- cross-posted to:
- android@lemdro.id
- cross-posted to:
- android@lemdro.id
You must log in or register to comment.
Cool, fuck Brave tho
I don’t use Brave, still with the more insecure Android Firefox variant (Firefox for Android is subpar in security), but I am glad Brave do want to expand here and for many users it is for sure the best option. No need to insult, whether you agree or not with them. If it is open, it is open and everything else should be secondary and for individual to choose on their own. Go Brave! Hope many more come too.
Oh, so where is Firefox subpar? Please elaborate?
Funniest thing is, I read this after learning Chrome had a zero-day exploit, Brave might not even have the patch yet 😆
To be fair, on sites like privacytests.org Brave seems to pass more tests than default Firefox, but these tests don’t take extensions into accounts. Extensions wouldn’t add much to Brave since it’s a chromium browser, but Firerox should have better results with ublock alone…and then there are forks and ways to harden Firefox on top of that.
And of course it’s not taken into account how sus Brave is, if I remember right Brave search has already been caught spying on its users (and used word play to pretend it was open-source) and then there’s also the crypto scam. Passing most of the security/privacy tests won’t help if the browser is spying and exploiting you.
I have used FF based browsers for a long time and still do. I recently saw this from the GrapheneOS developers, which kinda freaks me out and has me considering switching to a Chromium based browser:
https://grapheneos.org/usage#web-browsing
Chromium-based browsers like Vanadium provide the strongest sandbox implementation, leagues ahead of the alternatives. It is much harder to escape from the sandbox and it provides much more than acting as a barrier to compromising the rest of the OS. Site isolation enforces security boundaries around each site using the sandbox by placing each site into an isolated sandbox… Browsers without site isolation are very vulnerable to attacks like Spectre…
Avoid Gecko-based browsers like Firefox as they’re currently much more vulnerable to exploitation and inherently add a huge amount of attack surface. Gecko doesn’t have a WebView implementation (GeckoView is not a WebView implementation), so it has to be used alongside the Chromium-based WebView rather than instead of Chromium, which means having the remote attack surface of two separate browser engines instead of only one. Firefox / Gecko also bypass or cripple a fair bit of the upstream and GrapheneOS hardening work for apps. Worst of all, Firefox does not have internal sandboxing on Android. This is despite the fact that Chromium semantic sandbox layer on Android is implemented via the OS
isolatedProcessfeature, which is a very easy to use boolean property for app service processes to provide strong isolation with only the ability to communicate with the app running them via the standard service API. Even in the desktop version, Firefox’s sandbox is still substantially weaker (especially on Linux) and lacks full support for isolating sites from each other rather than only containing content as a whole. The sandbox has been gradually improving on the desktop but it isn’t happening for their Android browser yet.EDIT: I really hope Ladybird turns out to be amazing.
We should challenge some of those superlatives that projects such as GrapheneOS can coin from time to time. Those projects are not abstract master entities, they have people behind of it and they are not authorities in all subject matters. They are correct about Gecko browsers insecurities on Android however it may be questionable the use of the term “leagues ahead” in this comparative. I use GrapheneOS and Vanadium but I don’t believe that using some Gecko hardened browser would be so terrible like it sound. Specially if you are not a focused target. For example, I keep Tor as a secondary browser for some specific tasks on my phone.
People could perhaps start helping more the Servo project. They really need some help and for those that program in Rust or want to learn it this could be a very good place to devote your attention.
Feel free to freak out. That doesn’t worry me at all. I guess you prefer getting tracked and monetized over having a little weaker security in hypothetical problem areas…
You know, I’ve worked with, and helped people with issues on primarily Windows, but also Mac and Linux, since the 90s, and I can’t remember one single time, where the problem were bases on this kind of vulnerability. So please, do live in a hypothetical world - I’ll stick with what works and keeps me from being monetized.
Same here. I prefer to avoid Chromium-based browsers whenever I can. A lot of them are better than Chrome, and I do like to mess with them from time to time to stay aware of features and test things. But Firefox on my phone has access to uBlock Origin and all my other extensions, after activating the hidden debug menu/dev mode that you turn on in a similar way as activating Dev Mode for the Android OS. I only mention that last part because it seems a lot of FF Android users don’t know about it and allows for installing xpi files just like you can with desktop. Freaking game changing for me. It really sucks that the main-line Chromium-based browsers don’t support extensions, even in the limited options way FF used to before allowing more to officially work (even without the debug menu/dev mode trick.
For those that might want the instructions for the hidden debug menu/dev mode. Some extensions still might not work correctly as they might not play nice with the UI/layout of the Android version. I would imagine that some of these might be things like the third-party tab-tree extensions for example.
Open Firefox App
Go to the settings menu.
Enable Developer Settings: You need to tap on the Firefox logo five times. This action will unlock an additional debug menu.
Find “Install extension with a file” option in Settings
Look for the option to install an extension from your own storage. And pick the xpi file. Also will just work using the extensions page on the FF site.
The crypto shill chromium fork backed by the homophobic dickhead with far too much money? Pass.
Like it or not crypto is the future of finance. Learn it or be left behind.
No it is not. It will never be stable enough. It’s only there to steal money from fools - and it’s working quite well. Do invest in Trumps crypto… ;-)
You do realize that there are 1 million times more scams conducted using government controlled currencies, why are you not raging against the USD scam?
You are basing your crypto opinions on mainstream trash info. Crypto requires deep research to actually understand and you will be using it within 10 years regardless of your current opinion.
That was funny… If you want to debate this, then please stop exaggerating like “a million times more”…
Thank you for handing me another reason for people never to use crypto regularly. As you say, it requires deep research to understand… My current currency requires a basic understanding, that’s it. And no, I’ll not be using it - you are delusional, and need help. My guess is, that you have invested a lot of money in crypto, and now you feel stupid because it is lost - and you try to get others onboard to minimize your own losses… ;-)
The point is anytime a revolutionary technology comes around most people are scared because they have no clue. Just like when the internet came politicians were going nuts because they had no clue and were scared.
You have no clue how fiat currency works and will continue to have no clue about crypto until intelligent people figure out how even the clueless can use it. Then you will just use it because the alternative will be horrible.
I was telling people about Bitcoin back in 2011, it worked out pretty well. 😉
It’s almost two decades since crypto became a thing, and you call it revolutionary? It wasn’t - it was new, but that’s it…
I do know some crypto-people, and they all lie, and talk about big promises, but none of them have delivered. Well, most of them has lost money.
But you just keep believing your dream - the sane one of us, will let you have that nightmare to yourself. ;-)
The dream has already come true and is getting better by the year. Sorry you completely missed out, hopefully you look outside of the box the elites have crafted for you.
Hopefully we can send all the cryptobros to prison along with the rest of the elites trying to drive society into a wall, before this ridiculous and calamitous change comes to pass.
Let’s not call for imprisoning people based on some arbitrary demographic. It borders on bigotry.
No, it isn’t arbitrary.
Cryptographic money people seek to privatize governance.
A return to serfdom and kingdoms.
This is not the be allowed.
People who try to dismantle and corner a foundation of society so they can keep it for themselves and beyond to reach of the consensus, are thieves and should be treated as such.
Private governance cannot be any worse than current governance, maybe we will get less mass murder known as war.
Of course it can be worse, are you so bereft of imagination, so drowned in ideology that you cannot imagine another megalomaniac sniffs his own delusions of gradeur and ride them straight to hell ?
How many more examples from history does there need to be before it will get in the thick skulls of the dollar-sign-eyes that this always ends in catastrophe ?
We don’t have too many tries left before actual stable governance crumbles for good and we have a couple dozen centuries of unchecked warlordism.
“Private governance cannot be any worse than current governance”
You have no imagination
“maybe we will get less mass murder known as war.”
You are a fool
Removed by mod
You think that current government is not controlled by dollar signs? The state is just a tool of the banks and the military industrial complex, all they do is lie in order to conduct mass murder.
Crypto is our opportunity to put power and control back into the people’s hands by ripping control over currency from banking and corporate interests.
Good to see more software offering an fdroid option.
There’s honestly far too many that still don’t offer any option outside of the Play Store.
I really wish many telegram clients and browsers like vivaldi to be on fdroid 😇
Agree
Brave’s a bunch of marketing/advertising driven crypto"currency" i.e., pyramid scheme peddlers desperate for greater fools.
↳ “Kill yourself.” —Bill Hicks.On a computer either use uBlock Origin-included LibreWolf for stability and privacy, Zen browser for power users, and on Android one can use Fennec; all of them Firefox derivatives.
- -
✍︎ arscyni.cc: modernity ∝ nature.How about IronFox for Android?
You be the judge and reviewer ;)
I recognize it by name but I haven’t tested it or anything.PS My list wasn’t meant to be exhaustive, sorry for the wrong impression. I’m sure there are great other Android browsers.
But I don’t want to be Judge Judy and executioner.
Well, I use IronFox. It’s essentially a fork of the now-discontinued, Firefox-based Mull browser. It’s a privacy and security oriented browser. It’s not on F-Droid, afaik, but it’s on the Accrescent store
It is available on F-Droid, if you add its repository. QR code here: https://gitlab.com/ironfox-oss/IronFox
Any Brave alternative that works on iOS?
I’ve installed brave on some familly iOS device because that’s the best I could find at the time. But hope to find a good replacement.
I am in this path too, but not for everyone. The Firefox (and variants) in Android is ok for normal browsing but would not log into highly sensitive sites nor is recommendable for many users that are not careful with settings and updates. Brave (and others privacy friendly ones), with its flaws, it is better in that arena, so recommended for them.
Also, we may not like it, but if we criticize company attempts to become financial viable, we are doing at disservice to our FOSS community. We should just point what you don’t like from Brave and let our audiences decide for themselves.
If you can’t be financially viable without scamming people maybe fuck off??
use Fennec for normal browning and Tor Browser for anything of such sensitivity
I am now with IronFox, I forgot the reason I left Fennec. Does anyone know the advantage of one vs the other?
Tbh, on my list for the future headline: “Hard to believe: this privacy app has been secretly selling data” Brave is in my personal top 3
What are the other two ?
Signal and Proton Mail
Proton yes, but signal, never ever. Proton and Plex.
Do these fdroid app have too that crypto shit and sponsored wallpapers ?
Mainly will it work without play services ?
From the first FAQ, It’s the same exact builds just distributed through a Fdroid repo.
They are finally acting brave
Roll the credits boys 👏👏
Say that again.
They are finally acting brave
Honestly I’m perfectly happy with Cromite but this is still good. The more F-Droid options the merrier.
Cromite use a third party repo, rather than being in the main one. And I’m hesitant to add repos for my system’s security.
Do anyone has some informations or sources on Cromite’s maintainer, whether cromite.org is safe to add to repos?
nice that’s cool… but it’s brave. do they still give their crypto to show crypto ads? lol
Nice! Great to see another app available outside of Google Play Store :D
on one end, brave does seem rly good in terms of privacy but also chromium. its like building a house on uneven and loose terrain
Not yet showing on search of F-droid
This announcement is for Brave hosting their own repository to host the Brave browser on that’s compatible with F-Droid, rather than the Brave browser being added to F-Droid’s official repository.
Otherwise, perhaps you meant that you did add their repo and it’s still not showing up.
Ah, thank you. I’ve been a twit and not realised.
deleted by creator
This is great news. Brave is a great browser, block all the trash ads by default plus has many enhanced privacy features. 👍
Switched to the f-droid version, one less app that I need to pull from Aurora 😃
