LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Web Browser privacy (https://www.linuxquestions.org/questions/linux-security-4/web-browser-privacy-4175654411/)

actinide 05-22-2019 06:55 PM

Web Browser privacy
 
Can the Web brower I use know what websites i've bookmarked.
Example Firefox, Opera, Vivaldi, Chromium.

hydrurga 05-22-2019 07:06 PM

If by "web browser", you mean the browser developers (because the web browser obviously knows your bookmarks), then as far as Mozilla goes, relating to Firefox, the best answer I have is "not as far as I know" (even if you're using Firefox Sync which uses encryption for the data you hold).

In saying that, if you are using Firefox and you want to review the security of your data regarding Mozilla, you should read this: https://www.mozilla.org/en-US/privacy/firefox/ and make any necessary configuration changes to Firefox to match your needs.

proMusic 05-22-2019 09:02 PM

They certainly have the capability if they wanted to push an update and do that, and so can browser addons. Depending on the browser, your browser settings are stored in a cookie which can have PII (personally identifiable information) and these can be sent to second/third parties whom can corrolate to you.. The only cookie your browser should ever need to store on your computer is a first party non-identifying browser setting cookie, as such is the case in the DDG browser..

Quote:

At DuckDuckGo, no cookies are used by default. If you have changed any settings, then cookies are used to store those changes. However, in that case, they are not stored in a personally identifiable way.. For example, the large size setting is stored as 's=l'; no unique identifier is in there. Furthermore, if you prefer not to use cookies to store settings, you can use URL parameters instead.
The keyphrase in that quote is "they are not stored in a personally identifiable way" so if your local cookie with all your bookmarks somehow did get stolen (via a sidejacking attack), then there would be no PII in that cookie that could uniquely browser fingerprint you. (as a sidenote I dont trust DDG as they were bought by Verizon who installed a supercookie on all their customers; you should use StartPage instead)..

ondoho 05-23-2019 12:21 AM

Quote:

Originally Posted by actinide (Post 5997924)
Can the Web brower I use know what websites i've bookmarked.
Example Firefox, Opera, Vivaldi, Chromium.

yes, definitely, all of those, even DDG browser.
and with javascript it can be actively exploited.

anon033 05-23-2019 10:29 PM

To be honest, we are royally screwed browser wise. For now use this: https://gitlab.com/Puffles_the_Drago...tes/Firefox.md, but someone needs to write a minimal (pure C no bloat crap) and secure browser. Give me a few years, got a lot to learn. But someone has to do it... Have zero delusions, Firefox is just as bad as chrome and chromium is chrome. Mozilla is the same as Google, they are just less open about it and less obvious. TOR is nice, but lets be real it's protcol is adorable and the project has sold out for NSA money. Browser at this point? Do your best, have zero illusions w3m + proxychians going into i2p then tor is the best bet.

ondoho 05-24-2019 12:30 AM

Quote:

Originally Posted by FOSSilized_Daemon (Post 5998309)
To be honest, we are royally screwed browser wise. For now use this: https://gitlab.com/Puffles_the_Drago...tes/Firefox.md, but someone needs to write a minimal (pure C no bloat crap) and secure browser. Give me a few years, got a lot to learn. But someone has to do it... Have zero delusions, Firefox is just as bad as chrome and chromium is chrome. Mozilla is the same as Google, they are just less open about it and less obvious. TOR is nice, but lets be real it's protcol is adorable and the project has sold out for NSA money. Browser at this point? Do your best, have zero illusions w3m + proxychians going into i2p then tor is the best bet.

yeah, you talk the talk.
but really it's the internet that's a steaming pile of --- well, all sorts of sh!t.
Unfortunately, browsers need to deal with that.
Some of them being bloated beyond compare, or spying on you, is really just an afterthought in light of the real problem: to reliably display all the stuff that is the WWW. That's the real bloat, the real security hole.

Btw, atempts to "write a minimal (pure C no bloat crap) and secure browser. Give me a few years, got a lot to learn." do exist.
Just look at netsurf or dillo (i don't know if those are actually written in pure C but that's hardly the point). They can't even play youtube videos, and that's after decades of development.

carlito386 05-24-2019 08:42 AM

Quote:

Originally Posted by FOSSilized_Daemon (Post 5998309)
Give me a few years, got a lot to learn.

The above is the only accurate statement in your post.
Unfortunately, I don't think OP has time to wait for you to grow up and learn.

Free and open source software is the most effective first step for ensuring your web browser is secure and protects your identity.
Mozilla who owns FF is also not a small niche company - so this ensures the browser will be well maintained and have timely updates.

Mozilla used to be Netscape. There is a documentary about how the company chose to resist Govt pressure to collect data. Netscape then jettisoned FF as free and open source just before it was killed off as a company.
So FF has a history of being loyal to the public rather than to big companies.
FF is the browser of choice for Debian - and Debian is also actively involved in maintaining FF.

If bookmarks are used to identify the user - then users can create several 'profiles' with FF.
Just input: 'about: profiles' in the address bar.
Each profile can then have different bookmarks and different browsing habits. Essentially the user becomes several people whose browsing habit is a little more difficult to identify.

I use Wikipedia as my search engine. I can then go to the Wikipedia page of most websites. On the Wikipedia page there will be a link with the websites address. This avoids using bookmarks.

Alternatively, a seperate file can be held on a hard disk with the address of every website the user wants.
The file can then be used to cut and paste the address onto the address bar of a web browser.

The FF home page allows links to websites to be stored there. This also avoids using the bookmarks toolbar.

anon033 05-24-2019 03:14 PM

Anyone who can honestly look at FireFox and Mozilla and say they are not as bad as Microsoft and Google is a fan boy. They have invested in maleware, injected maleware into users browsers many times and have done even worse things than google. I guess people have to justify the crappy situation we are in. Yes, browsers need to be bloated to run all the Javascript, PHP and other crap I and many others bloat and don't use. Browsers shouldn't be bloated peices of spyware just because some web devs think "OH we should make it easier for the users by adding a crap ton of animations and bs no one wants or needs. Just like in the 90s! Rememeber how we centralized the internet? How has that backfired?". At this point this conversation, much all others that take place about bloat and spyware, has become petty crap that isn't worth my (and hopefully your) time.

anon033 05-24-2019 03:25 PM

I know there is surf from suckless which is (I believe) pure C, however personally there are issues with it such. One thing I do love about FireFox is how addons (in some respects) are done. I like that they are downloaded and run off the system as aposed to being web extensions. I would love to see a minimal browser with at most js support that has that ability. To be 100% honest 99% precent of the bloat in browsers (and other software) is due to trying to make something main stream for everyone. This means the whole (easier for the user) screws the project in about all aspects.

hydrurga 05-24-2019 03:31 PM

Quote:

Originally Posted by FOSSilized_Daemon (Post 5998591)
Anyone who can honestly look at FireFox and Mozilla and say they are not as bad as Microsoft and Google is a fan boy. They have invested in maleware, injected maleware into users browsers many times and have done even worse things than google. I guess people have to justify the crappy situation we are in. Yes, browsers need to be bloated to run all the Javascript, PHP and other crap I and many others bloat and don't use. Browsers shouldn't be bloated peices of spyware just because some web devs think "OH we should make it easier for the users by adding a crap ton of animations and bs no one wants or needs. Just like in the 90s! Rememeber how we centralized the internet? How has that backfired?". At this point this conversation, much all others that take place about bloat and spyware, has become petty crap that isn't worth my (and hopefully your) time.

Browsers don't run PHP. The servers interpret it and serve any resulting output.

Despite the truth that browsers have indeed become resource-hungry, it looks like you're having an uninformed rant. ;)

Please provide links to evidence about Mozilla's injection of "malware" into Firefox, any by "malware" I mean that something that actually does damage to your system, which is the definition of that term.

Seeing threats everywhere is just as bad as seeing threats nowhere. It means that you aren't able to discern the real threats when they happen.

anon033 05-24-2019 03:36 PM

I would, but for whatever reason:

A) people don't care or pay attention (MR. Robot, last week/month, last few years, germany etc)

B) All the blog posts and videos I had saved have been removed and idk why. I know Lunduke's got removed and then he moved it to patrion or whatever the site is called.

I have been ranting about this for sometime and with how little people seem to care it feels like telling a windows user about the keyloggers and spyware in it. I get no where and everyone gets mad. In short, not worth the effort to try to dig an archive of posts just have people wipe themselves with it tbh.

Alos, collecting ANY DATA AT ALL that I have not 100% consented to is a, well can't say it here.

Slackware_fan_Fred 05-24-2019 03:37 PM

Opera has you covered for privacy with it's free built in VPN.

anon033 05-24-2019 03:39 PM

Quote:

Originally Posted by Slackware_fan_Fred (Post 5998607)
Opera has you covered for privacy with it's free built in VPN.

I hate to be that person, but here we go. A) VPNs you didn't build aren't really something you should trust and I2P and TOR make VPNs kinda pointless. However, I don't know enough about Opera to make a real call on them. I haven't actually heard of them before and am sorta out of the loop opera wise so I will definitley check them out. Thank you for the suggestion.

hydrurga 05-24-2019 03:41 PM

Quote:

Originally Posted by FOSSilized_Daemon (Post 5998606)
I would, but for whatever reason:

A) people don't care or pay attention (MR. Robot, last week/month, last few years, germany etc)

B) All the blog posts and videos I had saved have been removed and idk why. I know Lunduke's got removed and then he moved it to patrion or whatever the site is called.

I have been ranting about this for sometime and with how little people seem to care it feels like telling a windows user about the keyloggers and spyware in it. I get no where and everyone gets mad. In short, not worth the effort to try to dig an archive of posts just have people wipe themselves with it tbh.

Alos, collecting ANY DATA AT ALL that I have not 100% consented to is a, well can't say it here.

If you can't back up your claims with evidence, and then are willing to argue about the validity of that evidence, don't rant about it. What's Germany got to do with it, anyway?

Slackware_fan_Fred 05-24-2019 03:45 PM

Quote:

Originally Posted by FOSSilized_Daemon (Post 5998610)
I hate to be that person, but here we go. A) VPNs you didn't build aren't really something you should trust and I2P and TOR make VPNs kinda pointless. However, I don't know enough about Opera to make a real call on them. I haven't actually heard of them before and am sorta out of the loop opera wise so I will definitley check them out. Thank you for the suggestion.

I never use VPN I just pointed out Opera has it built-in and because I always "hear" that a person should use vpn for privacy.


All times are GMT -5. The time now is 03:56 PM.