5 ms·
I'd like a fork of chrome which removes all (or at least most) the "features" mentioned - a browser that renders well but just doesn't support these masses of u
by drpixie 4y ago
I'd like a fork of chrome which removes all (or at least most) the "features" mentioned - a browser that renders well but just doesn't support these masses of unsecure features.
If you want to give 3rd parties access to all that stuff, you can run chrome. But I don't - I want the bare minimum that will run normal websites. I know that will break some pages, I'll accept that. (And that would give me a smaller & faster browser.)
- alooPotato 4y agoWhat else would you remove? If it's just extensions, can you just not install them?
- jeroenhd 4y agoIf you don't install any addons, you'll be fine. You'll have to do without uBlock Origin and other ad blockers, though. Consider Brave if you still want those and want to stick to Chromium. In Firefox, you can go to about:config and set the default permission to deny to a lot of stuff (notifications, clipboard, etc.). You can also disable webgl and other features like those.
- drpixie 4y agoI'd feel much more secure, from extensions and websites if those permissions just didn't exist. I can only turnoff what I know about, but not those new things quietly added with each update.
- deleted 4y ago[deleted]
- sb8244 4y agoI don't understand this sentiment. Websites can't use these permissions so it's not applicable at all.
- ClumsyPilot 4y ago> uBlock Origin and other ad blockers Router based adblockers work well, Flint by GL.net comes with nice UI and adhlock and VPN built in. Some people complain about its chinese origin but at least I know only 1 government is spying on me - my provider supplies a router with a linux kernel older than this house. There could be an entire ensemble of Trojans partying there
- dcow 4y agoNot with encrypted DNS (DoH and DoT).
- withinboredom 4y agoYour router can proxy encrypted DNS (if you have some decent firmware) or you can set up your own DNS server. There are also things like nextdns.io which can do all the work that a pihole does but works outside your home network.
- jeroenhd 4y agoI think the point is that some applications will use DoH/DoT/a custom protocol to bypass DNS-based blocklists. It's trivial to run your own DoH/DoT/custom server if you just hardcode the IP into your application. You can still block those by doing IP-level blocks for known ad domains, but that starts to become a problem if one of those domains are run from a shared cloud host (i.e. Cloudflare etc.) because you will also block legitimate domains. Most in-app ads and tracking will still use HTTPS so if you use SNI sniffing + certificate validation (to prevent domain fronting) you can still do network level blocks, but that's quite resource intensive, especially at modern internet speeds.
- dcow 4y agoAnd not once encrypted SNI has proliferated.
- Springtime 4y ago
- whalesalad 4y agohttps://github.com/ungoogled-software/ungoogled-chromium https://github.com/ungoogled-software/ungoogled-chromium
- jefftk 4y agoThe features mentioned in the article are available to extensions, and ungoogled-chromium supports these just as well.
- whalesalad 4y agoSure, but you don’t need to install them.
- omoikane 4y ago> I want the bare minimum that will run normal websites. I know that will break some pages, I'll accept that If you are willing to accept quite a few pages breaking, Lynx is probably the smallest and fastest browser: https://lynx.invisible-island.net/ https://lynx.invisible-island.net/