4 ms·
Yeah, seems like it: https://github.com/Eloston/ungoogled-chromium/blob/master/resources/common/patches/ungoogled-chromium/fix-building-without-safebrowsing.pat
by lorenzhs 10y ago
Yeah, seems like it: https://github.com/Eloston/ungoogled-chromium/blob/master/resources/common/patches/ungoogled-chromium/fix-building-without-safebrowsing.patch https://github.com/Eloston/ungoogled-chromium/blob/master/re... and https://github.com/Eloston/ungoogled-chromium/commit/9163f6ed3c57f427ca5ea6b0f4f379a1cf85b796 https://github.com/Eloston/ungoogled-chromium/commit/9163f6e... and https://github.com/Eloston/ungoogled-chromium/blob/master/resources/common/patches/inox-patchset/modify-default-prefs.patch#L17 https://github.com/Eloston/ungoogled-chromium/blob/master/re...
That is a very bad idea. I sympathize with the idea of the project, but please think twice before meddling in security things. See https://news.ycombinator.com/item?id=9779990 https://news.ycombinator.com/item?id=9779990
I filed an issue to explain the risks: https://github.com/Eloston/ungoogled-chromium/issues/50 https://github.com/Eloston/ungoogled-chromium/issues/50
- throwaway2048 10y agoI have no interest in my urls being sent to google for "security checking" (I am aware of the hashing)
- lorenzhs 10y agoThen you can disable SafeBrowsing in Chromium's settings. My point is that disabling it without warning users about the risks of doing so is a bad idea. If you make an informed decision to disable it, I won't try to stop you.
- kuschku 10y agoThen run your own safe browsing list. Connecting to a foreign company in a country that directly threatened you with invasion and relying on that for webbrowsing is not acceptable.
- lorenzhs 10y agoWell and how would I go about that? Your suggestion doesn't make any sense because it's not viable. There's a setting to disable SafeBrowsing in Chromium, too. You can just disable that. But force-disabling it is dangerous. I'm not sure what your point you're trying to make with the invasion comment.
- kuschku 10y ago> I'm not sure what your point you're trying to make with the invasion comment. My argument is that browsers aren’t just used in private use, but also in governments, in military companies, etc. If you rely on anything phoning home to a company that’s in the country of a potential enemy, that’s a very stupid idea. (And thanks to the Den Hague Invasion Act of 2001, even Europe knows the US doesn’t give a fuck about allies) > Well and how would I go about that? Your suggestion doesn't make any sense because it's not viable. Well, ask Google. It’d be viable if they had intended for an actual safety infrastructure, and published the required information to self host, and not just another way to phone home.