Privacy

32482 readers

228 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS

Another question about browsers :) (lemmy.world)

submitted 1 day ago* (last edited 3 hours ago) by andylicious1337@lemmy.world to c/privacy@lemmy.ml

15 comments fedilink hide all child comments

I am in the privacy game for about 2 years now and I've become the go-to on privacy questions in my family (which makes me proud, cuz this means, I am not just this privacy nut that cant be reached on whatsapp :D). I was asked about a browser for Graphene OS. Clearly I recommended the one I use atm, which is Waterfox (was recommended once in this comm). The person who asked me is using bromite (which looks good too). After thinking about the recommendation, there is one open question:

Does it really matter which alternate browser you choose, if it is of course not something like Google Chrome, Mozilla Firefox or Safari (especially regarding the outcome in this comm, where someone compared Chromium and Firefox without any real conclusion)? Also doesnt it also come down to the plugins? Like, what difference does it make, if I use Waterfox or Bromite, if I also use Privacy Badger, uBlock Origin and maybe JShelter?

Hope too read a lot of your toughts on this :)

Update 1: Thanks for your replies so far. It's always amazing to get the greater picture on something. Good point with the plug-ins. Also I might give Vanadium another chance.

you are viewing a single comment's thread
view the rest of the comments

[–] LazerDickMcCheese@sh.itjust.works 6 points 1 day ago (1 children)

You can even run the browser in a docker container if you're extremely paranoid (I'm on the verge)

[–] vk6flab@lemmy.radio 2 points 1 day ago (1 children)

That's precisely what I do.

[–] Neptr@lemmy.blahaj.zone 1 points 1 day ago (1 children)

Docker guest still shares a kernel with host. Use a custom OCI runtimes like kata-containers (VM) or gVisor/sydbox-oci (unprivileged application kernel) to reduce the kernel attack surface and protect against privelege escalation.

[–] vk6flab@lemmy.radio 1 points 1 day ago (1 children)

This is true.

However, I'm running trusted software, not the backyard efforts of someone randomly selected off the internet.

Additionally, the Docker container is running on a dedicated Debian virtual machine with only Docker installed.

What's of deeper concern is that all instances are running on X11 which means that they all share information via the clipboard for example.

[–] Neptr@lemmy.blahaj.zone 1 points 23 hours ago (1 children)

You could set up Wayland probably. Just make sure you use GNOME (Mutter) since it is the only Wayland DE that protects the screencopy API.

[–] vk6flab@lemmy.radio 1 points 22 hours ago (1 children)

So far the Wayland implementation requires embedded X11 which puts everything in the same environment again.

I've not yet discovered how to run separate Wayland screens across the network from a Docker container and I'm also not sure if either Chrome or Firefox actually support native Wayland, from memory they didn't last time I checked.

[–] Neptr@lemmy.blahaj.zone 2 points 21 hours ago

Both Firefox and Chromium support native Wayland.

Also, this might lead you in the right direction for remote Wayland apps: https://github.com/wayland-transpositor/wprs