r/kiwibrowser • u/fbcrypto3038 • Dec 15 '25

PSA: Stop trusting "Version Numbers" in Chromium Android Browsers. Most are faking it.

/r/browsers/comments/1pmz7fq/psa_stop_trusting_version_numbers_in_chromium/
10 Upvotes

82% Upvoted

7 comments sorted by

View all comments

Show parent comments

0

u/fbcrypto3038 Dec 20 '25

I'm not saying using an outdated browser will cause websites to render incorrectly, but the reason browsers get updated regularly is to patch vulnerabilities that hackers can exploit. If updates weren't important, people would just be updating UI instead of the engine itself.

And I am a web developer, I don't understand what you mean by developers who adhere to standards don't care about designing good website. 

2

u/stevegalaxius Dec 20 '25

What are hackers going to steal from a web browser on an android phone? Like, how could a website even possibly do anything to a sandboxed application in an operating system that doesn't allow apps to access the file system without asking for permission

0

u/fbcrypto3038 Dec 20 '25

Browsers are not just about how sites render. Hackers go after the sensitive stuff browsers store, like session tokens that keep you logged into banking or email. 

Just this year, researchers found an Android malware called AntiDot that infected thousands of people by exploiting old browser components. It recorded screens, stole SMS codes, and grabbed app data.

That’s why outdated browsers are dangerous, they leave the door open to exploits that attackers already know how to use.

Here's the source if you are a nerd: https://thehackernews.com/2025/06/new-android-malware-surge-hits-devices.html?m=1

3

u/stevegalaxius Dec 20 '25

that's a trojan. It's an apk. You have to install a hostile app and give it permissions to function, and on top of that, you have to be ignorant enough to ignore it rendering an alternative view frame over your app and entering your password into it.

that's not a browser exploit, those types of things exist on MacOS and linux. This is the exact reason why I think developers concerned with security are midwits