ken

joined 6 months ago
[–] ken@discuss.tchncs.de 2 points 1 month ago* (last edited 1 month ago)

Even so, it does not follow that this community should provide that commercialization venue. If you want me involved in solving your business problems or monetization strategy, we should discuss terms and rates first.

[–] ken@discuss.tchncs.de 2 points 1 month ago

Sounds like a reasonable set of options!

[–] ken@discuss.tchncs.de 2 points 1 month ago* (last edited 1 month ago) (1 children)

If you work for a company or own the company you are still making a self- promotional post for a company, and the rule applies.

So if the exact same post is posted by a friend instead it's suddenly accepted? Why is self-promo meaningfully less desired than third-party-promo if they have similar results?

You seem to be vastly in the minority.

Might be! That one's framed as just personal preference and not policy suggestion because I don't think "allow all things I like and ban everything I don't" makes for good governance ;)

So a more restrictive rule?

More restrictive in one sense (what content and what's ok to "promote" for) but more allowing in another (you can talk about something even if you are involved or associated).

[–] ken@discuss.tchncs.de 2 points 1 month ago* (last edited 1 month ago) (2 children)

Thank your for replying, this is encouraging and sounds like moderation of this community is shaping up.

Whichever side the ruling falls I think that feedback channel would be very good. Just having a way for a submitter to ask from mod(s) why the submission was targeted might be the difference between them turning into a great contributor vs either just leaving or starting to play circumvention games (in especially bad cases turning into antagonistic trolls). Speaking from how I've seen those dynamics play out in other communities.

[–] ken@discuss.tchncs.de 3 points 1 month ago* (last edited 1 month ago) (3 children)

Thank you for thoughtful engagement!

I think that becomes even more problematic. Why is it better that I shill for a company I'm getting kickbacks from (some VPN providers excel at this game) rather than one I'm responsible for? Besides, this just lead to submarining ("viral marketing" is an entire industry!) and people pretending to "have just stumbled across this project, what do you guys think?" or being "just a happy customer".. And to some extent t becomes a game of social status, where well-connected people can just ask their friends to post on their behalf.

Judge the message and topic, not the messenger (as long as they are human acting in good faith and not "written with help by AI", obv).

Besides of those issues, my personal preference would be to keep the focus on self-hosting. So talk of hardware or shipped software might be on-topic but not service providers. There are plenty of places to discuss cloud-hosting, VPNs, which PaaS is best, or whatnot.

And I would actually be much more interested in seeing a post from a founder talking about things their company is doing relevant to self-hosters, vs yet another post of "which provider is best right now and what do you use?" or "Company X currently has a sale/launched product Y".

While it might filter out some good stuff, I would be all for a ban of any promotion of commercial or proprietary products and services alltogether but allow for self-hostable and in particular FLOSS stuff (where I guess some carve-out or clever formulation could be made to allow for commercial but self-hostable software - either stance on that one seems fine to me).

[–] ken@discuss.tchncs.de 2 points 1 month ago* (last edited 1 month ago)

I would also recommend checking out Konform Browser, which has a focus on security, privacy and user control. Currently only providing builds for Linux. Given the browsers you mentioned I think it is highly relevant for your interests and IMO leader in that category (though as dev am obviously biased on that ;))

[–] ken@discuss.tchncs.de 9 points 1 month ago* (last edited 1 month ago) (4 children)

I would like some clarity on general apparent self-promotion of open source projects as well. As in, points 1-4 don't apply and 5 depends on your definition of "advertisement".

I'm bringing this up because I (once) previously attempted to share a project^1^ I maintain on here. I did take some effort to include some context and discussion points for selfhosters in order to make it more tailored and stay safe on Rule 3. It was quickly removed by mod. I tried reaching out to one of the mods to try to understand what was wrong. They were friendly and said they weren't involved and would forward to the relevant people and since then I haven't heard back. It would be very helpful to be able to get some feedback on why submission was removed so we can learn how future submission attempt could be improved (or abandoned).

^1^: FLOSS, no commercial or otherwise proprietary parts or relations, no slop or clank in the process

[–] ken@discuss.tchncs.de 3 points 1 month ago* (last edited 1 month ago)

Sounds frustrating and I can see how that can be confusing. Had similar peeves with other imposed limitations that initially drove motivation of developing this project so can relate!

While we have to recognize that there is inherent conflict in expectations of "browser doesn't disclose my location" and "website knows my timezone" and that Konform Browser will continue defaulting to privacy, you highlight gap in UX and user control that I agree can be improved on. Shouldn't be too much work to add more make more discoverable selective settings UI for this too in a future release.

There's some other aspects that often play into this particular scenario and can vary per site:

  • Apps showing relative time like "10 hours ago" or "in 15 minutes" should not be affected by any of this.
  • Scheduling for events on services like the ones you mention also shouldn't be affected by this: Time for events is global but display will be affected.
  • There are are a lot of bugs in webapps out there that can be interacting with localtime in incorrect ways. It's complicated^1^.

Try being a part of a team in multiple timezones, some of which follow Daylight Savings Time (from different dates) and some not. Now schedule a recurring weekly meeting for the same time and coordinate that over chat. This is just inherently messy. Communicating this properly in UI is subtle and confusion like the one you described often arise when webapp developers assumptions and user assumptions don't align. Some even say we should do away with timezones alltogether.

^1^: Someone even made list of lists of falsehoods programmers believe about time

 

Hi beehaw friends! Long time no C^1^!

Konform Browser version 140.12.0-100 was recently released and if you aren't aware it's time to upgrade! ^2^

Konform Browser is a free/libre and open-source (FLOSS) fork of Firefox ESR with the primary goals of security, privacy, and user freedom. Shows by example how these three goals don’t have to be at odds but support each other and work in harmony. Runs lean and light with lights off out of the box, while making it convenient to toggle on the features you want. All telemetry removed, none added. Fingerprinting and tracking extras with base defaults on par with (or exceeding) Tor Browser, still keeping common-sense tweaks like dark mode and installation of self-built addons available without making a fuss about it. Graceful degradation for private networks and more granular control for those who want a browser that really conforms.

"ESR" means there's a major upgrade coming up soon with the expected jump from Firefox ESR version 140 to 153 next month. Work has already been ongoing for a while to prepare Konform Browser v153 to be the most secure Firefox build at release. Early alpha builds based on FF153beta are available for anyone who wants to do early testing or help out with any other contribution.

Current Konform Browser 140.x is production-ready and expected to keep receiving security updates and bugfixes for at least a couple of release cycles after initial v153 release so users can upgrade at their leisure.

If you try it, would love to hear your feedback on the browser - and if you like it, tell your friends!

FAQ

Installation instructions provided for most Linux distros

New: Artix Linux package, Gentoo ebuild

Releases

Mastodon: https://techhub.social/@konform

^1^ ~but~ ~not~ ~without~ ~C++~

^2^ ~or~ ~install~ ~😘~

 

It's been a while!

Konform Browser version 140.12.0-100 was recently released and if you aren't aware it's time to upgrade! ^1^

Konform Browser is a free/libre and open-source (FLOSS) fork of Firefox ESR with the primary goals of security, privacy, and user freedom. Shows by example how these three goals don’t have to be at odds but support each other and work in harmony. Runs lean and light with lights off out of the box, while making it convenient to toggle on the features you want. All telemetry removed, none added. Fingerprinting and tracking extras with base defaults on par with (or exceeding) Tor Browser, still keeping common-sense tweaks like dark mode and installation of self-built addons available without making a fuss about it. Graceful degradation for private networks and more granular control for those who want a browser that really conforms.

"ESR" means there's a major upgrade coming up soon with the expected jump from Firefox ESR version 140 to 153 next month. Work has already been ongoing for a while to prepare Konform Browser v153 to be the most secure Firefox build at release. Early alpha builds based on FF153beta are available for anyone who wants to do early testing or help out with any other contribution.

Current Konform Browser 140.x is production-ready and expected to keep receiving security updates and bugfixes for at least a couple of release cycles after initial v153 release so users can upgrade at their leisure.

If you try it, would love to hear your feedback on the browser - and if you like it, tell your friends!

FAQ

Installation instructions provided for most Linux distros

New: Artix Linux package, Gentoo ebuild

Releases

Mastodon: https://techhub.social/@konform

^1^ ~or~ ~install~ ~😘~

17
Konform Browser - Hardened Firefox ESR fork (konform-browser.codeberg.page)
submitted 2 months ago* (last edited 2 months ago) by ken@discuss.tchncs.de to c/firefox@lemmy.world
 

Konform Browser is a web browser with the goal of promoting user freedom and access to the rights of security, privacy and anonymity. It is intended as a general-purpose browser fit both for daily online browsing as well as targeted deployments in secure or untrusted environments. Has stronger security with hardened defaults, better privacy and fingerprint protection while keeping user in control.

About^1^

Source

Release notes^1^

AI/LLM policies: 1 2

^1^: See here for answer to "Differences to Librewolf?"

10
Konform Browser - Hardened Firefox ESR fork (konform-browser.codeberg.page)
submitted 2 months ago* (last edited 2 months ago) by ken@discuss.tchncs.de to c/firefox@lemmy.ml
 

Konform Browser is a web browser with the goal of promoting user freedom and access to the rights of security, privacy and anonymity. It is intended as a general-purpose browser fit both for daily online browsing as well as targeted deployments in secure or untrusted environments. Has stronger security with hardened defaults, better privacy and fingerprint protection while keeping user in control.

About

Source

Release notes

 

Would like to share this FLOSS project been working on for a while now and hope that is cool with you all!

Was not satisfied with status quo on browser options for our use-cases and needs - hence Konform Browser evolved.

Whether accessing private resources and actually wanting to keep that private, or minimizing traces left when surfing online, Konform Browser makes that easier with uncompromising hardened defaults combined with extended configuration UI and features like built-in container tabs for additional isolation and more flexible proxy configuration.

Binaries only provided for Linux but sources should be buildable for other platforms.

Looking forward to hear thoughts and feedback on project!

Source

Readme

Releases

Mastodon: https://techhub.social/@konform

23
submitted 4 months ago* (last edited 4 months ago) by ken@discuss.tchncs.de to c/archlinux@lemmy.ml
 

Keeping up with security updates for your web browser is of increasing practical relevance. Under normal conditions this means important updates roughly every couple of weeks.

Mainline firefox or chromium packages are typically easy mode: For most people it's a matter of staying on top of regular pacman updates. torbrowser-launcher updates from inside the browser and is also usually painless to manage.

Running custom builds or forks from AUR requires more attention. Is the AUR package up to date? If it's a fork: Are security updates from Mozilla/Google downstreamed in a timely manner? Have you built it? Can you still build it? How long since you pulled and rebuilt that ungoogled-chromium binary and how many CVEs has it racked up by now?

Anyone running firefox-esr or any derivative like icecat, waterfox^1^, mullvad-browser or konform-browser from AUR should probably be paying attention to this right now:

Arch Linux repositories updated llvm and clang to v22 on 2026-03-07. This caused a regression for Firefox ESR packaging resulting in compilation failure when building.

Firefox ESR 14.9.0 was released on 2026-03-24.

This means that since then, users of the AUR packages for these browsers have not been able to build a new version with security fixes on up to date Arch Linux system. Some users may be prepared to handle this by maintaining separate build infra with internal registry where keeping system packages frozen on older version is acceptable but for everyone else, this is a conundrum.

Anyone browsing the web on firefox-esr or a derivative should make sure you get fixes for the issues addressed in 140.9.0 asap.

konform-browser AUR package has been patched with clang 22 toolchain fixes from mozilla and should now build succesfully. The other forks including firefox-esr will still need manual patching or downgrading clang toolchain packages to v21 to compile. The konform-browser patches for clang 22 are in the AUR repo and should be portable to the other browsers too. If others can share their results in testing (both X11 and Wayland) or reviewing the fix, this might help in sorting out the firefox-esr situation sooner than later, too.

^1^: Looking at git log it claims to build as of the wasi-compiler-rt21 makedepends but I have still not been able to make it compile when attempting. Please LMK if I'm holding it wrong and there is a way!

Announcement brought to you by Konform Browser

 

I would like to invite all of you Linux users to check out the latest release of Konform Browser.

Konform Browser is a free/libre and open-source (FLOSS) fork of Firefox with the primary goals of security, privacy, and user freedom. Hoping to be an example of how these three goals don’t have to be at odds but support each other and work in harmony. Would love to hear your feedback on if it's in the right direction and what can be improved.

Been posting on and off the lemmies about the project during 2026 and previously on this community. Below are major highlights since 140.8.0-103 update from two weeks back:

  • Bundling and enforcing use of bundled fonts. Konform Browser now carries the same font-loading patches and bundled fonts as Tor Browser and Mullvad Browser. While this does increase download- and installation sizes, it has two clear benefits: - Significantly improved resistance against font fingerprinting used by tracking scripts. Konform Browser should now be more robust against this attack by having shared global font fingerprint. - All languages and scripts should render as expected regardless of what fonts you have installed on system.
  • Also bundled is now Multi-Account Containers Lite addon. It's a debloated^1^ fork of Firefox Multi-Account Containers so you can utilize Container Tabs and set per-container proxies without installing addon for it.
  • While "AI chatbot" feature was already disabled and hidden by default, it was previously still possible to trigger activation of proprietary networked centralized cloudbots by setting pref browser.ml.chat.enabled=true. These have now been fully removed and replaced by a single provider utilizing locally running llamafile instance.
  • Ported a bunch of security fixes and improvement on fingerprinting protection from FF Rapid Release and Tor Browser which didn't make it into upstream FF ESR.

For details and references see linked release notes. For even more details I hope the commit log is digestible.

Packages available for most Linux distributions.

AUR source package

Releases

README

Konform Browser is also on Mastodon where followers make me happy: https://techhub.social/@konform

^1^: Similarly as rest of Konform Browser: Removal and disabling of telemetry, analytics, ads, touting, nags ("call-to-actions"), and integrations with centralized proprietary service (Mozilla VPN in this case).

 

I would like to invite all of you Linux users to check out the latest release of Konform Browser.

Konform Browser is a free/libre and open-source (FLOSS) fork of Firefox with the primary goals of security, privacy, and user freedom. Hoping to be an example of how these three goals don’t have to be at odds but support each other and work in harmony. Would love to hear your feedback on if it's in the right direction and what can be improved.

Been posting on and off the lemmies about the project during 2026. Below are major highlights since 140.8.0-103 update from a week and a half back:

  • Bundling and enforcing use of bundled fonts. Konform Browser now carries the same font-loading patches and bundled fonts as Tor Browser and Mullvad Browser. While this does increase download- and installation sizes, it has two clear benefits:
    • Significantly improved resistance against font fingerprinting used by tracking scripts. Konform Browser should now be more robust against this attack by having shared global font fingerprint.
    • All languages and scripts should render as expected regardless of what fonts you have installed on system.
  • Also bundled is now Multi-Account Containers Lite addon. It's a debloated^1^ fork of Firefox Multi-Account Containers so you can utilize Container Tabs and set per-container proxies without installing addon for it.
  • While "AI chatbot" feature was already disabled and hidden by default, it was previously still possible to trigger activation of proprietary networked centralized cloudbots by setting pref browser.ml.chat.enabled=true. These have now been fully removed and replaced by a single provider utilizing locally running llamafile instance.
  • Ported a bunch of security fixes and improvement on fingerprinting protection from FF Rapid Release and Tor Browser which didn't make it into upstream FF ESR.

For details and references see linked release notes. For even more details I hope the commit log is digestible.

Packages available for most Linux distributions.

AUR source package

Releases

Konform Browser is also on Mastodon where followers make me happy: https://techhub.social/@konform

^1^: Similarly as rest of Konform Browser: Removal and disabling of telemetry, analytics, ads, touting, nags ("call-to-actions"), and integrations with centralized proprietary service (Mozilla VPN in this case).


Cross-post. Original Thread @ https://discuss.tchncs.de/post/56107349

 

I would like to invite all of you Linux users^1^ to check out the latest release of Konform Browser.

Konform Browser is a free/libre and open-source (FLOSS) fork of Firefox with the primary goals of security, privacy, and user freedom. Hoping to be an example of how these three goals don’t have to be at odds but support each other and work in harmony. Would love to hear your feedback on if it's in the right direction and what can be improved.

Been posting on and off the lemmies about the project during 2026. Below are major highlights since 140.8.0-103 update from a week and a half back:

  • Bundling and enforcing use of bundled fonts. Konform Browser now carries the same font-loading patches and bundled fonts as Tor Browser and Mullvad Browser. While this does increase download- and installation sizes, it has two clear benefits:
    • Significantly improved resistance against font fingerprinting used by tracking scripts. Konform Browser should now be more robust against this attack by having shared global font fingerprint.
    • All languages and scripts should render as expected regardless of what fonts you have installed on system.
  • Also bundled is now Multi-Account Containers Lite addon. It's a debloated^2^ fork of Firefox Multi-Account Containers so you can utilize Container Tabs and set per-container proxies without installing addon for it.
  • While "AI chatbot" feature was already disabled and hidden by default, it was previously still possible to trigger activation of proprietary networked centralized cloudbots by setting pref browser.ml.chat.enabled=true. These have now been fully removed and replaced by a single provider utilizing locally running llamafile instance.
  • Ported a bunch of security fixes and improvement on fingerprinting protection from FF Rapid Release and Tor Browser which didn't make it into upstream FF ESR.

For details and references see linked release notes. For even more details I hope the commit log is digestible.

Packages available for most Linux distributions.

AUR source package

Releases

Konform Browser is also on Mastodon where followers make me happy: https://techhub.social/@konform

^1^: Non-Linux users: This is the year to convert! (Or help out with porting if you're a rare BSDer ;))

^2^: Similarly as rest of Konform Browser: Removal and disabling of telemetry, analytics, ads, touting, nags ("call-to-actions"), and integrations with centralized proprietary service (Mozilla VPN in this case).

21
submitted 5 months ago* (last edited 5 months ago) by ken@discuss.tchncs.de to c/foss@beehaw.org
 

Good $TIME_OF_DAY, beehaw folks!

Today I come to share the first announcement of Konform Browser 140.8.0-103 and what's new since previous update post last week!

If you are new to Konform Browser, it was previously introduced to the lemmies in this post. In one sentence, it's a web browser for Linux based on Firefox ESR with the primary goals of security, privacy, and user freedom. Hoping to be an example of how these three goals don't have to be at odds but support each other and work in harmony.

Without more ado, some highlights of the new since last week:

  • Exposed UI for "Local AI" features like full-page translations, link previews and configuring local models. These features are all disabled by default but now easier to selectively enable and keeps working locally and offline more gracefully when remote updates are disabled.
    • This coincides funnily with the new "AI killswitch" news from FF v148 this week. Konform Browser approaches the "AI/ML" feature-set from the opposite end from upstream: Selective opt-in, progressive enhancement, and graceful degradation, while making sure any external endpoints or keys are user-configurable.
    • Check out about:translations (which is pretty handy and reliable) and about:inference (where you can now load and test arbitrary models from HuggingFace)!
    • The "Link Preview" feature is rather janky and considered experimental.
    • The "AI chatbot" integration to bigcloudtech is unaffected by these changes and remains disabled under every preset.
  • Latest security fixes up to Mozilla Firefox ESR 140.8.0.
  • Various privacy improvements
    • navigator.sendBeacon() now disabled by default (re-enabled by "Just Make It Work" preset)
    • Ported over several relevant patches from Tor Browser
    • Proxy bypass protection enabled to reduce risk of network leaks
  • Changes made on about:welcome now take effect immediately without requiring browser restart
  • UI: Disabled various nags and onboarding callouts (no more "Hey please try the new feature" in the middle of your workflow)

For more details check out release notes and (if that's not detailed enough for you :p) commit log.

If you check it out, would love your feedback on the project in general and, if this isn't a first, your take on development and recent updates. Fellow devs: Doors wide-open for new (carbon-based) contributors ^^

Konform Browser is now also on Mastodon: https://techhub.social/@konform

Packages available for most Linux distributions.

AUR source package

Releases

 

Hi all!

Latest version of Konform Browser just dropped and now I come here to share with y'all about what's been cooking.

If you are new to Konform Browser, dev writing and previously posted on on this community introducing the project here.

Highlights since last time:

  • Latest security fixes from up to most recent Firefox ESR 140.7.1.
  • A new welcome screen (pictured) where user can quickly choose between how private vs integrated experience they want, from a locked down "Purely Private" all the way to an unleashed "Just Make It Work" (affectionately referred to as "yolo mode")
    • The "Show detailed information" link leads to a table showing exactly what settings will be impacted by each preset so user can make educated decision and understand impact before choosing.
  • Improvements around privacy and fingerprinting. In particular: Closed a significant vector of identity leaks and fingerprinting from unique IDs sent in Origin headers of HTTP requests by addons. This is a previously known issue (1405971) that has been considered wontfix by upstream for 6 years now.
    • To my knowledge, Konform Browser is the only Firefox derivative which protects against this under defaults and improves over status quo in chromium too. Attempts are being made to reach out and see if the patch can also be of interest and benefit for Tor Browser.
    • New user pref network.http.addonOriginBehavior can be tweaked to further change behavior and work around any breaking addons.
    • A future update might change default to 3 (random), which could make browser choice less fingerprintable. The current default is not set in stone and I'd be very curious about what breaks and what doesn't if anyone plays around with this.
  • Now also publishing binary packages for easy installation and updates from Alpine Linux and Arch Linux package repos, alongside deb/rpm ones. All builds and releases are produced by Codeberg CI. Building from source is of course still supported.
  • Various improvements and fixes for optional features unlocked by "Just Make It Work" preset

There is also now a more official fedi account on Mastodon where an abbreviated version of this post is already shared with a couple of screenshots of the new onboarding: @konform@techhub.social^1^.

As always, installation and build instructions can be found from release notes and doors are open on Codeberg for issue reports and merge requests alike.

https://codeberg.org/konform-browser/source/releases

^1^: Still figuring out how crossposting works or doesn't across the fedis! In case federation clients botcher the link: https://techhub.social/@konform

view more: next ›