Vanadium equivalent for Windows and Linux?

potato

Hello, I use vanadium on my pixel 9. Although I am looking for a better, more equivalent to vanadium alternative for both Windows and Linux, I am currently using Firefox, which I read that Gecko-based browsers, such as Firefox aren't recommended at all. So what are my options?

Lilac6044

potato For Linux see Trivalent which is a hardened chromium option. For Windows, I think edge is likely the most secure option (but not the most private choice!)

argante

potato HP Wolf Security-protected Chrome (BrChrome or Bromium Chrome) is the most secure browser you can have on Windows. If you've heard of QubesOS, Rafał Wojtczuk was responsible for designing security alongside Rutkowska. Wojtczuk later moved to Bromium, where they built a solution similar to QubesOS, but for Windows. They used a modified version of Xen (uXen). BrChomium is a version of Chrome that runs each page in a separate virtualized environment. When you close the page, the virtual machine is destroyed. This is a paid package, but it is quite cheap.

Wadder

potato from a security perspective for Windows machine's Chrome is probably you're best bet. Although, I probably wouldn't disregard Firefox as its continued support of manifest v2 extensions is very useful.

Xtreix

potato There is no equivalent to Vanadium for Windows and Linux. Trivalent on Secureblue uses some of Vanadium's patches, but it's not an equivalent and doesn't aim to be.

On Windows, use Edge for security which is the only browser to provide defense in depth, avoid third-party solutions and their marketing.

Dumdum

Lilac6044 For Linux see Trivalent which is a hardened chromium option.

Worth noting:

Official support is only provided via secureblue. Unsupported installation is also possible via our repo. In addition to being unsupported, use of Trivalent outside of secureblue lacks SELinux confinement.

https://github.com/secureblue/Trivalent

potato

Lilac6044 I don't want to move away from Arch at the current moment, so would vanilla chromium be the best option?
And for Windows I was thinking about running a script to enhance the privacy of Edge, or use chromium as well.

What are your opinions on this.

locked

argante Do you have the girhub page link or web link to qr chrome (bromium) ? I am interested to learn more about it. Thanks.

Lilac6044

Dumdum Good catch, I confess that I was unaware of that limitation of Trivalent as I use secureblue myself.

argante

Dumdum (Trivalent) Worth noting

Your opinion is incorrect. Why is Vanadium not available for Android and is only supported on GOS? Following your line of thinking, Vanadium should also be said to be worthless. Do you agree?

Vanadium is not separated from the environment in which it operates. Security refers to the entire system, not just the browser itself. Would it be possible to make Vanadium available for Samsung, for example? Sure, but GOS will never support it.

Secureblue is very much inspired by GOS and treats their system as a whole. So if you make such accusations against Trivalent, please be consistent and criticize Vanadium as well. GOS and Secureblue developers behave the same.

argante

locked No, this browser is not open source. I will probably spend more time on it. I currently have one laptop built from HP Wolf. There is a lot of code in lua there, which e.g. sets up secure virtual machines, e.g. for Office, and you can use that. BrChromium is a different case, though. There is a main process there, which starts individual tabs (pages) as independent processes. BrChromium starts each such process/page/tab in an individual virtual machine. After closing the tab, the VM is destroyed. I also added a proxy to this, which redirects and redirects all traffic from BrChromium to the Tor service. You can start Tor as a service at system startup, but I wanted to have more control, so I used Tor Control Panel.

Lilac6044

argante I cannot claim that I know for definite what Dumdum was getting at, but I am pretty sure they were simply making me (and by extension OP) aware that Trivalent is meant for, and best used with Secureblue and not Linux in general. Not once did I assume, nor do I think Dumdum was implying that Trivalent was 'worthless'.

Dumdum

argante
Literally what @Lilac6044 said. Not sure why you're attacking me. There was no "opinion" nor is it incorrect. You made up an entire bag to punch on your own.

trashaccount

argante They will release Vanadium as a generic Android package later.

argante

Dumdum Sorry if you took this as an attack on yourself - had no such intention. I was referring to opinion you made that Trivalent is worth noting because it is only supported on one distribution. I pointed out that GOS is the same. And in my opinion, GOS and Secureblue are doing the right thing by offering their distributions as a complete product, not as separate parts. If someone wants a high level of security, then Secureblue is the only(?) Linux distribution I would recommend.

GrouchyGrape

argante @Dumdum said it's worth noting, not that it's worth nothing. I'm suspecting a language barrier here? "Worth noting" is not a synonym of worthless.

They're simply pointing out that it's "worth taking note of" the fact that the browser is best supported in the Secureblue environment.

locked

argante Keep in mind that Vanadium takes advantage of the memory hardening in particular on GrapheneOS, and while probably useful, it would not be able to provide the same level os security on other platforms.

argante

GrouchyGrape @Dumdum , @Lilac6044 Yes, it's my mistake. I read it quickly as it was worthless.

sporter

I think ungoogled chromium would be the close, and has similarities in concept to GrapheneOS. Made by Google, Google removed :)
https://ungoogled-software.github.io/ungoogled-chromium-binaries/

Xtreix

sporter Not at all, Ungoogled Chromium and Vanadium are very different. See also : https://qua3k.github.io/ungoogled/

argante

Xtreix On Windows, use Edge for security which is the only browser to provide defense in depth, avoid third-party solutions and their marketing.

MS advertises that Edge is the most secure browser. They copied the Bromium solution (now HP Wolf Security). I compared both solutions on a laptop. The lightweight Hyper V machine is 3-4 times heavier than Bromium virtualization (uXen). BrChomium is already the maximum use of isolation, because each tab runs in a separate virtual machine. Of course, a CPU with virtualization support is required, but this also increases security. Of these two solutions, I prefer HP Wolf Security. PDF files can also be opened by BrChromium in an isolated VM.

freezet

On windows I use Cromite in combination with Sandboxie.
For non GOS phones I currently try Cromite as well as Ironfox.

GrapheneOS

freezet Cromite reduces security in multiple ways including adding substantial problematic attack surface, not keeping up with updates well, etc. It does not provide all of the hardening Vanadium does via memory tagging, using CFI on mobile, etc. Using a Firefox-based browser is far less secure than Chromium or a reasonable Chromium-based browsers.

freezet

GrapheneOS sure thing but as a daily browser i need usability features and ad blocking. For external links and webview stuff I love vanadium.

natoal

GrapheneOS

Does Vanadium support time-zone spoofing? This along with proxies might allow most Vanadium users to blend in together, from my limited knowledge