- cross-posted to:
- browsers@lemmy.ml
- libre
- cross-posted to:
- browsers@lemmy.ml
- libre
Some quotes, any emphasis mine:
We’re essentially left with only two major open-source browsers (Chromium and Firefox), and knowing that one of them is controlled by Google makes it clear that it’s not the typical bazaar-like OSS project. We’ve gotten to the point that Chrome-based browsers are so common that developers just stopped to bother supporting other browsers. Last week I saw one site that directly didn’t support Firefox (it displayed a message I should switch to Chrome) and another where the sign in was broken on Firefox, but worked on Chrome-like browsers. Soon Google are going to be in complete control of web standards, unless something drastically changes. Do you want the future of browsing to lie solely in the hands of the biggest advertising business on Earth? I’m pretty sure that I don’t.
For me Firefox is the only alternative to a complete Chrome hegemony in the sense that:
it’s open-source in the real sense (a project that’s truly community-driven)
it has a great track record of fighting for its users and for a better Internet. Chrome started with a great narrative when it was facing an uphill battle with Internet Explorer, but it has almost become the tyrant it sought to displace. I wonder if every revolution is doomed to finish like this.
it’s home to the last major rendering engine, that’s not derived from WebKit (namely Gecko/Quantum)
I refuse to move from Firefox. If the internet stops working for ff I'll simply stop using the internet
Isn't Chrome even more RAM-hungry? I just use bookmarks for when I rack up a bunch of tabs to view (although that's led me to having a bookmark folder of 200 articles I'm not really getting around to reading...)
Brave is shit and those people are shit, but the deal with Google does put Mozilla in a vulnerable position. The ability for Google to threaten to pull the rug out (as they did last year, contributing to 250 layoffs, end of the Servo project, and Mozilla's stewardship of Rust) effectively ensures their market dominance. Google is able to use their monopoly position to sink unlimited resources into Chrome and crush any competition, much like Amazon does with AWS. For Mozilla to have any hope at all, they need to establish independent funding, but even then they will struggle.
I'll sooner use Links than embrace the Google walled garden, but Firefox is more of a "last glimmer of hope" then it is a viable alternative. It has nothing to do with it's technical sophistication or its principles. It is a matter of labor power, resources, and domination of adjacent markets like smartphones, PCs, operating systems, search engines, and internet platforms. Mozilla is doing their best to make a modern web browser while Google's founders are having meetings with the Pentagon.
The only real solution is to expropriate Chrome and sever it's unlimited Google budget. That said, if you use Chrome you're a hack.
I sometimes have to use Chrome specifically to perform hacks, because no other browser is uninhibited enough to implement Web USB and Web Bluetooth.
I use Ungoogled Chromium for this purpose, though.
Most of the Brave shilling is either astroturfed by Brave itself or drummed up by Brendan Eich-supporting ex-Firefox-using homophobes.
I use Firefox as my main browser but have Brave for the few things that demand Chromium... But I hadn't heard any of this sketchy brave business... What to do what to do
Gecko used to be
Really? I thought that's what Servo was meant to achieve in its very early days
CEF unfortunately remains the only real option afaik :sadness: Agree that this should have been something for them to prioritise.
It was, yeah. Too bad Mozilla killed it and laid off most of the people working on it.
I wonder if every revolution is doomed to finish like this.
:LIB:
No one wants to hear it, but FF's security is bad. (I still use it tho)
https://madaidans-insecurities.github.io/firefox-chromium.html
I want to point out that “worse than Chrome” isn’t necessarily “bad”. Firefox might be trailing the pack, but that’s kind of irrelevant when the pack is just Chromium with different coats of paint.
Plus, in practice, many privacy features are security features since the things compromising your privacy are the most likely to compromise your security. uBlock Origin in a more hardened mode (same-site requests only, javascript and remote fonts blocked by default and enabled only on a per-site basis) covers almost every existing attack vector and is pretty simple to set up for a semi-technical user. I’m not sure if Container Tabs adds additional process isolation between containers or not, but it might.
Medium mode for blocking third-party scripts and frames. Most websites will lose functionality but remain somewhat usable and can be fixed pretty easily.
Hard mode for blocking all third-party requests unilaterally. Most websites will be unusable by default and will require a minute or two of tweaking before they’ll work.
Blocking remote fonts is a separate setting.
Isn't this the same guy who said that VPN's are useless and that Windows is more secure than Linux?
VPNs are mostly useless, or at least completely misunderstood by most people. They're usually only useful if you want to torrent in peace.
Windows more secure than Linux is a good meme tho
theres also some fuckery with remote working that vpns are good at but yeah mostly just good for torrenting and file transfers
Probably. Commercial VPNs are only somewhat helpful for privacy, they do hide your traffic from your ISP but unless you operate your own VPN, they just give a different set of eyes access to the websites you visit. It's true that websites won't see your real IP address, but browser fingerprinting is more complicated than using CanvasBlocker, and stock Tor Browser has a pool of similar users with the exact same fingerprint/set of IP addresses, so there is some degree of anonymity.
Cybersecurity researchers agree that Windows does have better security than Linux, though it seems to me that a much smaller userbase and an open source ethic does more to deter script kiddies than they give credit for. They are not interested in likelihoods of hacks being written, they are interested in substantial defense mechanisms
Here's the same guy on Linux. Seems that people never prove him wrong, but claim that he misrepresents priorities etc. I would think that most people criticizing him are (like myself) not security researchers, who have a specific way of seeing things https://madaidans-insecurities.github.io/linux.html
I admit his broad premise is correct: a FOSS OS or browser undoubtedly will have security vulnerabilities that unknown bad actors could exploit. That sorta comes with the territory of everybody being able to see how the digital sausage is made, so to speak. Where he (and a lot of security researchers) miss the mark, though, is failing to acknowledge that Windows and Chrome have intentional security issues, and we know the names of the bad actors already: Microsoft and Google.
I'll gladly accept the risk of somebody exploiting an oversight in whatever branch of the infinite branches of Linux I choose to install, than be guaranteed to surrender my personal data for free to some billionaires.
All the security features that he lists that are either missing or poorly implemented in Linux could be explained by the lack of a multi trillion dollar company developing Linux for profit
From what I've seen, security people tend to separate "privacy" from "security." Probably because the best security seems to always come at the expense of privacy, because profit. I agree with them that there is a massive trust difference that everyone can expect to have between Big Tech and Some Hacker, and it is basically that Big Tech is not going to steal your credit card info. It's not perfect and they might develop a surveillance tool that gets used by a hacker (and definitely the feds), but them seeing your most sensitive data is not much of a financial risk.
I would think that using Chromium for purchases and banking is safe enough for most people
That's a fair point. I'm sticking to my guns on Firefox, but other folks' risk assessments may come up differently than mine—and that's fine by me. I'd prefer not to give up my personal info willingly, and let it be my own stupid fault if I get owned by some random nerd. Maybe it's not for other folks. :shrug-outta-hecks:
I use Pale Moon, a fork of Firefox that uses the old UI and extension format.