On 10/25/26 16:55, Andreas Røsdal wrote:


søn. 25. okt. 2026, 16:48 skrev Jelle van der Waa <[email protected] <mailto:[email protected]>>:

    On 10/25/26 15:17, Andreas Røsdal wrote:

    You claim that your project has an no LLM policy yet this was vibe
    coded?

     > This browser is already available on Windows Store and Google Play
     > store, where it had been subject
     > to the review process of those stores.
    I want you ask you to please stop the self promotion of your project on
    this mailing list.
    This appeal of authority by having it shipped in the Window Store and
    Google play store is very much undermined by your attempts to get it
    packaged in Debian which raised serious security concerns about the
    codebase. [1]

    I can only strongly recommend that no one uses this browser for
    anything
    serious (so anywhere where you have to log in or share personal
    information).


All the security issues reported in the Debian bugreport have been resolved now. So we respond quickly to reported security vulnerabilities and fix them quickly.

I am not going to review if this is true, but looking through the git log... The safe browsing list is still the same. [1]

 Also note that some of the opinions expressed in
this Debian bugreport are from Google employees, so there is a bias to prefer Google Chrome for them, and Northstar browser was not given a fair evaluation by Debian.

It seems you do not understand the Debian process, Ted Tso does not hold more sway over Debian then any other Debian Developer/Maintainer. Other Debian developers/maintainers have also raised some concerns. But in the end this boils down to browsers are a complex piece of software with big security & privacy concerns and users should not trust a 2 week old project for it.

As the Dutch proverb goes: "Trust arrives on foot and leaves on horseback".

So continue with your browser, get a good security review, show that you are willing to maintain the project long term maybe then people might be interested in packaging it in the AUR but for now I can only strongly recommend against it.

[1] https://github.com/nordstjernen-web/southstar-browser/blob/8f1156555911ebc318ecbcd8d9ab2e65dc3d569b/data/safebrowsing.list#L13

Reply via email to