4 ms·
To that point, how many people run browser proxies in the cloud to obfuscate their location and minimize the blast radius if compromised? One could filter much
by smitty1e 5y ago
To that point, how many people run browser proxies in the cloud to obfuscate their location and minimize the blast radius if compromised?
One could filter much of the crapology somewhere safe, and then have a relatively tidy local browsing experience.
I'm too busy to take this idea past the handwaving stage, but it seems like someone should have already done the homework.
- ideologysec 5y agoCloudflare (and others) are working on it: https://www.cloudflare.com/products/zero-trust/browser-isolation/ https://www.cloudflare.com/products/zero-trust/browser-isola...
- smitty1e 5y agoThaf looks industrial strength, i.e., not necessarily packaged for individual sale.
- gruez 5y ago> I'm too busy to take this idea past the handwaving stage, but it seems like someone should have already done the homework. Indeed. https://www.mightyapp.com/ https://www.mightyapp.com/
- hedora 5y agoI wonder if they could use firecracker or something to reboot the browser (and nuke persistent/ephemeral storage) on each page load. They could even bounce each user across all their hosts by default. For trusted sites (ones the user logged into), this could be disabled.
- megous 5y agoI run the browser under different OS user accounts, and make my display manager display the user account in the window title bar. https://megous.com/dl/tmp/8eaa15e187fa9a2e.png https://megous.com/dl/tmp/8eaa15e187fa9a2e.png (ff1 being the user) I trust it more than browser's internal isolation solutions, like tab containers, which I like to use for other things, like testing web apps using different login sessions at once. I'd hate a remote solution. ;) Though this is not for privacy but more for protection and better low effort isolation.
- vladvasiliu 5y agoHuh, I guess that, combined with a reasonable umask, would be a neat idea. Does drag and drop work between windows owned by different users?
- eternityforest 5y agoHow would a browser proxy do anything aside from hiding from tracking, and maybe a tiny bit of protection from sites that use browser exploits(Not that it matters much since the only relevant ones are 0days that might not be in blocklists)? It doesn't seem like it would do much against a device compromise.