4 ms·

There are packages available for popular GNU/Linux distributions based on the openSUSE build service, which are not uploaded by random people. If your distro i

by mbakke 6y ago

There are packages available for popular GNU/Linux distributions based on the openSUSE build service, which are not uploaded by random people. If your distro is unsupported, you can install Nix or Guix and use that to install ungoogled-chromium.

floatingatoll 6y ago
Are the distributions reviewing the patchset against Google Chromium upstream and affirming that, to the best of their knowledge, no additional threats will be delivered to those who choose to use this? The risk isn't in who compiles it. The risk is in the patches themselves coming from an untrusted third party, and being presented as a complete fork with significant functionality changes in support of the author's beliefs. If it was "here's a minimal patchset that's rebased against Chromium upstream, here's instructions to checkout Chromium and rebase our patchset onto it" then that would be possible to trust. This isn't that.
- mbakke 6y ago
  I'm not sure I understand the question. ungoogled-chromium is "a minimal patchset that's rebased against Chromium upstream, here's instructions to checkout Chromium and rebase our patchset onto it". https://github.com/Eloston/ungoogled-chromium/tree/master/patches https://github.com/Eloston/ungoogled-chromium/tree/master/pa... Apart from the patches, UC does two more things: substitute all "google.com" (and some other) domains with nonsense like "9oo91e.qjz9zk" in order to catch regressions; and prunes all binary files that are distributed with the original Chromium source. The repository comes with a script that can do all three things. It is not a fork of Chromium, if that is what you were thinking. I can't speak for other distributions, but for GNU Guix I have reviewed the patches and read the diffs for every new version. I assume most other packagers do the same.

4 ms·

There are packages available for popular GNU/Linux distributions based on the openSUSE build service, which are not uploaded by random people. If your distro i

by mbakke 6y ago

floatingatoll 6y ago
Are the distributions reviewing the patchset against Google Chromium upstream and affirming that, to the best of their knowledge, no additional threats will be delivered to those who choose to use this? The risk isn't in who compiles it. The risk is in the patches themselves coming from an untrusted third party, and being presented as a complete fork with significant functionality changes in support of the author's beliefs. If it was "here's a minimal patchset that's rebased against Chromium upstream, here's instructions to checkout Chromium and rebase our patchset onto it" then that would be possible to trust. This isn't that.
- mbakke 6y ago
  I'm not sure I understand the question. ungoogled-chromium is "a minimal patchset that's rebased against Chromium upstream, here's instructions to checkout Chromium and rebase our patchset onto it". https://github.com/Eloston/ungoogled-chromium/tree/master/patches https://github.com/Eloston/ungoogled-chromium/tree/master/pa... Apart from the patches, UC does two more things: substitute all "google.com" (and some other) domains with nonsense like "9oo91e.qjz9zk" in order to catch regressions; and prunes all binary files that are distributed with the original Chromium source. The repository comes with a script that can do all three things. It is not a fork of Chromium, if that is what you were thinking. I can't speak for other distributions, but for GNU Guix I have reviewed the patches and read the diffs for every new version. I assume most other packagers do the same.