• 3 Posts
  • 260 Comments
Joined 1 year ago
cake
Cake day: June 2nd, 2023

help-circle
  • Making a post in the privacy community with the tittle “truly independent browser” and a github link makes it seem that this project is related to privacy somehow. Nothing on the github has anything to do with privacy. There is no reason to believe the Dev has any intention to add privacy protection features. It is just another web engine. The only reason gecko has a lot of its anti fingerprinting is because of upstreamed features from the Tor browser, not because gecko’s developers engineered them. So my question is still “how does this relate to the privacy community instead of the open source community”.



  • All I was saying is it isn’t ready for use as a browser, it states on the github that it is in pre-alpha. It doesn’t have the threat model goal of protecting fingerprintable metrics. Using this over security and privacy hardened firefox, even in the future once all the web standards are supported, will worsen your privacy. There needs to be intentional development of anti-fingerprinting measures.

    I like choice, this isn’t ready and OP should have added more context then just a title and a github. This is not a privacy browser, this is a tech demo.


  • Yes, by educating I mostly mean word of mouth. But also sharing of user friendly guides like PrivacyGuides. An alternative browser can only disrupt Google’s control on the web by gaining significant market share, which requires convincing and converting users to the better software alternatives to Chromium. We must educate because we are the tech educated minority, and we require the assistance of the majority to oppose googles unilateral control. I think Gecko is a better option to put development time behind (or better yet Servo), or abandoning many of the privacy invasive web standards and creating a new internet (which of course would never see wide use).

    TLDR: We need the majority to be more educated about tech or things will keep getting worse regardless of a new browser engine or anything else.



  • The only reason Firefox still has any market share is probably because it is old enough. I highly doubt this browser will ever stop google forcing a new web standard. We need to educate the general users to make better tech decisions if we want change. We can stay hopeful about this engine. Still would have liked it if servo was getting more development.



  • Firefox and chromium are open source. You can just remove mozilla and google telemetry during compile, or disable in the settings.

    Fingerprint is 100% still useful even with telemetry. This is not a privacy browser and is still in early stages, volatile and easy to fingerprint (not even counting it is a different web engine and so has an even smaller userbase than Firefox). Also, a content blocker is good for cyber security, so regardless of fingerprinting, this is not ready for privacy-conscious people.

    I made my original comment to add context about why this browser shouldnt be used if you care about privacy. If OP had said “this is a promising new independent player in the browser world, look forward to seeing what they do in the future when its more stable” I wouldnt have said anything.



  • It is just disappointing. But people forget that there are many FOSS projects that we widely use where the developers have shitty ignorant opinions. Maybe peoples uproar is directly related to the refusal to merge a simple grammar change, which seems very anti-open source. Or maybe that the Dev has a code of conduct that speaks about inclusivity which they weaponized to justify not merging, as to be “politically-inclusive” (aka some people dont believe that “they” can be used for one person lmao). It just feels like they are choosing a weird hill to die on and also being a hypocrite by being so intentional obtuse, and of course the devs abrasive and accusatory method of responding on multiple occasions.

    I think it is harder to separate the Dev from their creation when it relates to open source. It really is a passion of the heart a lot of the time. But that doesn’t make the tech any less interesting.


  • Lemongrab@lemmy.onetoPrivacy@lemmy.mlTruly independent web browser
    link
    fedilink
    arrow-up
    7
    arrow-down
    1
    ·
    edit-2
    2 days ago

    That doesn’t make it private. Privacy on the modern web requires anti-fingerprinting, otherwise any website with tracking scripts can easily start creating a shadow profile for you.

    Edit:
    What I mean is it isn’t a browser anyone who cares about their privacy should use (yet or every depending on development). Not close to ready yet. OP didnt put any context either for why they posted it.


  • Is this browser private? Does it implement proper sandboxing and have any methods of anti-fingerprinting? I hope it eventually see the implementation of a robust content blocker. What makes this related to privacy and not instead just open source. While it is nice to see an independent web engine, if there is no method of anti-fingerprinting, the privacy of this browser is severely limited.


  • Here is my explanation:

    Situation: User asks for gender inclusive language reasoning not everyone is male. Dev responds saying that the user is trying to advertise their personal politics in the project pull-request, suggesting that by personal politics they mean “inclusive pronouns”.

    Reason it is transphobic: Note the Dev does not mention cis women, they dont mention women at all (but it isn’t like women are accused of pushing an agenda related to inclusive language). It is heavily implied to be trans people because of the dogwhistle language. Trans people are the main targets who are accused by others of pushing an agenda when it relates to personal pronouns. At the very least it is male-centric, which apparently from the context of the PR was making some contributors uncomfortable. If the Dev had said, “I got other more important stuff to do, someone edit the text and request a merge”, no one would be talking about it. It was his immediate 0 to 100 response accusing the user of pushing a political agenda. They dont need to say the words “I am transphobic” to say something transphobic.





  • Sorry, misunderstood. Proxmox Free broke my containers on updating a while ago.

    Now I use Docker-style application containerizing, but I think LXC (the base technology powering Incus/LXD) is useful in a number of situations and perfectly viable for use. I think Incus-containerized applications are easier to upgrade individually (like software updates of your apps, no need to recreate the container image) and gives a closer to native experience of managing. You do lose out on automated deployment of applications from widely available image sources like docker.io, but the convenience-loss is minimal.



  • I do agree with this. I dont want to discount Brave (just) because of their CEO. Fuck CEOs. Brave has done some iffy things in the past, but their Chromium patches are general decent for privacy.

    Ramblings about Firefox

    Firefox resistFingerprinting does more to preserve user privacy (through normalizing of many metrics) and allow for the possibility of a crowd of fingerprint-identical users, the only legitimate way to protect against advanced deanonimizing scripts. Maybe if Mozilla enshittification of Firefox makes a worse, unfixable, and inferior product to Chromium, these patches could lay groundwork for more thorough protections. The reason we have strong protections in Firefox is because of upstreamed code from the Tor Uplift Project, with their code designed for a stricter threat model (in my opinion) than what Brave intends (aka out of scope).