Earlier quoted context omitted.
QubesOS recently had an escape-the-qube-and-escalate-to-root exploit
Didn't [insert literally any distro/operating system] have a root exploit recently?
Omarchy did, and still does because they aren't going to fix it.
My practical approach to surfing the web safely
31–40 of 49 posts
Re: My practical approach to surfing the web safely
#32Just run your browser in a non-persistent VM.
I just run a VM with linux running WINE so I can browse securely on Safari, and all of this is on an rPi I actually vampire tapped into the coax network of the local town hall.
Still feels unsafe.
Re: My practical approach to surfing the web safely
#33Librewolf (sometimes Palemoon) + Ublock origin to disable Javascript. Many websites work a lot faster as well.
Re: My practical approach to surfing the web safely
#34Knowing some folks that work on "major-browser-vendor" security in the era of Mythos-found-and-exploited vulnerabilities everywhere, the thought of running completely random untrusted Javascript on my machine has freaked me out to the point that I run NoScript on all of my machines now. I've found NoScript actually very usable, as long as you allow yourself to be fairly liberal in marking domains "trusted." I only tr…
Qubes OS is looking less crazy lately too.
If they have a systemD-less version I'd seriously consider using it.
Re: My practical approach to surfing the web safely
#35I don't understand why author complains about Firefox performance. I use it everyday on laptop and mobile and I don't see the difference to the Chrome or Brave when I visit all my regular sites and all other I find on HN. She has to play HTML 5 games or something to observe such difference
I don't understand this common response.
I'm a former Mozillian and a lifelong Firefox user (continuously since Firefox has existed, at least). I know Firefox is slower. I can feel it and have felt it on every system I've ever owned, and am constantly reminded once every few months or weeks or so when I open up Chrome to check something and am confronted with how much snappier it is—even without an ad blocker, which I don't have installed because I don't actually use Chrome.
I know all this and I use Firefox anyway because I don't care.
What I don't do is go online and comment about how there's no difference when there is clearly a difference. Pretending things are otherwise comes across as some form of denial or delusion.
Re: My practical approach to surfing the web safely
#36I use Vanadium on mobile and Brave on desktop–I think those are the best options. Brave is also a valid choice on Mobile because of the better adblocking.
Re: My practical approach to surfing the web safely
#37Knowing some folks that work on "major-browser-vendor" security in the era of Mythos-found-and-exploited vulnerabilities everywhere, the thought of running completely random untrusted Javascript on my machine has freaked me out to the point that I run NoScript on all of my machines now. I've found NoScript actually very usable, as long as you allow yourself to be fairly liberal in marking domains "trusted." I only tr…
> Knowing some folks that work on "major-browser-vendor" security in the era of Mythos-found-and-exploited vulnerabilities everywhere
Is this a thing now? I hadn't seen any big browser vulnerabilities recently. Did I miss something? Or are the vendors not releasing horrifying bugs they found internally with AI fuzzing?
Re: My practical approach to surfing the web safely
#38> I’m using Firefox because it still has better built-in security and privacy controls than other browsers.
isn't firefox like far less secure than chromium? its sandbox pales in comparison, for one thing.
configuring trivalent on fedora-based distros is a good way to get the security benefits of chromium without all the adtech slop.
anybody using firefox should consider the patches by celenity at https://codeberg.org/celenity/Phoenix
Re: My practical approach to surfing the web safely
#39Re: My practical approach to surfing the web safely
#40I use Vanadium on mobile and Brave on desktop–I think those are the best options. Brave is also a valid choice on Mobile because of the better adblocking. https://grapheneos.org/usage#web-browsing
trivalent is your best bet on desktop if you're on a fedora-based distro: https://github.com/secureblue/Trivalent