this post was submitted on 22 Jun 2023
35 points (94.9% liked)

Technology

34437 readers
159 users here now

This is the official technology community of Lemmy.ml for all news related to creation and use of technology, and to facilitate civil, meaningful discussion around it.


Ask in DM before posting product reviews or ads. All such posts otherwise are subject to removal.


Rules:

1: All Lemmy rules apply

2: Do not post low effort posts

3: NEVER post naziped*gore stuff

4: Always post article URLs or their archived version URLs as sources, NOT screenshots. Help the blind users.

5: personal rants of Big Tech CEOs like Elon Musk are unwelcome (does not include posts about their companies affecting wide range of people)

6: no advertisement posts unless verified as legitimate and non-exploitative/non-consumerist

7: crypto related posts, unless essential, are disallowed

founded 5 years ago
MODERATORS
 

Hi! I just got a new computer recently, and I'm concerned about browser security and security in general. Any recommendations for a good secure browser? Preferably open source.

top 34 comments
sorted by: hot top controversial new old
[–] CthulhuDreamer 21 points 1 year ago

Firefox with few EFF plugins would be my choice.

[–] [email protected] 14 points 1 year ago

Can't go wrong with ol Firefox

[–] [email protected] 12 points 1 year ago

LibreWolf is a privacy oriented fork of FireFox. If you like FireFox, you could give it a shot.

[–] [email protected] 9 points 1 year ago
[–] inspxtr 7 points 1 year ago (1 children)

I think it might be helpful for you and others if you elaborate a bit more on your threat models and your potential uses - is it for general browsing and work? Does your work encounter “insecure” content often?

[–] KeepFlying 2 points 1 year ago

Same question, all modern browsers are reasonably secure for the average person's security concerns (privacy on the other hand... Eek).

[–] zeropoint 7 points 1 year ago* (last edited 1 year ago) (1 children)

This site is invaluable ⬇️

Open-source tests of web browser privacy: https://privacytests.org/

[–] torres 2 points 1 year ago

Damn I should check LibreWolf out, thanks for the link

[–] Frellwit 5 points 1 year ago* (last edited 1 year ago) (1 children)

Sandbox your browser in a VM or something. Don't use the same browser/VM for banking/personal stuff and everyday browsing. Most browsers should work. (Except Chrome/Edge/Opera/Yandex). Personally I prefer Firefox. LibreWolf can also be an option, but you have to opt-in to see videos with DRM etc. Tor is also an option, but the downsides are captchas and websites that block you.

If you're even more extreme you can also use uBlock Origin in "hard mode" and the no script toggle. That will block JavaScript and prevent websites from connecting to any 3rd parties, anything from tracking servers to CDNs. That will definitely break websites, so you'll have to know how to unbreak them, which can be quite the learning curve for some people.

Why not Chrome/Edge/Opera/Yandex you say? Chrome is owned by an advertising company. Edge tracks you plenty. Opera and Yandex are made by companies from authoritarian states.

[–] JoeKrogan 2 points 1 year ago* (last edited 1 year ago)

To add to this if you go the vm route I'd recommend silverblue or another immutable OS

[–] [email protected] 4 points 1 year ago* (last edited 1 year ago)

Iirc the most secure browser in a vacuum is Edge, mostly because of its integration with defender. https://www.youtube.com/watch?v=MAu2KYrNgY0

However privacy ≠ security, and I wouldn't trade all my privacy for it (also a non private browser shares more information with the actors you interact with by default, which means you have always more personal data to lose).

My recommendation for a secure and private everyday browser, both on mobile and desktop, is Brave. They check every box in privacytests.org and are built on top of chromium, which is (sadly) more secure than Firefox or any of its derivative (apart from tor, ofc).

Edit: if you don't have any particular threat model I'd suggest just go with firefox (or librewolf if you don't want to spend time hardening it https://www.youtube.com/watch?v=F7-bW2y6lcI) from desktop and brave from mobile (I really don't like firefox mobile).

Here's a good general overview https://tilvids.com/videos/watch/88991d6f-b6f4-4673-9ba3-8d9a33cff19e (as I said privacy ≠ security, but if you don't start from a private browser security is useless unless you have very specific threat model)

[–] [email protected] 2 points 1 year ago
[–] [email protected] 2 points 1 year ago

Could give Mull Browser a try? Its a fork of Firefox, but without any of the telemetry.

Also, browseraudit.com is a nice online tester that tests browsers in an array of things.

[–] [email protected] 1 points 1 year ago (1 children)

Security or privacy? If security is all you care about then any modern browser is fine so long as you keep it up to date. If privacy is a concern then get LibreWolf + uBlock Origin and you're good to go.

[–] _HR_ 1 points 1 year ago

First thing first, there are no 100% secure browsers.

If you really want to increase security, you could use a browser extension that blocks JavaScript execution by default, e.g. NoScript, which would prevent websites that you visit from executing code on your box by default. This will prevent a lot of browser exploits from working in the first place. It will also result in a lot of websites not working correctly, so you might want to whitelist websites you trust in NoScript.

[–] JoeKrogan 1 points 1 year ago

I would recommend brave browser. It has built in ad blocking and anti tracking and fingerprint detection that is easily accessible for non technical folks. You also don't need to be messing with random extensions which could possibly open you up to an attack.

[–] Evono 1 points 1 year ago

Brave browser is rivaling librewolf in most cases regarding data protection, privacy, and anomysing also anti fingerprinting.

Librewolf even better than brave regarding privacy but breaks some websites.

Heavily modified Firefox Takes longer to set up, breaks some websites, even "use able" set up worse than brave and librewolf.

[–] zerozaku 1 points 1 year ago (1 children)

DuckDuckGo has released their own browser on Windows and Mac. You can check it out.

[–] htmono 2 points 1 year ago

It is also available on Android.

[–] [email protected] 1 points 1 year ago (2 children)

I personally go for firefox on desktop (with AdGuard/UBlock) and with Mull (Firefox based) on mobile with the same extensions (yes, you can add practically any extension to firefox mobile).

If you prefer a chromium based browser, brave is fine, even if I don't like some of their choices. An alternative on mobile is mulch - that is based on chromium and available on fdroid.

Both mull and mulch are part of a privacy oriented project. I like firefox on phones more than chromium based, while on tablets it struggles IMHO.

[–] INeedMana 2 points 1 year ago (1 children)

Mull (Firefox based) on mobile with the same extensions (yes, you can add practically any extension to firefox mobile).

I tried it but I could not install Auto Cookiedelete extension on it. Any hints?

[–] [email protected] 1 points 1 year ago

Just wish there were true Safari alternatives on iOS. :/

[–] [email protected] 0 points 1 year ago (1 children)
[–] [email protected] 1 points 1 year ago* (last edited 1 year ago)

This is really close.

I do this shit for a living.

OP, go download Firefox and then go to https://stigviewer.com/stigs
And find Firefox. This will cover all known low level security controls. This will keep you from ever being vulnerable in the first place. Just follow the fix text for each control you care about and you're done.

While you're at it, go through the windows controls. Hope you know regedit.

[–] 0485919158191 0 points 1 year ago

Tor is probably your best bet.

Brave would be my second choice.

[–] [email protected] -1 points 1 year ago

Depends what you mean by security.
If you mean privacy, no such thing exists. All browsers snitch on you, and trying to actually have a private life will land you in jail soon enough.
If you want to do online banking, any of the big three will do if updated regularly.
I'd choose firefox as a symbolic protest against tech oligarchy.

[–] [email protected] -1 points 1 year ago

Brave because it has great defaults out of the box, and it's Chromium, so all websites work as intended.
I wish I could recommend Firefox or LibreWolf, but their performance isn't nearly as good.

[–] [email protected] -1 points 1 year ago (1 children)
[–] [email protected] 5 points 1 year ago (1 children)

I know you were joking, but opera is the worst choice for privacy. It's own by the chinese. It's as risky as it sounds.

[–] [email protected] -1 points 1 year ago

I know, that's why it's the best browser out there 👍 💪.

/s once again

[–] [email protected] -1 points 1 year ago

Tor network

[–] [email protected] -3 points 1 year ago

I really like using Brave. Seems to strike a good overall balance. It has some annoying things like the crypto crap, but luckily you can customize a lot of that so you don’t see it.

load more comments
view more: next ›