

Security and sandboxing are important, weak points on the android implementation.
Waddup?! I run the orbi.camp lemmy instance on my over engineered homelab. #selfhosting
Security and sandboxing are important, weak points on the android implementation.
Main reason I don’t is cuz:
Avoid Gecko-based browsers like Firefox as they’re currently much more vulnerable to exploitation and inherently add a huge amount of attack surface. Gecko doesn’t have a WebView implementation (GeckoView is not a WebView implementation), so it has to be used alongside the Chromium-based WebView rather than instead of Chromium, which means having the remote attack surface of two separate browser engines instead of only one. Firefox / Gecko also bypass or cripple a fair bit of the upstream and GrapheneOS hardening work for apps. Worst of all, Firefox does not have internal sandboxing on Android. This is despite the fact that Chromium semantic sandbox layer on Android is implemented via the OS isolatedProcess feature, which is a very easy to use boolean property for app service processes to provide strong isolation with only the ability to communicate with the app running them via the standard service API. Even in the desktop version, Firefox’s sandbox is still substantially weaker (especially on Linux) and lacks full support for isolating sites from each other rather than only containing content as a whole. The sandbox has been gradually improving on the desktop but it isn’t happening for their Android browser yet.
nottheopbutok
Yeah, we all know that. OP was saying that Humane Pin doesn’t even have that capability.
What? The link you posted didn’t even say that. Just to avoid if your not an advance user. They literally have a page explaining benefits…
Lmao. Unfortunately I live in the USA.
You can be there and on smaller ones too, dude.
What if you work remote and live in an apartment building without plugs???
Well, feeling glad I already strip the DRM for my backups last month. Not buying anymore from em at all.
No kidding. Really tried using it for a month. But it was just terrible interfacing with it.
Running opnsense here and just plain having my own firewall is the coolest thing.
Worth it for the awesome work GrapheneOS devs have done. Heck, buy used.
Pixel is just one of the safest android phones in terms of hardware security.
Fedora here and loving the switch from big tech.
Or at least as an assistant on a field your an expert in. Love using it for boilerplate at work (tech).
Well, appreciate the headsup. The battle is always staying informed.
While at it, any recommended alternatives to ProtonMail?
Ah, does Duckduckgo not do that too anymore? I thought there wasn’t a fully independent search engine.
Ah, so Duckduckgo leadership is still the only one in thr clear?
GrapheneOS is awesome, wish more phones had it. Has really brought a feeling of control wity my phone. Just kind of ironic wearing the Google logo on the back lmao
Plug for https://kagi.com/ for those who can afford to pay for search engine. Best search engine experience, love the personalized results where you manually raise and lower specific domains.
Other security implications are stilp valid.