22
Cromite and Vanadium (lemmy.world)
submitted 1 year ago by Devjavu@lemmy.world to c/privacyguides@lemmy.one
16 comments fedilink hide all child comments

I am a newcomer to the space and want to know some stuff about the mentioned mobile browsers. Information on them seems a little sparse to me. I am aware of Brave, however on my current device it is very buggy and I do not like the company's reputation. I am aware of Firefox and it's derivatives and the benefit they bring against chrome's monopoly, however I believe that it's non existing sandboxing is an issue and would therefore like to exclude them for mobile use.

Bromite seems to have been abandoned as it's owner appears to be in a war zone (My heart goes out to you Carl!). As for this reason, Cromite was forked from Bromite by the main contributor to Bromite. This in itself raises several question for me:

  1. Is Cromite as good as Bromite was in it's golden age?
  2. Does Cromite have some catching up to do, before it becomes an alternative to other browsers again?
  3. Can the project be trusted under different ownership?
  4. Is it not listed on PrivacyGuides.org as it is "new", or as it's got an issue? I know that Bromite was once recommended.
  5. Would you yourself use or recommend Cromite? If yes/no, why so?

Also, how does Vanadium compare privacy wise? I know it's the bomb for security, however it's developer(s) did not specifically target privacy if I understood correctly. If I were to get GrapheneOS, I'd be happy to use it's stock browser.

What about a vm/cloud based browser? I have found very little about them, but could imagine they'd make it hard to track someone.

top 16 comments
sorted by: hot top controversial new old
[-] glacier@lemmy.blahaj.zone 10 points 1 year ago* (last edited 1 year ago)

  1. Cromite is an improvement to Bromite, so yes.

  2. There are some things here or there that could be added, but it seems like a good browser for now.

  3. The current developer has worked on Bromite in the past, so if you trusted Bromite I don't see a reason not to trust Cromite.

  4. It's not listed because it was just released and I believe it was mentioned on Privacy Guides forums that the team is looking into it and may consider adding it to the recommended tools at some point.

  5. Yes, I currently use Cromite as a back-up browser and Mull as my main browser.

Vanadium is built specifically for security. It lacks privacy features such as an ad blocker. It is also only available on GrapheneOS. Cromite seems much easier to recommend from a privacy stand point as the use case for Vanadium is very specific.

[-] dngray@lemmy.one 3 points 1 year ago

Vanadium is built specifically for security. It lacks privacy features such as an ad blocker

Currently I use the AdGuard DoH server. It's not perfect, but I don't do a lot of browsing on my phone. There were some plans to implement this in vanadium https://github.com/GrapheneOS/Vanadium/issues/10

[-] Devjavu@lemmy.world 2 points 1 year ago

Exactly what I needed. Thank you!

[-] Devjavu@lemmy.world 2 points 1 year ago

May I ask if you use a custom rom? And would you use vanadium if you could?

[-] glacier@lemmy.blahaj.zone 2 points 1 year ago

I have a Pixel phone, but I don't use a custom ROM on it. I still depend on some Google services and apps for school and work.

I use NextDNS to block ads system-wide so I would probably stick with Vanadium instead of Cromite just to save memory. However, I would still use either Mull or Fennec F-droid as my main browser on mobile.

[-] privacyfalcon9899@lemmy.one 8 points 1 year ago

Cromite is a fork, so waiting a bit before using it would be helpful. Vanadium is a good option if you use grapheneos. Even though there are controversies around Brave, it does not affect privacy and security of it. Turn off crypto and other stuff and it’s done.

Firefox on android does not provide per site isolation. I don’t think it is significant as long as you know what you accept by using it. If you are willing to take this road, then Mull is the browser you are looking for.

https://divestos.org/pages/browsers

[-] Devjavu@lemmy.world 3 points 1 year ago* (last edited 1 year ago)

First of, thank you. Second, could you expand a little more on why lacking per site isolation is not so significant in your case?

[-] privacyfalcon9899@lemmy.one 2 points 1 year ago

It’s kind of a vulnerability. Afaik, in case of a compromise on a website, it prevents being spread. For me, it’s an important security feature. Actually, it should be for everyone. But still, I use Mull on android activating https only.

Further info:

https://divestos.org/pages/browsers#processIsolation

[-] dngray@lemmy.one 5 points 1 year ago

Related thread here https://discuss.privacyguides.net/t/cromite-bromite-fork/13274 The main thing we find is Vanadium is not lagging behind upstream and it has hardening patches that a lot of other WebView implementations do not have. Whether you like a to "contribute to chromium based market share" you'll have a WebView implementation on your Android device used by apps you use. It's also worth noting that per site isolation doesn't seem to be a thing on Android for non-chromium browsers.

[-] Devjavu@lemmy.world 1 points 1 year ago

Thanks for the related thread. Appreciate it.

[-] TheQuickHedgehog@lemmy.sdf.org 4 points 1 year ago

Don't use chromium based browser if possible, since it will indirectly support the monopoly position of the chromium engine

[-] Devjavu@lemmy.world 2 points 1 year ago

I do not give two craps :)

[-] chemicalwonka@discuss.tchncs.de 1 points 1 year ago* (last edited 1 year ago)

I use Vanadium as my main browser but I use Cromite to save my bookmarks because in Vanadium there is no way to backup my bookmarks.

[-] lengsel@latte.isnot.coffee 1 points 1 year ago

I am using Graphene abd I disabled Vanadium due to it being Chromium essentially. I use Navi or Download Navi from F-Droid. It does not have as much web functionality as Vanadium, but I don't use phone for websites, I read websites on computer or laptop, but occassionally something might need a browser momentarily so that's what Navi for.

If you want a web browser for privacy, I would suggest use F-Droid and in Settings under Anti-features, turn off every option in there, do a search for browser and see what you think of the options. It's either cheap development or old. A mobile web browser that protects privacy doesn't seem to exist with the capabilitied of a Firefox.

I'm a strong believer that there is no such thing as a privacy respecting browser that is closed source. For that reason, I use IceCat on computer.

[-] dngray@lemmy.one 1 points 1 year ago

Download Navi from F-Droid. It does not have as much web functionality as Vanadium

From the looks of it Navi is just a download manager, not an actual web browser.

For that reason, I use IceCat on computer.

But do you actually compile those binaries yourself. A lot of browsers are open source.

[-] lengsel@latte.isnot.coffee 1 points 1 year ago

Navi has a built-in download manager, it is not a standalone download manager. I use Navi as a light web browser for websites in case I never a browser on phone.

I do not compile IceCat, it's available in different repositories.

this post was submitted on 26 Jul 2023
22 points (100.0% liked)

Privacy Guides

16263 readers
46 users here now

In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.

This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.

You can subscribe to this community from any Kbin or Lemmy instance:

Learn more...

Check out our website at privacyguides.org before asking your questions here. We've tried answering the common questions and recommendations there!

Want to get involved? The website is open-source on GitHub, and your help would be appreciated!

This community is the "official" Privacy Guides community on Lemmy, which can be verified here. Other "Privacy Guides" communities on other Lemmy servers are not moderated by this team or associated with the website.

Moderation Rules:

  1. We prefer posting about open-source software whenever possible.
  2. This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, make a suggestion on our forum first.
  3. No soliciting engagement: Don't ask for upvotes, follows, etc.
  4. Surveys, Fundraising, and Petitions must be pre-approved by the mod team.
  5. Be civil, no violence, hate speech. Assume people here are posting in good faith.
  6. Don't repost topics which have already been covered here.
  7. News posts must be related to privacy and security, and your post title must match the article headline exactly. Do not editorialize titles, you can post your opinions in the post body or a comment.
  8. Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.
  9. No help vampires: This is not a tech support subreddit, don't abuse our community's willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.
  10. No misinformation: Extraordinary claims must be matched with evidence.
  11. Do not post about VPNs or cryptocurrencies which are not listed on privacyguides.org. See Rule 2 for info on adding new recommendations to the website.
  12. General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.

Additional Resources:

founded 1 year ago
MODERATORS
jonah@lemmy.one
dngray@lemmy.one
freddy@lemmy.one
ninchuka@lemmy.one
jonah@lemmy.jonaharagon.net