this post was submitted on 22 Jun 2023
18 points (95.0% liked)

Technology

34423 readers
254 users here now

This is the official technology community of Lemmy.ml for all news related to creation and use of technology, and to facilitate civil, meaningful discussion around it.


Ask in DM before posting product reviews or ads. All such posts otherwise are subject to removal.


Rules:

1: All Lemmy rules apply

2: Do not post low effort posts

3: NEVER post naziped*gore stuff

4: Always post article URLs or their archived version URLs as sources, NOT screenshots. Help the blind users.

5: personal rants of Big Tech CEOs like Elon Musk are unwelcome (does not include posts about their companies affecting wide range of people)

6: no advertisement posts unless verified as legitimate and non-exploitative/non-consumerist

7: crypto related posts, unless essential, are disallowed

founded 5 years ago
MODERATORS
 

Hi! I just got a new computer recently, and I'm concerned about browser security and security in general. Any recommendations for a good secure browser? Preferably open source.

top 26 comments
sorted by: hot top controversial new old
[–] [email protected] 12 points 1 year ago
[–] Kerfuffle 12 points 1 year ago

LibreWolf is a privacy oriented fork of FireFox. If you like FireFox, you could give it a shot.

[–] [email protected] 11 points 1 year ago

Can't go wrong with ol Firefox

[–] [email protected] 7 points 1 year ago

Firefox with few EFF plugins would be my choice.

[–] [email protected] 4 points 1 year ago* (last edited 1 year ago)

Sandbox your browser in a VM or something. Don't use the same browser/VM for banking/personal stuff and everyday browsing. Most browsers will do. (Except Chrome/Edge/Opera/Yandex). Personally I prefer Firefox. LibreWolf can also be an option, but you have to opt-in to see videos with DRM etc. Tor is also an option, but the downsides are captchas and websites that block you.

If you're even more extreme you can also use uBlock Origin in "hard mode" and the no script toggle. That will block JavaScript and prevent websites from connecting to any 3rd parties, anything from tracking servers to CDNs. That will definitely break websites, so you'll have to know how to unbreak them, which can be quite the learning curve for some people.

Why not Chrome/Edge/Opera/Yandex you say? Chrome is owned by an advertising company. Edge tracks you plenty. Opera and Yandex comes from authoritarian states.

[–] [email protected] 3 points 1 year ago* (last edited 1 year ago)

Iirc the most secure browser in a vacuum is Edge, mostly because of its integration with defender. https://www.youtube.com/watch?v=MAu2KYrNgY0

However privacy ≠ security, and I wouldn't trade all my privacy for it (also a non private browser shares more information with the actors you interact with by default, which means you have always more personal data to lose).

My recommendation for a secure and private everyday browser, both on mobile and desktop, is Brave. They check every box in privacytests.org and are built on top of chromium, which is (sadly) more secure than Firefox or any of its derivative (apart from tor, ofc).

Edit: if you don't have any particular threat model I'd suggest just go with firefox (or librewolf if you don't want to spend time hardening it https://www.youtube.com/watch?v=F7-bW2y6lcI) from desktop and brave from mobile (I really don't like firefox mobile).

Here's a good general overview https://tilvids.com/videos/watch/88991d6f-b6f4-4673-9ba3-8d9a33cff19e (as I said privacy ≠ security, but if you don't start from a private browser security is useless unless you have very specific threat model)

[–] [email protected] 2 points 1 year ago

Could give Mull Browser a try? Its a fork of Firefox, but without any of the telemetry.

Also, browseraudit.com is a nice online tester that tests browsers in an array of things.

[–] [email protected] 2 points 1 year ago (1 children)

I think it might be helpful for you and others if you elaborate a bit more on your threat models and your potential uses - is it for general browsing and work? Does your work encounter “insecure” content often?

[–] [email protected] 0 points 1 year ago

Same question, all modern browsers are reasonably secure for the average person's security concerns (privacy on the other hand... Eek).

[–] [email protected] 1 points 1 year ago (1 children)

Security or privacy? If security is all you care about then any modern browser is fine so long as you keep it up to date. If privacy is a concern then get LibreWolf + uBlock Origin and you're good to go.

[–] [email protected] 1 points 1 year ago
[–] 0x4E4F 0 points 1 year ago (1 children)
[–] [email protected] 4 points 1 year ago (1 children)

I know you were joking, but opera is the worst choice for privacy. It's own by the chinese. It's as risky as it sounds.

[–] 0x4E4F 0 points 1 year ago

I know, that's why it's the best browser out there 👍 💪.

/s once again

[–] [email protected] 0 points 1 year ago

Brave browser is rivaling librewolf in most cases regarding data protection, privacy, and anomysing also anti fingerprinting.

Librewolf even better than brave regarding privacy but breaks some websites.

Heavily modified Firefox Takes longer to set up, breaks some websites, even "use able" set up worse than brave and librewolf.

[–] [email protected] 0 points 1 year ago (1 children)

I personally go for firefox on desktop (with AdGuard/UBlock) and with Mull (Firefox based) on mobile with the same extensions (yes, you can add practically any extension to firefox mobile).

If you prefer a chromium based browser, brave is fine, even if I don't like some of their choices. An alternative on mobile is mulch - that is based on chromium and available on fdroid.

Both mull and mulch are part of a privacy oriented project. I like firefox on phones more than chromium based, while on tablets it struggles IMHO.

[–] [email protected] 2 points 1 year ago

Just wish there were true Safari alternatives on iOS. :/

[–] [email protected] 0 points 1 year ago

Depends what you mean by security.
If you mean privacy, no such thing exists. All browsers snitch on you, and trying to actually have a private life will land you in jail soon enough.
If you want to do online banking, any of the big three will do if updated regularly.
I'd choose firefox as a symbolic protest against tech oligarchy.

[–] [email protected] 0 points 1 year ago (1 children)
[–] [email protected] 1 points 1 year ago* (last edited 1 year ago)

This is really close.

I do this shit for a living.

OP, go download Firefox and then go to https://stigviewer.com/stigs
And find Firefox. This will cover all known low level security controls. This will keep you from ever being vulnerable in the first place. Just follow the fix text for each control you care about and you're done.

While you're at it, go through the windows controls. Hope you know regedit.

[–] [email protected] -1 points 1 year ago

DuckDuckGo has released their own browser on Windows and Mac. You can check it out.

[–] [email protected] -1 points 1 year ago

Tor network

[–] [email protected] -1 points 1 year ago

Tor is probably your best bet.

Brave would be my second choice.

[–] [email protected] -1 points 1 year ago

Brave because it has great defaults out of the box, and it's Chromium, so all websites work as intended.
I wish I could recommend Firefox or LibreWolf, but their performance isn't nearly as good.

[–] [email protected] -3 points 1 year ago

I really like using Brave. Seems to strike a good overall balance. It has some annoying things like the crypto crap, but luckily you can customize a lot of that so you don’t see it.

load more comments
view more: next ›