Security Risks for continuing use of Pale Moon for Android?

Anything related to the Android/mobile version of Pale Moon.

Moderators: Indalecio, satrow

User avatar
Baloo
Newbie
Newbie
Posts: 4
Joined: Thu Aug 24, 2017 3:02 pm

Security Risks for continuing use of Pale Moon for Android?

Postby Baloo » Thu Aug 24, 2017 10:42 pm

Hi,

I love PM on my Desktop and how lightweight it is. First found the browser by checking to see if anyone had updated the old FOXSCAPE theme, and someone had forked it to Pale Moon. I shifted over, and seeing how lightweight the browser is while still using the best privacy and security add-ons, I won't be moving back.

That being said, I really like Pale Moon and would like to use it for Android due to the Sync feature. However, I know that the browser has been discontinued and is vulnerable to security issues with its continued use.

If I choose to continue using Pale Moon for Android, what are the theoretical risks I'm taking? Are any of them mitigated by using specific add-ons like uMatrix and uBlock to block scripts and the like? I read on here that uMatrix is compatible with Pale Moon, but I can't find the add-on file to add it to PM for Android.

Any help would be appreciated, thank you.

Falna
Lunatic
Lunatic
Posts: 258
Joined: Sun Aug 23, 2015 5:56 pm
Location: UK

Re: Security Risks for continuing use of Pale Moon for Android?

Postby Falna » Fri Aug 25, 2017 12:39 am

Baloo wrote:I read on here that uMatrix is compatible with Pale Moon, but I can't find the add-on file to add it to PM for Android.

I'm running uBlock Origin 1.11.4 on Pale Moon Android (wouldn't install the latest version).
If you open a tab on the Pale Moon for Android start page and scroll to the bottom, there's a link to "Browse all Pale Moon add-ons" - which actually takes you to the Firefox for Android add-on site. I had to request the desktop version of this to select and install extensions (to get around an error warning on the mobile page).

I'll leave someone more knowledgeable to comment on the general security risks.

AstonAgar
Banned user
Banned user
Posts: 7
Joined: Mon Sep 04, 2017 2:53 am

Re: Security Risks for continuing use of Pale Moon for Android?

Postby AstonAgar » Mon Sep 04, 2017 3:01 am

I am using 360 security for my Android device. It's working superb. Though this isn't an add-ons. This is a software to removed virus/maleware.

User avatar
dark_moon
Knows the dark side
Knows the dark side
Posts: 3601
Joined: Mon Jan 09, 2012 5:34 pm
Location: Germany

Re: Security Risks for continuing use of Pale Moon for Android?

Postby dark_moon » Thu Sep 07, 2017 7:16 pm

You dont need any AV on Android. Also AV on android make your system even more vulnerable
Happy Pale Moon x64 under Win7 x64 User
German translator for Pale Moon 15+ and Pale Moon Commander addon

HowTo create a new Pale Moon Profile & use the Safe Mode
My GPG Key: 0x01EAFE95

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 19495
Joined: Sun Aug 28, 2011 5:27 pm
Location: 58.5°N 15.5°E
Contact:

Re: Security Risks for continuing use of Pale Moon for Android?

Postby Moonchild » Thu Sep 07, 2017 9:23 pm

dark_moon wrote:You dont need any AV on Android. Also AV on android make your system even more vulnerable

Please don't state this. Malware on Android is a major issue.

A quick search will give you a few interestign articles to educate yourself on the matter: https://duckduckgo.com/?t=palemoonsp&q= ... ses&ia=web
Improving Mozilla code: You know you're on the right track with code changes when you spend the majority of your time deleting code.
Image

User avatar
moonbat
Hobby Astronomer
Hobby Astronomer
Posts: 23
Joined: Wed Dec 09, 2015 3:45 pm
Location: India

Re: Security Risks for continuing use of Pale Moon for Android?

Postby moonbat » Fri Sep 08, 2017 7:23 am

Moonchild wrote:
dark_moon wrote:You dont need any AV on Android. Also AV on android make your system even more vulnerable

Please don't state this. Malware on Android is a major issue.

A quick search will give you a few interestign articles to educate yourself on the matter: https://duckduckgo.com/?t=palemoonsp&q= ... ses&ia=web


The day Android malware can install itself without user intervention is the day you need a regular anti virus scanning in the background.
Any app on Android requires user interaction to be installed in the first place, or to request permissions. Shady third party app stores, and ones that offer pirated versions of paid software are the more likely vectors. Even on Play Store, it pays to look at user reviews and names of developers of apps before installing them, or to stick to popular ones.

tl;dr - The malware problem on Android is entirely due to clueless users. This is not like the days of invisible drive-by downloads that compromised IE6 on Windows XP, where you wouldn't even know you had been pwned.

User avatar
dark_moon
Knows the dark side
Knows the dark side
Posts: 3601
Joined: Mon Jan 09, 2012 5:34 pm
Location: Germany

Re: Security Risks for continuing use of Pale Moon for Android?

Postby dark_moon » Fri Sep 08, 2017 7:54 am

moonbat wrote:
Moonchild wrote:
dark_moon wrote:You dont need any AV on Android. Also AV on android make your system even more vulnerable

Please don't state this. Malware on Android is a major issue.

A quick search will give you a few interestign articles to educate yourself on the matter: https://duckduckgo.com/?t=palemoonsp&q= ... ses&ia=web


The day Android malware can install itself without user intervention is the day you need a regular anti virus scanning in the background.
Any app on Android requires user interaction to be installed in the first place, or to request permissions. Shady third party app stores, and ones that offer pirated versions of paid software are the more likely vectors. Even on Play Store, it pays to look at user reviews and names of developers of apps before installing them, or to stick to popular ones.

tl;dr - The malware problem on Android is entirely due to clueless users. This is not like the days of invisible drive-by downloads that compromised IE6 on Windows XP, where you wouldn't even know you had been pwned.

This! :thumbup:
Happy Pale Moon x64 under Win7 x64 User
German translator for Pale Moon 15+ and Pale Moon Commander addon

HowTo create a new Pale Moon Profile & use the Safe Mode
My GPG Key: 0x01EAFE95

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 19495
Joined: Sun Aug 28, 2011 5:27 pm
Location: 58.5°N 15.5°E
Contact:

Re: Security Risks for continuing use of Pale Moon for Android?

Postby Moonchild » Fri Sep 08, 2017 9:30 am

moonbat wrote:tl;dr - The malware problem on Android is entirely due to clueless users. This is not like the days of invisible drive-by downloads that compromised IE6 on Windows XP, where you wouldn't even know you had been pwned.


Excuse me but this is the case for EVERY operating system; android is no different than Linux or Windows or Mac OS in that case.
The days of drive-by download-and-install are long gone, regardless of OS (unless you're clueless in the respect that you still run on an not-updated Windows XP or something similar obsolete and insecure).

Most malware comes either piggy-backed with other applications or is explicitly installed by the user with their full knowledge that they are installing something, just not realizing that they are installing something dangerous. Or suffering from "confirmation fatigue" and clicking through the installation dialogues without checking what it says.
Improving Mozilla code: You know you're on the right track with code changes when you spend the majority of your time deleting code.
Image

User avatar
moonbat
Hobby Astronomer
Hobby Astronomer
Posts: 23
Joined: Wed Dec 09, 2015 3:45 pm
Location: India

Re: Security Risks for continuing use of Pale Moon for Android?

Postby moonbat » Tue Sep 19, 2017 2:06 pm

Moonchild wrote:
moonbat wrote:tl;dr - The malware problem on Android is entirely due to clueless users. This is not like the days of invisible drive-by downloads that compromised IE6 on Windows XP, where you wouldn't even know you had been pwned.


Excuse me but this is the case for EVERY operating system; android is no different than Linux or Windows or Mac OS in that case.
The days of drive-by download-and-install are long gone, regardless of OS (unless you're clueless in the respect that you still run on an not-updated Windows XP or something similar obsolete and insecure).

Most malware comes either piggy-backed with other applications or is explicitly installed by the user with their full knowledge that they are installing something, just not realizing that they are installing something dangerous. Or suffering from "confirmation fatigue" and clicking through the installation dialogues without checking what it says.

I'm not singling out Android - I'm saying this class of malware is non existent for power users who follow safe best practices - don't download software from dodgy sites, and keep your eyes open when installing or clicking on anything.
On the Play Store, stick to popular apps, make sure the developer name is consistent with what you would expect (to avoid adware masquerading as legit apps with identical icons) and read user reviews before installing.
Being prudent will keep you safe regardless of what platform you use or how vulnerable it is - once it's established that drive-by/silent malware installation security holes are non existent.

Difficult? So is driving a car. Computers and the internet have been around for a quarter century now, there is no excuse for remaining clueless about these things when even the mainstream press covers security holes and steps to stay safe.


Return to “Pale Moon for Android”

Who is online

Users browsing this forum: No registered users and 2 guests