this post was submitted on 03 Apr 2024
28 points (88.9% liked)
Privacy
31975 readers
242 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Thanks for the link. I will read through the Tor mailing list and the other parts.
Why would you say something like that? But I will check everything again.
This was about Android, and Firefox had no process isolation to my last knowledge. Looking to find a source against this currently.
Okay? This is about privacy and security, Chromium is fully open source. Yes it is big tech and that may be a problem in many many cases. But this has no effect on its security.
DivestOS maintains a table on browser security and privacy. Firefox is nowhere near what you claimed/parroted, and is much better than any browser besides Cromite, however Cromite leaks a lot of data and has inherited fundamental Chromium issues, as Tor Project says.
https://divestos.org/pages/browsers
Moreover, Firefox can be hardened a lot with custom user.js configurations unlike Chromium browsers, and also happen to have full featured uBlock Origin as advantage.
Chromium security means nothing when it leaks data, is unfit for Tor Project and has privacy and anonymity problems. Firefox does not have those leakage and other issues, and allows full uBO functionality, hence is superior to Chromium browsers, both on desktop and mobile.
I also think the DivestOS project is pretty cool, as I use Mull daily and maintain my own custom addon collection from the time when Firefox didnt allow all installs. (I really have to clean that list up though, it has too many things).
Will look into it.
My knowledge is too that even "ungoogled Chromium" may not send data (so it doesnt have active antifeatures) but it is still not fingerprint protected.
Brave meanwhile is veeery bloated with weird stuff, which totally tells me that their focus cannot be that much on the privacy and security hardening.
Regarding Arkenfox, I maintain a small and pretty messy project to make it usable for daily usage changing only small bits.
I dont know percentages, but I remember most of it being one of these
So it is not mainly a security project but mainly privacy hardening to my knowledge. I agree with it mostly though, it is a great project.
Chromium has some flags and policies which are very limited though. The secureblue project has integrated all of them, and its still way worse than Arkenfox for privacy. There are JIT Exceptions though, not sure if this is available on Firefox, it was very hidden also for Chromium.
I also agree that manifest v3 is central Google control dystopia.
I have to say though
This makes little sense. If a Browser is not as secure as possible, it is not as private as possible. At least if you scale it. "The browser is like pretty secure, not the best available but okay, unless you are not targeted or something". What statement is that? We dont know if we are targeted.
So I appreciate if people say "this may not be the best for privacy, but we use the most secure base and try to make it privacy friendly" just like I respect people making hardened Firefox more secure.
Anti-fingerprinting on Android is very difficult because of GPU models, display size etc. According to GrapheneOS, Vanadium sends as little data as possible. And I believe them that. Not sure about other vectors of privacy, the lack of NoScript (granular JS control per origin) and UBO makes it unusable for me, along with strange UI for adding search engines or whitelisting cookies while whiping the others.
That applies vice-versa as well. Privacy is NOT a derivative of security, as Graphene loonies and idiots like madaidan would have you believe. This is one of the fundamental charlatan deeds "security" shills do in FOSS/privacy communities.
If Tor Project prefers Firefox over Chromium as base, then that simply means Firefox is superior for purposes of privacy, security and anonymity. Tor Project has hundreds or thousands of professionals that would make people like Brad Spengler and Micay look like a joke, as happened in the mailing lists in 2019, which made Micay invent lies to satisfy his ego and fanboy itches. He believes blindly in Google like a fanboy, which is the reason everything he does happens to support, fund and promote Google.
I avoid using a phone for anything remotely serious, and prefer a computer with the most common screen resolution and hardware for it. It depends on many factors what other measures I take, and I use Tor and I2P.
spoiler
If you ever heard of digdeeper, we are friends.Daniel Micay of Graphene has... A reputation. At the end of his tenure at Graphene, Micay started increasingly accusing people in many other communities of conspiring against him and harassing him. It elevated to the point of accusing Louis Rossman of being part of the conspiracy. It got swept under the rug for years, but Rossman was the one person to get so pissed off that he eventually outed Micay... And his departure from the organization was swift.
I actually reached out to Micay (IIRC before Rossman outed him) looking for answers. After showing me some incredibly scant "evidence" that amounted to accusations he had written in the past, he started accusing me of being part of the conspiracy too.
I don't like to claim people have mental illness recklessly, but I can't think of many other reasons he behaved that way. The only other obvious one is that he was a massive asshole for no reason at all.
But he's also very technically competent (or at least, prior to stepping down, was very competent), and there's probably a reason Graphene finds so many Android bugs and gets their patches implemented so regularly. But the whole thing definitely taints the project and some of the pages he most likely wrote.
I dont know if his fears are true and that is not for me to judge.
But he is very active, like still the most active person. It seems that he will always use his own account, but when reporting issues its always him to react.
I cannot imagine what a job that is