My setup on GrapheneOS with all the exploit protections on except some off for apps with compatibility issues. Thoughts?

you are viewing a single comment's thread
view the rest of the comments
[+] 5 points 1 year ago* (last edited 1 year ago) (6 children)
  • [–] [S] 6 points 1 year ago (5 children)

    Firefox is not secure on mobile, Vanadium is a great browser made by the GrapheneOS devs

  • source
  • parent
  • hideshow 5 child comments
  • [–] 4 points 1 year ago* (2 children)

    Firefox is not secure on mobile

    Can you elaborate?

  • source
  • parent
  • hideshow 2 child comments
  • [–] [S] 5 points 1 year ago

    People in the comments already have "Avoid Gecko-based browsers like Firefox as they’re currently much more vulnerable to exploitation and inherently add a huge amount of attack surface. Gecko doesn’t have a WebView implementation (GeckoView is not a WebView implementation), so it has to be used alongside the Chromium-based WebView rather than instead of Chromium, which means having the remote attack surface of two separate browser engines instead of only one. Firefox / Gecko also bypass or cripple a fair bit of the upstream and GrapheneOS hardening work for apps. Worst of all, Firefox does not have internal sandboxing on Android."

  • source
  • parent
  • [–] 3 points 1 year ago

    I'm on the go right now. This is a quote for an old privacy guides snapshot, but when I was looking for it, I saw some articles from April saying that this was no longer true, so further searching needed when I get home

    On Android, Firefox is still less secure than Chromium-based alternatives: Mozilla's engine, GeckoView, has yet to support site isolation or enable isolatedProcess.

  • source
  • parent
  • [+] 1 point 1 year ago* (last edited 1 year ago) (2 children)
  • [–] [S] 1 point 1 year ago* (last edited 1 year ago) (1 child)

    I mean Gecko based browsers are actively recommended against on mobile. Chromium based browsers are recommended. Also I use mullvadVPN DNS based ad blocking, and I also have Brave that has built in ad blocking. Do yourself a favor and ditch adblock in favor of Ublock origin

  • source
  • parent
  • hideshow 1 child comment
  • load more comments (-1 replies)
  • load more comments (-1 replies)