• LWD@lemm.ee
    link
    fedilink
    arrow-up
    33
    ·
    edit-2
    2 days ago

    BTW: “this guy” on PrivacyTests is Brave Browser’s Senior Research and Privacy Engineer, Arthur Edelstein.

    You wouldn’t know this unless you looked through multiple pages on multiple sites, especially when his coworker doesn’t disclose this when praising his website, but it’s worth noting.

    • Sophocles@infosec.pub
      link
      fedilink
      arrow-up
      11
      ·
      2 days ago

      Littetally. I found it fishy that Brave suspiciously scored so well. Half of those browsers are just modified Chromium anyway including Brave, and Brave has made some suspicious marketing decisions which is why I dont really trust them. If you’re curious look into their history involving crypto and advertising.

      The only good ones I’d recomend are Librewolf, Mullvad Browser, and Tor. They’re really the only ones that even try to combat fingerprinting.

    • madame_gaymes@programming.dev
      link
      fedilink
      English
      arrow-up
      5
      ·
      edit-2
      2 days ago

      Yep, written before Mozilla’s latest move, and doesn’t even mention EFF’s Cover Your Tracks or CreepJS for fingerprint testing. Just some vague descriptor of “Browser Privacy Test”, which they have provided no links or details on.

      They also just claim Tor is the penultimate privacy browser, when it isn’t. Doesn’t even mention that exit nodes around the whole world can be run by anyone, including 3-letter agencies and bad actors. I don’t trust the testing of whoever this is, seems kinda lazy and doesn’t cover all the angles that need to be covered when it comes to browsers.

  • LittleBobbyTables@lemmy.sdf.org
    link
    fedilink
    English
    arrow-up
    2
    ·
    2 days ago

    The downside is that Waterfox is based on Firefox ESR (Extended Support Release) builds, rather than the main Firefox branch.

    ESR builds are actually less secure than regular Firefox because they receive security updates more slowly.

    How accurate is this, exactly? I was under the impression that Firefox ESR is akin to something like the LTS Linux kernel. That is to say, sure, it doesn’t receive fancy new features as soon as they release, but surely it still receives important security updates in a timely manner.