9 ms·

Removing Google's binary blobs is mitigating one issue, but replacing it with an entire binary blog from an anonymous github user might be introducing new ones.

by nikcub 10y ago

Removing Google's binary blobs is mitigating one issue, but replacing it with an entire binary blog from an anonymous github user might be introducing new ones. On that note - can you tell us more about the project? ie. if you plan on keeping this updated long terms (i've watched a lot of promising chromium forks fade after an initial big splash), what your plans are, if you'll you accept contributions, how the binary distributions are built so we can verify the checksums, if you can tag the Chromium releases from Google so they can be verified, etc. I've had the idea of a chromium fork with privacy enhancements in the back of my mind for a while now (turns out a lot of people have) specifically to replace Tor Browser and/or have a lighter browser (without canvas, webgl, webrtc etc.) with better defaults (ie. no hardware access, location, notifications, cookies, history, etc.) for opening links, private browsing etc[1]. This may be a good base to work on - assuming you want to go beyond just "de-googlify" [1] I think there is a real need for an alternate browser that is lightweight[2] and has stricter privacy and security controls - with proper user segregation (ie. you really don't want to open random links from social media in the same browser session as where you're logging into your primary accounts). [2] ie. do to Chrome/Firefox what Firefox originally did to Netscape - and Chrome would be the better foundation to work on

noir_lord 10y ago
That kind of browser sounds useful, more so particulary on mobile devices Chrome/Android/Google is incredibly 'sticky' in that it tries to quietly log you in all the damn time.
- Ruud-v-A 10y ago
  In what sense? I’m using Chrome Beta on Android, and I don’t recall being prompted to log in. Perhaps there was such a prompt during initial setup, but it has never tried to log me in quietly since.
  - _euvw 10y ago
    On a fresh Android, at first boot, it will ask you if you want to sync stuff. I always choose 'no'. I then proceed onto the settings app, into 'accounts'. There, I tap 'Google' and lo and behold: App-data, Calendar, Contacts, Google Fit Data and People details are all ticked to sync. I turn them off. Then I open the default browser. It logs me into Google, by default. I have to explicitly tell it not to. Google really really wants users to be logged in. That is my experience anyway.
    - noir_lord 10y ago
      And exactly mine, I flashes a ROM with pico Google apps, installed FF so chrome doesn't exist on my phone at all.
hrjet 10y ago
> and/or have a lighter browser (without canvas, webgl, webrtc etc.) with better defaults (ie. no hardware access, location, notifications, cookies, history, etc.) for opening links, private browsing etc We are building one [1]. Contributions are welcome! In the meanwhile, the ungoogled-chromium project in combination with uMatrix is I think a great way to transition away from Chromium. [1] https://github.com/UprootLabs/gngr https://github.com/UprootLabs/gngr
erikpukinskis 10y ago
> a lighter browser (without canvas, webgl, webrtc etc.) Please do not do this. Webgl and Webrtc are fundamental technologies needed to efficiently do basic activities like process an image or send sound data to another user. I am all for a "lighter" browser, by removing UI, removing dev tools, etc. Get rid of the stuff that's not required to make a web page work well. But WebGL and WebRTC are cornerstone technologies for the web to thrive. WebRTC is critical for allowing open source software to thrive in particular (allows apps that don't need a central server) and WebGL is critical in particular for web software to compete in the AR/VR age. We need 100% browser support on these two APIs, and we need it yesterday. I realize these technologies are not currently doing anything for you. I sympathize. But we need them in browsers now so that we can use them in 10 years. Please, please, please jetsam other parts of the ship before you cut those features.
- eriknstr 10y ago
  >removing dev tools Hold your horses! The introduction of dev tools was one of the best things to happen to browsers. Removing them would take away opportunity from a lot of people in learning web development, and would also lead to websites having more bugs.
  - Skunkleton 10y ago
    My mom doesn't need dev tools preinstalled in her browser. Though I doubt removing them would make the browser faster/leaner.
    - kevhito 10y ago
      Is there something particular about your mom I should take away here? Or moms in general? Or women? Or older people? My mom, like yours, would have no use for dev tools -- because she's just not interested. And neither would my brother, but my grandma would have loved learning about this stuff if she had lived long enough, and my kids have discovered this "secret hacker mode" all on their own and are delighted.
hrez 10y ago
"Anonymous github user" part is very true. I am not about to install random binaries from the internet. I wish there was reputable org behind the builds. I'll stick with google binaries unless somebody knows a good alternative.
- hrez 10y ago
  Down the thread somebody mentioned Iridium project. That looks way more trustworthy https://iridiumbrowser.de https://iridiumbrowser.de
markman 10y ago
What are your thoughts or impression of OPERA? It has private browsing etc. They really restructured their whole browser several years ago specifically to switch to the chromium platform. I apologize I didn't mean to butt in I was just curious.
eatbitseveryday 10y ago
Two years ago a Chrome dev commented on these points[1] and claimed that Chrome "does not spy on you" and that the only binary blobs are codecs and a PDF reader, not any other secret browser code. He/she states the fear is misplaced and unwarranted. Any thoughts on this? [1] https://www.reddit.com/r/chrome/comments/1xsxjv/best_browser_google_chrome_vs_chromium/cfeku0r https://www.reddit.com/r/chrome/comments/1xsxjv/best_browser...
satuim 10y ago
You might want to check out - https://ffprofile.com/ https://ffprofile.com/ Creates a Firefox profile with the settings you want.

by nikcub 10y ago

noir_lord 10y ago

That kind of browser sounds useful, more so particulary on mobile devices Chrome/Android/Google is incredibly 'sticky' in that it tries to quietly log you in all the damn time.

Ruud-v-A 10y ago
In what sense? I’m using Chrome Beta on Android, and I don’t recall being prompted to log in. Perhaps there was such a prompt during initial setup, but it has never tried to log me in quietly since.
- _euvw 10y ago
  On a fresh Android, at first boot, it will ask you if you want to sync stuff. I always choose 'no'. I then proceed onto the settings app, into 'accounts'. There, I tap 'Google' and lo and behold: App-data, Calendar, Contacts, Google Fit Data and People details are all ticked to sync. I turn them off. Then I open the default browser. It logs me into Google, by default. I have to explicitly tell it not to. Google really really wants users to be logged in. That is my experience anyway.
  - noir_lord 10y ago
    And exactly mine, I flashes a ROM with pico Google apps, installed FF so chrome doesn't exist on my phone at all.

hrjet 10y ago

> and/or have a lighter browser (without canvas, webgl, webrtc etc.) with better defaults (ie. no hardware access, location, notifications, cookies, history, etc.) for opening links, private browsing etc We are building one [1]. Contributions are welcome! In the meanwhile, the ungoogled-chromium project in combination with uMatrix is I think a great way to transition away from Chromium. [1] https://github.com/UprootLabs/gngr https://github.com/UprootLabs/gngr

erikpukinskis 10y ago

> a lighter browser (without canvas, webgl, webrtc etc.) Please do not do this. Webgl and Webrtc are fundamental technologies needed to efficiently do basic activities like process an image or send sound data to another user. I am all for a "lighter" browser, by removing UI, removing dev tools, etc. Get rid of the stuff that's not required to make a web page work well. But WebGL and WebRTC are cornerstone technologies for the web to thrive. WebRTC is critical for allowing open source software to thrive in particular (allows apps that don't need a central server) and WebGL is critical in particular for web software to compete in the AR/VR age. We need 100% browser support on these two APIs, and we need it yesterday. I realize these technologies are not currently doing anything for you. I sympathize. But we need them in browsers now so that we can use them in 10 years. Please, please, please jetsam other parts of the ship before you cut those features.

eriknstr 10y ago
>removing dev tools Hold your horses! The introduction of dev tools was one of the best things to happen to browsers. Removing them would take away opportunity from a lot of people in learning web development, and would also lead to websites having more bugs.
- Skunkleton 10y ago
  My mom doesn't need dev tools preinstalled in her browser. Though I doubt removing them would make the browser faster/leaner.
  - kevhito 10y ago
    Is there something particular about your mom I should take away here? Or moms in general? Or women? Or older people? My mom, like yours, would have no use for dev tools -- because she's just not interested. And neither would my brother, but my grandma would have loved learning about this stuff if she had lived long enough, and my kids have discovered this "secret hacker mode" all on their own and are delighted.

hrez 10y ago

"Anonymous github user" part is very true. I am not about to install random binaries from the internet. I wish there was reputable org behind the builds. I'll stick with google binaries unless somebody knows a good alternative.

hrez 10y ago
Down the thread somebody mentioned Iridium project. That looks way more trustworthy https://iridiumbrowser.de https://iridiumbrowser.de

markman 10y ago

What are your thoughts or impression of OPERA? It has private browsing etc. They really restructured their whole browser several years ago specifically to switch to the chromium platform. I apologize I didn't mean to butt in I was just curious.

eatbitseveryday 10y ago

Two years ago a Chrome dev commented on these points[1] and claimed that Chrome "does not spy on you" and that the only binary blobs are codecs and a PDF reader, not any other secret browser code. He/she states the fear is misplaced and unwarranted. Any thoughts on this? [1] https://www.reddit.com/r/chrome/comments/1xsxjv/best_browser_google_chrome_vs_chromium/cfeku0r https://www.reddit.com/r/chrome/comments/1xsxjv/best_browser...

satuim 10y ago

You might want to check out - https://ffprofile.com/ https://ffprofile.com/ Creates a Firefox profile with the settings you want.