.
Another important difference is all google apps depend on google being
around and connectivity to google. AFAIK nothing in Firefox depends on
communication with Mozilla. When it does it will be time for links/lynx and
then off the web.
> a) Chromium has more mature and better tested sandboxing than either WebKit
> or Firefox.
I don't know what that means but I don't believe it. Running a VBox guest or
a Solaris zone or LDOM with Firefox is still safer than running Chromium on
a real host.
>
> b) Automatic updates ensure you more quickly receive bug fixes, spoofing
> and phishing counter measures, and SSL CA updates.
Automatic updates are terribly unsafe. Nothing on any of my systems is
updated automatically. Either I look at an update and do it manually or it
stays like it is. I can't think of a better vulnerability vector than auto
updates. And I can't believe people are happy with that concept. Windows has
really done more damage than just peddling bad GUIs.