this post was submitted on 12 Mar 2024
509 points (93.7% liked)
Linux
46819 readers
1133 users here now
From Wikipedia, the free encyclopedia
Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).
Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.
Rules
- Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
- No misinformation
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
Community icon by Alpár-Etele Méder, licensed under CC BY 3.0
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Personally I find it far more important that it's not run by a company that will try its hardest to track your every movement on the web, but to each their own, I suppose.
You never tried to listen for stock Firefox's traffic with Wireshark for sure.
People speak very good thing about Firefox but they like to hide and avoid the shady stuff. Let me give you the un-cesored version of what Firefox really is. Firefox is better than most, no double there, but at the same time they do have some shady finances and they also do stuff like adding unique IDs to each installation.
Firefox does is a LOT of calling home. Just fire Wireshark alongside it and see how much calling home and even calling 3rd parties it does. From basic ocsp requests to calling Firefox servers and a 3rd party company that does analytics they do it all, even after disabling most stuff in Settings and config like the OP did.
I know other browsers do it as well, except for Ungoogled and because of that I’m sticking with it. I would like to avoid programs that need no snitch whenever I open them. ungoogled-chromium + ublock origin + decentraleyes + clearurls and a few others.
Now you’re free to go ahead and downvote this post as much as you would like. I’m sorry for the trouble and mental break down I may have caused by the sudden realization that Firefox isn’t as good and private after all.
Chromium-based browsers have inherently weaker extensions due to Manifest v3 and many other targeted attacks on adblockers. If you want a browser that works far better and provides a much higher level of privacy, use Mullvad Browser (worked on in collaboration with the Tor Browser, just without Tor integration) or LibreWolf. Both are Firefox forks with Firefox telemetry removed and anti-fingerprinting measures. You don't need and absolutely should not install any extensions beyond the default installed in those 2 browsers (except perhaps a password manager), as that will dramatically damage the fingerprinting protection they provide. Both will have a much higher level of protection than you could ever realistically expect from any Chromium-based Browser.
I'd really rather have some harmless telemetry by Mozilla with a stronger ad blocker than Chromium bullshit. Ngl some people take privacy too seriously
I'm not ever going to use Mullvad Browser, I would rather use stock Firefox than that. I have LibreWolf installed as second browser and I like it at that, but I don't see myself going away from ungoogled-chromium anytime soon.
Can we ask why you wouldn't use Mullvad Browser? I'm honestly curious about that. From my wireshark tests, that thing only hits what you tell it to hit, nothing else. Am I missing something?
So... you don't trust Google but you trust some shady VPN company? You aren't wrong about quick wireshark tests, it does seem cleaner but long term trust and VPN companies are not something that go into the same sentence.
First off, everything Mullvad deploys is open source, from their clients to their servers. They have been audited and checked by 3rd parties to ensure their servers are running the source code they released. They are not some "shady VPN company" like Nord. They have a continual commitment to transparency that has been tested and true for many years.
Second, MullvadVPN has very little to do with the development of the Mullvad browser. It's just a fork of Tor Browser maintained by the Tor Project as a collaborative effort towards a uniform browser with the benefits of Tor Browser, but to be used without the Tor network. It is funded by Mullvad, but maintained mostly by the Tor Project. Do you not trust the Tor Project? The non-profit that has been open source and audited constantly throughout its lifespan? Here's the source code on the Tor Project's repo: https://gitlab.torproject.org/tpo/applications/mullvad-browser
The only Mullvad affiliation is the Mullvad extension that comes preinstalled (which you can uninstall, of course), the name, and the logo. That's about it. No need to use their VPN, no need to buy anything from Mullvad, it's basically just the Tor Browser without Tor.
I dont use Mullvad VPN, only the browser. I do use NordVPN when I need to show as being in another country, but mostly to circumvent geolocation and keep some stuff from my ISP. I know commercial VPNs are just switching who sees your data, but I'm good having a company that's not my ISP and in my country looking at that. And yes, I distrust Google to no end. The same applies to Apple, Amazon, Microsoft, Samsung, etc. There are not many names out there I trust. At the end of the day, anything not under your control, you need to choose how much you trust it, if at all.
Oh yeah.
Me too, the reason why I use ungoogled-chromium is mostly because of that and because when you take Chrome and remove all the tracking and spyware it runs way faster ahah. There are many people and projects that came together in the ungoogled-chromium community and the source code is scrutinized and cleaned up like nothing else.
We're lucky that there are so many nice developers out there just providing these tools for the community to break the ropes that tie us to big tech. Those devs are the real heroes in my book.
Yes!