Hi guy

  • 1 Post
  • 146 Comments
Joined 2 years ago
cake
Cake day: June 12th, 2023

help-circle

  • Iron fox is great.

    Was my first impression.

    However, it is maybe a bit excessively prohibitive in it’s attempts to provide privacy/security.

    And there are a few issues that leave some privacy options wide open for some reason.

    To the 1st point, they use a couple dozen different blocklists, using uBlock. Those default lists block sites that can test your browser for security and privacy vulnerability. Eg one of the most used and ubiquitous sites: browserleaks.org is blocked.

    Which brings me to 2nd point.

    I always check webrtc for leaks. In Mozilla/Firefox builds that is media.peerconnection.enabled in about:config.
    In the plethora of blocklists used by ironfox two are conspicuously left unchecked: block webrtc and unbreak webrtc.
    And, for whatever reasoning, in about config, yep, peerconnection is enabled. As is webgl.

    Maybe I don’t get out much, but I have never experienced an issue with any website that required webrtc, webgl, or wrbgpu be enabled. (They are each significant attack surfaces and each leak data you didn’t know was being leaked)

    I’m not using iron fox to use teams or make a video call. There is zero reason for it.

    And blocking sites that check these has me maybe a little cautious on it really being the thing it says it is.



  • I got a pixel 9 for $240 CAD via carrier promotion in Canada.

    I held out getting a new phone as long as I could and they offered a new pixel 9 for $5 per month for 24 months

    Not to trade in after 24.

    It’s mine. For 5$ a month.

    When I received it I didn’t turn it on for a week.

    Read as much as I could to decide that Google would only ever see the single boot to enable developer mode and enable OEM unlock to flash graphenos.

    It seemed intimidating, but the process to install is very smooth.




  • masterofn001@lemmy.catoAndroid@lemmy.worlddeleted
    link
    fedilink
    English
    arrow-up
    26
    ·
    21 days ago

    I really enjoy graphene and the separate user profiles with no google integration.

    If a google app, or something from play store is needed they’ve developed a compatability layer and sandbox for play services and store.

    It’s a lot of security toggles and permissions.

    But not having Google sucking your data at every level of the OS is great.

    Wirh the isolated profiles, you can still have a fully googled system which you can fully lockdown at anytime, while having a pure aosp high security profile.

    It’s fdroid and Izzy/codeberg and ironfox and termux and a few other repos on main.

    I don’t do snap/insta/meta/etc and have no need for apps that drain my soul, anyway.

    Anyway, yeah, google fucking sucks.