My setup on GrapheneOS with all the exploit protections on except some off for apps with compatibility issues. Thoughts?

  • ZinQ@lemmy.mlOP
    link
    fedilink
    arrow-up
    2
    ·
    14 hours ago

    Firefox is not secure on mobile, Vanadium is a great browser made by the GrapheneOS devs

      • ZinQ@lemmy.mlOP
        link
        fedilink
        arrow-up
        3
        ·
        6 hours ago

        People in the comments already have “Avoid Gecko-based browsers like Firefox as they’re currently much more vulnerable to exploitation and inherently add a huge amount of attack surface. Gecko doesn’t have a WebView implementation (GeckoView is not a WebView implementation), so it has to be used alongside the Chromium-based WebView rather than instead of Chromium, which means having the remote attack surface of two separate browser engines instead of only one. Firefox / Gecko also bypass or cripple a fair bit of the upstream and GrapheneOS hardening work for apps. Worst of all, Firefox does not have internal sandboxing on Android.”

    • ☂️-@lemmy.ml
      link
      fedilink
      arrow-up
      2
      ·
      edit-2
      10 hours ago

      Oh, i didn’t know it was a fork. I’d take adblock over it though, just for the fact it blocks rogue malicious javascript along with ads.

      I generally recommend Firefox for people that don’t use it, but there are more secure forks too if that’s your jam.

      • ZinQ@lemmy.mlOP
        link
        fedilink
        arrow-up
        1
        ·
        edit-2
        6 hours ago

        I mean Gecko based browsers are actively recommended against on mobile. Chromium based browsers are recommended. Also I use mullvadVPN DNS based ad blocking, and I also have Brave that has built in ad blocking. Do yourself a favor and ditch adblock in favor of Ublock origin

          • ZinQ@lemmy.mlOP
            link
            fedilink
            arrow-up
            1
            ·
            6 hours ago

            I haven’t really dived into this but I’m pretty sure GOS dev are one of the groups to recommend against it