Privacy

32120 readers

397 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS

Librewolf but like... for chromium? (sh.itjust.works)

submitted 11 months ago by spez@sh.itjust.works to c/privacy@lemmy.ml

79 comments fedilink hide all child comments

My main browser is Librewolf but I keep a chromium browser just in case. Previously used brave but their flatpak is shit. Ungoogled chromium seems ok but it looks like they don't change much from upstream chromium. Any good chromium browsers which harden their browsers like librewolf does for more privacy?

you are viewing a single comment's thread
view the rest of the comments

[–] Pantherina@feddit.de 1 points 11 months ago* (last edited 11 months ago)

I mean sandboxes are just pretty complex. Chromium relies on user namespaces for process isolation. Flatpak browsers are isolated but have no internal isolation of processes (one tab could attack another tab). At the same time the Flatpak sandbox itself relies on user namespaces, while the flatpakked browser cannot use the namespaces internally.

Then there is the hardened kernel which disables user namespaces for security reasons, on the other hand people say running the Sandbox as suid means if there is a vulnerability processes get root access.

Flatpak browsers put less trust in the code, but more in the maintainer that has to keep them as updated as possible.

Its complex as fuck