Vanadium equivalent for Windows and Linux?

argante

DeletedUser323 but it would be incredibly difficult for malware to exploit both Chromium and the hypervisor.

Hyper V is a large piece of code and there are bugs found in it that allow for an attack: CVE-2025-21333, CVE-2025-21334, CVE-2025-21335. Wolf Security has stripped down the uXen code to the bare minimum and focused entirely on security. Both solutions are compared and both are good. However, for me, Hyper V is too heavy for a laptop.

DeletedUser323

argante On the other hand, we now have to extend trust to HP, in addition to the Chromium Project and Microsoft (if you use Windows). Their implementation will not be without flaws either, CVE counting is not very effective in the grand scale of things. Chromium itself is also a massive project, with tons and tons of CVEs, yet it is still the base for the most secure browsers in the world.

DeletedUser473

Hyper V is too heavy for a laptop

Can you elaborate? Hyper-V isn't very heavy. It just doesn't use the pagefile which is why it runs out of memory. Hyper-V needs 16 GB+ RAM for a good experience.

argante

DeletedUser473

HP Sure Click Endpoint Service: 488 MB
HP Sure Click Secure Browser (total, 2 tabs): 278 MB (1 tab: 223 MB)

new tab: 45.5 MB

HP Wolf Security uses a special version of virtualization based on Xen. Almost everything was removed to improve security. It's called Micro VM. Hyper V emulates everything and therefore is bigger. As for BrChromium, each tab is in an individual Micro VM. So it's not like the entire browser is running in a VM, but in this VM processes have access to each other. Each tab is VM-separated from other tabs by Micro VM. To be able to do something like that you had to modify Chrome code. So it's not a simple virtualization of the browser.

@DeletedUser323 I don't trust HP. Their laptops have hidden spyware. You can't even uninstall it, you just have to delete it from the registry. I recommend using Windows LTSC and installing HP Wolf Security, but only for Micro VM.

@locked Keep in mind that Vanadium (...)

True, but this topic is not about Vanadium/GOS, but Linux and Windows.

locked

DeletedUser323 Good security does not revolve around not having CVEs. It revolves around timely patching, which usually chromium does do well.

kosa

potato Why is firefox not recommended? I prefer and use firefox over chrome too. Can you please attach some (independent) sources? There are flaws here and there, but they are patched quickly, which is the same with chrome. Firefox can be run sanboxed too (at least in linux) and you depend on yourself, not a third party. I would not mind chrome either, but its primary purpose is to spy on users beter.

potato

kosa My only source if from Graphene, and I am not pretty knowledgeable also, so I went with their statement.

locked

argante Keep in mind that Vanadium takes advantage of the memory hardening in particular on GrapheneOS, and while probably useful, it would not be able to provide the same level os security on other platforms.

trashaccount

argante They will release Vanadium as a generic Android package later.

Jaseroque

argante I don't trust HP. [...] I recommend [...] installing HP Wolf Security

I'm confused ... aren't these two statements contradictory?

DeletedUser313

GrapheneOS

Does Vanadium support time-zone spoofing? This along with proxies might allow most Vanadium users to blend in together, from my limited knowledge

argante

DeletedUser313 No, but this is a topic for @GrapheneOS. I don't know how it is for android. Timezone (linux) is taken from /etc/localtime or from /etc/timezone. Additionally TZ can be set via env (~/.profile: export TZ="UTC" or C: setenv("TZ", "UTC", 1);). In my opinion the best solution would be to add the option to set TZ individually from the user profile.

DeletedUser313

argante

I see, I was just wondering if it was possible to spoof directly from the settings like Firefox on PC

Firefox privacy.resistFingerprinting true changes the timezone to Icelandic or UTC

potato

Does that mean Tor is less secure than Vanadium

potato

duckduckduck Well under Web-browsing im the 'Usage' tab, it states "Avoid Gecko-based browsers like Firefox as they're currently much more vulnerable to exploitation and inherently add a huge amount of attack surface...". They have explained it.

duckduckduck

potato oh I didn't know that thanks for telling me!

argante

Jaseroque

https://www.bleepingcomputer.com/news/security/keylogger-found-in-audio-driver-of-hp-laptops/

https://www.pcmag.com/news/keylogger-discovered-on-hp-laptops

https://www.pcmag.com/news/hp-accused-of-quietly-installing-spyware-on-windows-pcs

https://www.digitaltrends.com/computing/hp-laptops-keylogger-keyboard-driver/

Xtreix

DeletedUser313 Does that mean Tor is less secure than Vanadium

Tor Browser is not a secure browser, as a result, it does not protect privacy very well, but only tries to limit fingerprinting, which it does quite well, users should not connect to accounts via Tor because their data is not well protected, plus they would lose interest in the Tor browser if its data is linked to their real identities, which would de-anonymize them.

Firefox lags far behind Chromium in security which continues to improve, while Firefox continues to fall behind, particularly on Linux and even worse on Android. At least, Tor Browser enables HTTPS by default, which Firefox does not.

argante

DeletedUser313 Firefox privacy.resistFingerprinting true changes the timezone to Icelandic or UTC

TZ should match the proxy server (VPN). If this is not possible, UTC is a fairly universal approach. On GOS it does not matter in which profile you set the time zone - it will change in the entire phone for all profiles. So you cannot have one profile with an outgoing server in Zurich for example and such a time zone, and on another VPN profile with an output in the USA and local TZ.

argante

h4ud82oe9 This thread is full of people who say security words but don't have any idea why they're saying them.

We welcome you among our ranks.

If you're hardening Windows. Just stop.

Unfortunately in the real world you have to deal with conditions where you are forced to use Windows. What I was referring to is unfortunately a high risk case where Windows is required. A targeted hack was made and data worth millions(?) was stolen. It is hard to change someone. My proposal was to use Windows LTSC full offline - without network access. It is hard to convince someone to do something like that. As a compromise I agree to whitelist a few websites and block everything else. No email access on this machine. BrChomium from HP Wolf Security is supposed to provide an additional layer of isolation through their MicroVM, where every browser tab runs. I would be happy to hear your suggestions instead of judging others.

DeletedUser313

argante If anyone is interested, the Windscribe extension changes the time zone to match the server. It works for me

Also I take it that Brave is the best anti-fingerprinting browser on Windows partly because of its huge userbase

« Previous Page Next Page »