5 ms·

As it isn't open-source, how can you trust this? What certify me that my data are safely stored and don't sold to commercial partners??

by m_b 8y ago

simias 8y ago
I have the same reaction. I'd sooner use Firefox with a few privacy-enhancing extensions.
- m_b 8y ago
  I'm running Chromium with HTTPS everywhere, uBlock Origin, Wappalyzer (curiosity purpose) & Bitwarden (password manager). It's the best setup I found regarding performances & energy consumption for my GNU/Linux laptops.
  - moystard 8y ago
    It might be in terms of performance and energy consumption, but it is clearly not when it comes to privacy.
    - amelius 8y ago
      Could you explain, what privacy issues exist with Chromium?
      - vetinari 8y ago
        From https://www.chromium.org/developers/how-tos/api-keys https://www.chromium.org/developers/how-tos/api-keys: > Some features of Chromium use Google APIs, and to access those APIs, either an API Key or a set of OAuth 2.0 tokens is required. Setting up API keys is optional. If you don't do it, the specific APIs using Google services won't work in your custom build, but all other features will run normally. From experience, running without API key means that the browser will nag you at every start. If it doesn't, you do have them and then the browser uses APIs mentioned on the page.
      - morganvachon 8y ago
        This was one of the more egregious ones from a few years ago; since fixed, but as far as I'm concerned the trust was permanently broken (what's to stop them from doing something similar and hiding it better, after all this made it past the package maintainer until a user complained). https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=786909 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=786909
        dvfjsdhgfv 8y ago
        By the way, I think this comment [0] sums it up well for many HN folks: > As a web developer, I like chrome. As a private person, I uninstalled it. You might call it a feature or a core extension, most people consider this spyware. [0] https://bugs.chromium.org/p/chromium/issues/detail?id=491435#c12 https://bugs.chromium.org/p/chromium/issues/detail?id=491435...
dvdgsng 8y ago
What data are you afraid of being stored and sold exactly? Does Vivaldi route your traffic through company servers?
- m_b 8y ago
  Stuff like my browser fingerprint, what extensions am I using, what website am I browsing, what operating system am I running, what is my location, etc. It's not about conspiracy theories, just acknowledging that we don't know what's happening under the hood.
  - dvdgsng 8y ago
    And how is this related to Vivaldi in particular? How is it different from any other software and service out there? You don't know what websites do with your client data (fingerprint, extensions, etc), what cookies they write & read and who are they selling that data to. If there are no laws preventing them from doing such BS, all you can do is trust, believe and hope they do the right thing (GDPR is a move in the right direction here). Having a basic understanding of the internet and tracking helps, using proper tools to help yourself is even better (cookie manager, uMatrix, uBlock and alike).
    - m_b 8y ago
      It's not related to Vivaldi in particular, it's related to the fact that you must give a blind trust to all non open-source browser you decide to use.
    - morganvachon 8y ago
      > You don't know what websites do with your client data (fingerprint, extensions, etc), what cookies they write & read and who are they selling that data to. You can take actions within the browser and on your network to mitigate what websites can and can't do with your data. However, if your browser itself is compromised and closed source, there's nothing you can do about it and you can't even be sure what data is being extracted and used.
  - 8y ago
serverlesscloud 8y ago
Only the third party code- chromium and vivaldis changes on top are all public
- m_b 8y ago
  They may be "public", they still aren't open-source, see r3b1's comment: https://news.ycombinator.com/item?id=17950642 https://news.ycombinator.com/item?id=17950642

As it isn't open-source, how can you trust this? What certify me that my data are safely stored and don't sold to commercial partners??

by m_b 8y ago

As it isn't open-source, how can you trust this? What certify me that my data are safely stored and don't sold to commercial partners??

simias 8y ago

I have the same reaction. I'd sooner use Firefox with a few privacy-enhancing extensions.

m_b 8y ago
I'm running Chromium with HTTPS everywhere, uBlock Origin, Wappalyzer (curiosity purpose) & Bitwarden (password manager). It's the best setup I found regarding performances & energy consumption for my GNU/Linux laptops.
- moystard 8y ago
  It might be in terms of performance and energy consumption, but it is clearly not when it comes to privacy.
  - amelius 8y ago
    Could you explain, what privacy issues exist with Chromium?
    - vetinari 8y ago
      From https://www.chromium.org/developers/how-tos/api-keys https://www.chromium.org/developers/how-tos/api-keys: > Some features of Chromium use Google APIs, and to access those APIs, either an API Key or a set of OAuth 2.0 tokens is required. Setting up API keys is optional. If you don't do it, the specific APIs using Google services won't work in your custom build, but all other features will run normally. From experience, running without API key means that the browser will nag you at every start. If it doesn't, you do have them and then the browser uses APIs mentioned on the page.
    - morganvachon 8y ago
      This was one of the more egregious ones from a few years ago; since fixed, but as far as I'm concerned the trust was permanently broken (what's to stop them from doing something similar and hiding it better, after all this made it past the package maintainer until a user complained). https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=786909 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=786909
      - dvfjsdhgfv 8y ago
        By the way, I think this comment [0] sums it up well for many HN folks: > As a web developer, I like chrome. As a private person, I uninstalled it. You might call it a feature or a core extension, most people consider this spyware. [0] https://bugs.chromium.org/p/chromium/issues/detail?id=491435#c12 https://bugs.chromium.org/p/chromium/issues/detail?id=491435...

dvdgsng 8y ago

What data are you afraid of being stored and sold exactly? Does Vivaldi route your traffic through company servers?

m_b 8y ago
Stuff like my browser fingerprint, what extensions am I using, what website am I browsing, what operating system am I running, what is my location, etc. It's not about conspiracy theories, just acknowledging that we don't know what's happening under the hood.
- dvdgsng 8y ago
  And how is this related to Vivaldi in particular? How is it different from any other software and service out there? You don't know what websites do with your client data (fingerprint, extensions, etc), what cookies they write & read and who are they selling that data to. If there are no laws preventing them from doing such BS, all you can do is trust, believe and hope they do the right thing (GDPR is a move in the right direction here). Having a basic understanding of the internet and tracking helps, using proper tools to help yourself is even better (cookie manager, uMatrix, uBlock and alike).
  - m_b 8y ago
    It's not related to Vivaldi in particular, it's related to the fact that you must give a blind trust to all non open-source browser you decide to use.
  - morganvachon 8y ago
    > You don't know what websites do with your client data (fingerprint, extensions, etc), what cookies they write & read and who are they selling that data to. You can take actions within the browser and on your network to mitigate what websites can and can't do with your data. However, if your browser itself is compromised and closed source, there's nothing you can do about it and you can't even be sure what data is being extracted and used.
- 8y ago

serverlesscloud 8y ago

Only the third party code- chromium and vivaldis changes on top are all public

m_b 8y ago
They may be "public", they still aren't open-source, see r3b1's comment: https://news.ycombinator.com/item?id=17950642 https://news.ycombinator.com/item?id=17950642