LibreWolf is a great privacy oriented Browser for desktop. But there is no version for android or IOS . There are some like mull but they have their own problems. Mobile phones stay with us most of the day. So we need extra privacy for it.

  • fl42v@lemmy.mlEnglish
    1·
    1 month ago

    Soo, what “own problems” does mull have? I mean, pretty much fennec with some tor patches

  • FutileRecipe@lemmy.worldEnglish
    0·
    1 month ago

    My thing against Firefox/Librewolf is lack of security…unless it’s improved?

    Avoid Gecko-based browsers like Firefox as they’re currently much more vulnerable to exploitation and inherently add a huge amount of attack surface. Gecko doesn’t have a WebView implementation (GeckoView is not a WebView implementation), so it has to be used alongside the Chromium-based WebView rather than instead of Chromium, which means having the remote attack surface of two separate browser engines instead of only one. Firefox / Gecko also bypass or cripple a fair bit of the upstream and GrapheneOS hardening work for apps. Worst of all, Firefox does not have internal sandboxing on Android. This is despite the fact that Chromium semantic sandbox layer on Android is implemented via the OS isolatedProcess feature, which is a very easy to use boolean property for app service processes to provide strong isolation with only the ability to communicate with the app running them via the standard service API. Even in the desktop version, Firefox’s sandbox is still substantially weaker (especially on Linux) and lacks full support for isolating sites from each other rather than only containing content as a whole. The sandbox has been gradually improving on the desktop but it isn’t happening for their Android browser yet.

    Ref: https://grapheneos.org/usage#web-browsing

  • RustyNova@lemmy.worldEnglish
    0·
    1 month ago

    True. For now I got a combo of Firefox and Firefox focus. Set focus as default browser, and if you do need cookies, copy the link.

  • circuscritic@lemmy.caEnglish
    0·
    1 month ago

    This always gets downvoted, because it’s a painful truth, but Chromium on Android is significantly more secure than Firefox.

    There is a reason why the default included browser on GrapheneOS, Vanadium, is a Chromium fork.

    So I’m sorry, until Firefox on Android catches up to Chromium, another Firefox fork isn’t going to make the impact on the ecosystem that you think it is.

    I’m not saying you can’t or shouldn’t use Firefox forks on Android, I’m saying do so being aware of their limitations relative to Chromium forks, such as Cromite, or Mulch, the latter being the same dev as Mull. That same dev also has a lengthy write-up going over the technical details of why Chromium is more secure than Firefox on Android.

    This has nothing to do with desktop browser engines, this is specifically and exclusively in regards to Android browsers

              • circuscritic@lemmy.caEnglish
                0·
                1 month ago

                Avoid Gecko-based browsers like Firefox as they’re currently much more vulnerable to exploitation and inherently add a huge amount of attack surface. Gecko doesn’t have a WebView implementation (GeckoView is not a WebView implementation), so it has to be used alongside the Chromium-based WebView rather than instead of Chromium, which means having the remote attack surface of two separate browser engines instead of only one. Firefox / Gecko also bypass or cripple a fair bit of the upstream and GrapheneOS hardening work for apps. Worst of all, Firefox does not have internal sandboxing on Android.

                https://grapheneos.org/usage#web-browsing

                That sounds like the exposed attack surface is a lot more than just whatever sites are running under your Firefox process.

                But what do I know, I’m not a developer of security-hardened Android forks, so I just have to pick which randos on the internet I choose to believe. When the developers of DivestOS and GrapheneOS both have lengthy write-ups on why chromium base browsers are significantly more secure, I’m going to believe them because I don’t have the low level technical knowledge to refute what they’re saying.