It's also worth to mention that you don't need a Mullvad account in order to use their Browser.
this post was submitted on 28 Aug 2023
172 points (95.3% liked)
Privacy
30856 readers
433 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
founded 4 years ago
MODERATORS
is this meant to dailydrive and be as anonymous as tor or better than firefox, but for real sensitive stuff you should still use tor?
I use it as a daily driver. For anything that I'm not logged into. I try to keep most of my normal browsing logged out anyway. So it's perfect
Yes, dailydrive. More anonymous than firefox with addons.
Should I be interested in this if I already use hardened Firefox?
Probably. Just keep in mind that letterboxing (grey margina to normalize screen size and avoid fingerprinting) is enabled by default and changing that would also change your fingerprint. I use librewolf atm, but i am considering switching if it wasn't for letterboxing.
Yes. Compare your Firefox and mullvad browser on fingerprint.com
Yes, it's more anonymous than firefox with mods/addons. You can do "fingerprint" tests online to compare how unique your browser is. Just use the Mullvad Browser daily - and if you need something special - than you can still use a other solution for the special case.
Addons yes. But hardened means changing the user.js with arkenfox as base or simply use that premade hardening. Mullvad Browser is nothing but Firefox+arkenfox+fancy UI and no Flatpak available.
Other vectors are fonts, which only work in the Tor browser bundle I think, to really fake being on Windows.
NoJSFingerprint using CSS is also still possible, a way to detect your OS. this is the same on all Browsers.
Just do a Fingerprint Test:
coveryourtracks.eff.org
Is the other Browser better? No, you will have less privacy protection.
If you use Arkenfox without any big changes that are fingerprintable, no.
This browser is a collaboration with the Tor project, I think they white labeled tor browser by making it so you don't need tor to use it
What core is it based on/forked from? Is it Firefox like TorBrowser?
And what does Mullvad get out of it? Just name recognition?
github.com/mullvad/mullvad-browser Firefox ESR - it's basically Tor Browser without Tor. Mullvad gets name recognition 100%
There is a FAQ about the Mullvad browser on the Tor Project's website, which gives a few more details.
If you think this is a good Browser, keep in mind:
- this is a fork of Firefox with slower updates
- its simply hardened Firefox desktop. Mobile needs a seperate app, but for Desktop all you need is a user.js
- ~~its not isolated from the system~~ it has a Flatpak, which is good. But check its default permissions
- I think it doesnt use a fake Download, Desktop etc. path
Tor Browser Launcher Flatpak is the most secure Browser afaik.
For Firefox hardening, I made "Arkenfox softening"
Its an approach to download Arkenfox, change it to be usable as a normal browser without leaking more data in any way and automating that process.
Its best to use upstream Firefox, best as Flatpak (prove me wrong) and harden it using this well tested preset.
Its just a little crazy, thats why I read all of it and just change some settings, not reinvent the wheel
Mullvad Browser is Tor Browser without Tor. TorBrowser evolved over many years, with a very long track record and is recommended uncountable times all over the world. So, if you want the TorBrowser without all the Tor stuff: here is it.
FlatPak is not the as secure as everyone think it is.
I would be happy to find some sources comparing bubblewrap with native Firefox or Chromium sandbox. Because the Torbrowser flatpak is nearly completely isolated
I don't have that comparison but here are some resources that critics FlatPak's misleading security
https://whynothugo.nl/journal/2021/11/26/the-issue-with-flatpaks-permissions-model/
Okay nothing new, nothing about the actual bubblewrap sandbox afais.
Yes they often have bad permissions, but thats because otherwise they would break.
The process is converting standard apps to Flatpaks, by actually implementing PORTALS. Portals are a special file manager that can open files outside the sandbox and symlink it to the flatpaks internal storage. So you can grant access only to needed files.
The benefit of using a seperate app instead of custom configured hardening is that (1) your hardening auto updates and (2) you're less prone to fingerprinting. Also it's easier.
True. Thats why I currently use Librewolf. Not sure if my arkenfox script still works.
But Librewolf has some weird breakages, like Videocalls simply not working lol. Until I need that, I stick with it.
I missed something like this since a similar project (Secbrowser by Kicksecure) got abandoned. All the security and privacy enhancements of Tor Browser, but without the Onion network. It also helps legitimize the Tor Browser/Mullvad Browser's fingerprint.
I hope someone forks this and creates an i2p browser, similar to the Tor browser.
100% same here
Do you need the Mullvad Extension for the sake of privacy?
It's all included. It's made for using it how it is - without installing AddOns. If you would need other addons you will just use another browser that offers that special usecase, but than with less privacy.
Follow-up question: Is installing the duckduckgo extension then still recommended?
No. No other extension in Mullvad Browser. For other usecases besides of good privacy you should use a other browser.
I dont like that they also use private browsing. It sucks, is unnecessary, restricts extensions, containers and disabling it is fingerprintable
You can still use a other web browser for other special usecases. Mullvad Browser has focus on privacy.
load more comments
(7 replies)
How does it compare with LibreWolf ?
Just do a Fingerprint Test:
coveryourtracks.eff.org
Is the other Browser better?
You will have less privacy due to fingerprinting and Mullvad-Browser has the advanced configurations that are in use for many years by TorProject. I never used LibreWolf but they described it as 'custom version of Firefox'. They integrated uBlockOrigin extension and if you add further extensions it will make you stand out.
I am new to privacy. I am confused about which browsers are Chromium based.
Is Mullvad chromium based browser?
Quick answer: no, it's based on tor which is based on firefox