vanadium ad-blocker

[deleted]

Graphite I meant you have courage.

Graphite

[deleted] I meant you have courage.

It's certainly harder work. Just like using Qubes. But not really scary once you understand the risks of not having the same hardening as Chromium or Vanadium. Lacking site isolation is a bummer, but still a very unlikely attack vector, which I mitigate with app isolation anyway.

xtrox

Graphite It seems https://addons.mozilla.org/en-US/firefox/addon/multi-account-containers/ does the isolation job for Firefox.

Graphite

xtrox
Browser addons only isolate sessions by having separate containers for cookies. The tabs still share the same process memory space. So if you have a malicious webpage, and a vulnerability in the browser, it might be possible to get info from other tabs. That's the problem Vanadium and other Chromium browsers try to solve with their site isolation. Each site is run in its own process, and thus memory is isolated.

https://www.chromium.org/Home/chromium-security/site-isolation/

Firefox for Android doesn't have this yet, although someone claimed to have it working.
https://www.reddit.com/r/firefox/comments/ttn9oy/site_isolation_is_working_on_firefox_android/

xtrox

Graphite thanks for your time sharing this knowledge .

GiftedAccess

Graphite
What are those 3?

Graphite

GiftedAccess

Firefox
Firefox Beta
Firefox Nightly

GiftedAccess

Graphite
Thx, i thought FF Focus is one of them, so i was unable to guess the third :)
(so you maybe got a 4th option for ff :) )

xtrox

GiftedAccess there's also Firefox ESR if you want Extended Support.

BTW using Protonvpn does the job blocking --ads --malware with netshield give it a try !

pdagenius

xtrox I don't find ProtonVPN blocks my ads. Am still using Nextdns which does a much better job.

Graphite

xtrox

I don't think Firefox ESR exists for Android.
Firefox Focus could be a 4th browser if you like.

VPNs like ProtonVPN often do some ad blocking. But not a lot. It won't block many of the annoyances. And a few of them get paid to NOT block certain ads. That's why I don't really trust free adblock by DNS services where the user cannot customize. They may block some things today, but don't keep up with changes as quickly and will never block somethings. Plus they can only block entire subdomains, not granular down to just the page elements.

I prefer Firefox addons like ublock origin that I can customize with a lot of lists to block ads using filter lists in 34 languages and regions, and ranging from malvertising to just minor annoyances. And then I can further customize to block ads, banners, and info popups that nobody else is blocking, by using the element picker. Can't do that at the DNS level.

xtrox

Graphite
In the netshield option as shown here it says it block ads malware tracking

With this config and using the DNS they provide on ma local news paper It does the job great.
That was to give vanadium a try since we told me about the isolation lacks within Firefox.

Themble

[deleted] And you can add an ad blocker at the dns level like for example dns.adguard.com

BTW: The Adguard-Server has changed its address to dns.adguard-dns.com

intelligence

[deleted] Hmm... wonder if you could run dnsmasq on the phone itself and set the dns to localhost? That would actually produce an effective replacement for hosts based adblocking without needing root access and save you from the latency overhead of a remote adblocking dns.

Graphite

intelligence

intelligence run dnsmasq on the phone itself and set the dns to localhost

That's a great question. I did something similar on a nonrooted OnePlus phone. Before I switched to grapheneOS there was no way to truly disabled Google's connectivity check through Google's gstatic server.
But there was a system level setting to define the server. So I used Tasker and python to run a simple web server that returns the proper http code. It worked great.
Of course, a simple python web server is lightweight compared to dmsmasq. But should still be possible.

Octo2

What use is the security of Vandium if you can't read due to auto play videos ?

[deleted]

Octo2 Use DNS filtering.