41–50 of 159 posts
I must be missing something but can someone please explain how browsergap > self-host on your own machine (at home, or in a VPS, VPC or the public cloud) is more secure/private then just setting up a VPN on that machine?
It's a different approach. The most material difference is that a VPN does not protect you if a rouge web app breaks out of the browser sandbox.
Is it more secure than Guacamole + libvirt + chromium os?
If you mean running the VM locally, then that has a risk of any exploits being able to escape the VM, and attack your machine directly. That seems less secure than facing the risk of any exploits being able to escape the hypervisor in the cloud, someohow come through the text protocol connection to your computer, and exploit you there. The extra layer of security provided by the remote cloud is important. If, on the…
Someone else already mentioned being hit by Google captchas and the developer of this service said that he switched to DDG as the default search provider. Nevertheless I tried Google and kept working through 15 (yes, fifteen) captchas in a row and Google still wouldn't let me through, and then I gave up. What the hell? Surely even after 1 captcha, Google should be amply convinced that I'm not a robot and let me did a…
That is a "feature" of ReCAPTCHA, and I believe there might even be a patent on it. The idea is that if you are sure it's a bot and want to deny them access you still waste their resources by making them solve impossible captchas.
Looks like it happens not only in that case.
Someone else already mentioned being hit by Google captchas and the developer of this service said that he switched to DDG as the default search provider. Nevertheless I tried Google and kept working through 15 (yes, fifteen) captchas in a row and Google still wouldn't let me through, and then I gave up. What the hell? Surely even after 1 captcha, Google should be amply convinced that I'm not a robot and let me did a…
Google probably identified you as computator prior to the capcha but that profile had no value for seemingly impossibly.
>Can anyone explain the purpose of Google putting up an apparently impossible barrier like that?
Your video will play automatically (after these fourteen short messages from our sponsors)
Earlier quoted context omitted.
And, if you're interested, read on for more detail. It works by providing a thin client over the web that you connect your regular browser to. The thin client provides an interface to a remote browser that you interact with the browser the public internet. This is significant because the internet is a cesspool of attacks. Malware, ransomware, virii, tracking, exploited PDFs, ways to deliver device zero days over the…
Genuinely curious: who’s your customer base? I mean, in theory the web is a cesspool of malware, but with reasonably good content blocking (I’m not even in the completely-disable-JS crowd) and conscious avoidance of shady sites, I managed to pretty easily stay clear of all attacks so far, at least over the past decade. Those way more paranoid than me still have the option of using local VMs/containers without too muc…
I currently use a proxy and have instructions on how to use FoxyProxy to access each env's environment. This will provide for a much nicer UX where you simply click a link and you're brought to a virtual tab in that env. I'm sure some things will break, so the proxy is a backup, but for 90% of our work I think this is amazing!
Solves any app problem where you have the same hostname per environment
Earlier quoted context omitted.
As I understand it, it's like an extreme sandbox -- a completely separate computer (or a VM) where all the web stuff happens (javascript etc), which just ships pixels to your computer (phone/laptop etc). Ideally the complexity of the client software is low, i.e. not a web browser, and there is strict site isolation (VMs) at the sandbox side to prevent leakage from one site to another. I'm a little vague as to how thi…
Yes, that's correct, thank you for helping explain things! :)
What this author is providing is a similar and all-in-one npm solution for the above. Also has use-cases outside of secure runtime environments...
Earlier quoted context omitted.
If you mean running the VM locally, then that has a risk of any exploits being able to escape the VM, and attack your machine directly. That seems less secure than facing the risk of any exploits being able to escape the hypervisor in the cloud, someohow come through the text protocol connection to your computer, and exploit you there. The extra layer of security provided by the remote cloud is important. If, on the…
What about a vm inside another vm?
Earlier quoted context omitted.
As I understand it, it's like an extreme sandbox -- a completely separate computer (or a VM) where all the web stuff happens (javascript etc), which just ships pixels to your computer (phone/laptop etc). Ideally the complexity of the client software is low, i.e. not a web browser, and there is strict site isolation (VMs) at the sandbox side to prevent leakage from one site to another. I'm a little vague as to how thi…
Yes, that's correct, thank you for helping explain things! :)
Could someone write a few sentences about what it is and how it works, and why it is significant? I see neither this post, the GH repo, nor its website really says much of anything on the subject. I only see info about why it’s being open sourced and how to set it up. If someone were to go to all that trouble, I am surprised they would stop short on just providing basic info.