News for hackers. Stuff that matters.
Re:My next main browser: a review of Orion by d3nj4l on Thursday March 10, 2022 @02:35AM (#30624183)
Idk if this is a good thing or a bad thing, but a browser is one of those things where I simply am not comfortable trying out options that aren't big or well known. At this point, the browser is essentially a window into my entire life, and I do things like check my bank balance on it. While Google isn't a trustworthy company by any means, I can be reasonably certain they aren't looking into what I'm doing. So trying out a new, closed source browser - even if it is as great as everyone makes it seem - is a bit too much for me.
Re:My next main browser: a review of Orion by hansel_der on Thursday March 10, 2022 @04:07AM (#30624824)
> While Google isn't a trustworthy company by any means, I can be reasonably certain they aren't looking into what I'm doing.

I'd take it for granted that google is sucking up every bit they can get from you.

Re:My next main browser: a review of Orion by d3nj4l on Thursday March 10, 2022 @04:17AM (#30624895)
Like my bank balance? If you have proof of that, I'd love to see it.
Re:My next main browser: a review of Orion by kernelsanderz on Thursday March 10, 2022 @06:39AM (#30625813)
well, apparently in 2018 Google signed a secret deal with Mastercard sharing credit card payment information to do offline tracking of sales that originated from their ads. source: https://www.bloomberg.com/news/articles/2018-08-30/google-an...

and they did this, even if you told them not to track you.

Re:My next main browser: a review of Orion by prohobo on Thursday March 10, 2022 @04:47AM (#30625086)
They probably don't need to, and can profile your economic status through indirect means.

Not that I know they're doing that, just that they definitely can get the gist of what and how you're doing with their tracking algorithms.

Re:My next main browser: a review of Orion by idontwantthis on Thursday March 10, 2022 @04:54AM (#30625123)
If you don't think there's a big difference between "indirect means" and literally examining bank records then please try this new browser I just invented.
Re:My next main browser: a review of Orion by indymike on Thursday March 10, 2022 @05:58AM (#30625537)
Hmm. If you have gmail, they are parsing your overdraft notices so they can max out ad revenue from overpriced loan vendors.
Re:My next main browser: a review of Orion by kmlx on Thursday March 10, 2022 @07:25AM (#30626135)
this hasn’t been a thing since 5 years ago:

https://www.theverge.com/2017/6/23/15862492/google-gmail-adv...

Re:My next main browser: a review of Orion by kube-system on Thursday March 10, 2022 @10:45AM (#30628185)
Google scrapes/buys some financial data. Check out “Payments & subscriptions” under “Google Account Activity”.

They’re an ad-tech company. Calculating conversion rates is part of their business.

Re:My next main browser: a review of Orion by stavros on Thursday March 10, 2022 @05:32AM (#30625333)
Do you get statements by email?
Re:My next main browser: a review of Orion by cpach on Thursday March 10, 2022 @07:16AM (#30626066)
Are there banks that send out statements by email…?

If so… wow.

Re:My next main browser: a review of Orion by statictype on Thursday March 10, 2022 @07:22AM (#30626113)
Are there banks that don't? I haven’t come across a bank (in South Asia at least) that didn't have the option (and encourage you to use it) to receive statements as password protected pdfs.
Re:My next main browser: a review of Orion by josephg on Thursday March 10, 2022 @07:38AM (#30626224)
Here in Australia, I get an email when I have a new statement ready. I have to log in to their website to download the PDF. Its pretty annoying, but I suppose it keeps me safe from things like this.
Re:My next main browser: a review of Orion by cpach on Thursday March 10, 2022 @08:47AM (#30626815)
Similar to the system that my bank in Sweden uses.
Re:My next main browser: a review of Orion by marlowe221 on Thursday March 10, 2022 @10:30AM (#30627989)
American here. This is what my bank does as well. No account statements sent directly via email.
Re:My next main browser: a review of Orion by groby_b on Thursday March 10, 2022 @09:39AM (#30627392)
A password protected pdf has an important characteristic your e-mail doesn't.
Re:My next main browser: a review of Orion by cmiles74 on Thursday March 10, 2022 @08:44AM (#30626785)
My bank statements still come in the mail, I live in the eastern US. ;-)
Re:My next main browser: a review of Orion by dmd on Thursday March 10, 2022 @08:57AM (#30626922)
... most of them?
Re:My next main browser: a review of Orion by brimble on Thursday March 10, 2022 @10:44AM (#30628173)
If there's not a law to prevent it, I'd assume banks sell your balance info anyway.
Re:My next main browser: a review of Orion by perryizgr8 on Thursday March 10, 2022 @07:31AM (#30626169)
Google has a pretty good idea of your household income, among a huge load of other things. Go check the "Ad personalisation" page in your google account settings.
Re:My next main browser: a review of Orion by sam0x17 on Thursday March 10, 2022 @08:47AM (#30626819)
They can literally deduce it from all your invoice and payment confirmation emails for every online thing you've ever got + bank statements.
Re:My next main browser: a review of Orion by CJefferson on Thursday March 10, 2022 @04:21AM (#30624924)
I agree -- also, in my (limited) experience, keeping a modern browser up to date security-wise is a major undertaking. They talk about forking WebKit -- how well are they doing at keeping that fork up to date, when 0-days appear worryingly often in modern browsers?
Re:My next main browser: a review of Orion by Cannabat on Thursday March 10, 2022 @05:08AM (#30625201)
Orion is usually ahead of Safari as it has a much faster release cycle and uses the latest Webkit version. I understand there was a bug in a recent webkit release so Orion rolled back to the previous webkit release - but besides situations like this, Orion uses the current webkit.
Re:My next main browser: a review of Orion by 1vuio0pswjnm7 on Thursday March 10, 2022 @05:08AM (#30625203)
Thought experiment: What if there was one browser to use for the "serious" interactions with the web and another, or several, to use for non-serious, recreational uses of the web. The later might not even be a browser, it might, e.g., be a small utility to download content that can be consumed offline. Arguably the title hints at this idea with its inclusion of the adjective "main".

This is not a thought experiment for me. I have actually approached the web this way for many years now. Using a single program for 100% of web use has become unthinkable.

Re:My next main browser: a review of Orion by bityard on Thursday March 10, 2022 @05:42AM (#30625418)
I am in 100% agreement. The best tools have enough power and flexibility built-in that they end up serving use cases that the authors never dreamed of. Meanwhile, these days when developers attempt to write a piece of software that's everything to everyone, they only end up satisfying the most basic possible use cases because anything more would cause distraction and/or intimidate the users away from their product. Those who want to actually harness the power of what's possible with software are left out.

If Vim and Emacs were released as new projects today, most of HN would roll their eyes and complain that neither is "opinionated" or "minimal" enough to rely on for serious work, and let's not even get started on the lack of built-in GPU accelerated text rendering...

Re:My next main browser: a review of Orion by 1vuio0pswjnm7 on Thursday March 10, 2022 @08:23AM (#30626584)
"("using the API of local services" seems to be an ongoing theme, one of my favourite things is to use secret undocumented APIs where you need to copy your cookies out of the browser to get access to them)"

The aboove is from another submission's comment thread currently on HN front page.^1 Not everything can be done satisfactorily within the browser. Other (smaller) programs are useful. In the later case, the programs are not supported by online advertising.

1. https://jvns.ca/blog/2022/03/08/tiny-programs/

Re:My next main browser: a review of Orion by npteljes on Thursday March 10, 2022 @08:54AM (#30626890)
I do something similar. I have a "hardened" main browser for my serious stuff and everyday browsing needs, and I have a Chromium+uBlock install, which I mainly use in Incognito mode, for sites that break in the "hardened" configuration.
Re:My next main browser: a review of Orion by samizdis on Thursday March 10, 2022 @11:12AM (#30628534)
A perfectly reasonable/sensible point. If you're like me, though, and want to test-drive a browser for the hell of it, you might do your banking, shopping, flight reservations etc using your usual browser, and just use Orion for general info/entertainment surfing. A bit like driving an ordinary car for the daily urban grind, but riding a motorbike out in the countryside at the weekend.

Edit to add: yes, I realise that Orion wouldn't be your "main" browser, with just the casual usage I envisage, but it could be interesting - and maybe, if it eventually takes off and earns a rep for privacy/security, you (and/or I) might feel sufficiently informed to make the switch. I guess I feel that the browser space lacks choice/variety atm.

Re:My next main browser: a review of Orion by imbnwa on Thursday March 10, 2022 @03:38PM (#30632126)
This is exactly what I do
Re:My next main browser: a review of Orion by freediver on Thursday March 10, 2022 @10:38AM (#30628100)
Orion solves the question of trust by being a zero telemetry browser by default.

If a single byte of unwanted information ever leaves Orion (and this is easily detectable with any network proxy), that would spell the end of Orion's credibility.

Re:My next main browser: a review of Orion by maven29 on Thursday March 10, 2022 @05:19AM (#30625255)
A web browser is more than just for webapps. You don't have to use the same web browser for everything.

Surely there is a case to be made for a web browser that caters to a need for focused reading, where a quick context switch to logged-in sessions wouldn't be something you would appreciate having.

At that point, you wouldn't need much of the fancy javascript served to you, and can trivially cut down on attack surface with minor sacrifice.

Re:My next main browser: a review of Orion by lucideer on Thursday March 10, 2022 @05:37AM (#30625381)
> While Google isn't a trustworthy company by any means, I can be reasonably certain they aren't looking into what I'm doing.

In what way are Google not a trustworthy company in your view?

Expecting that they'll be looking into what I'm doing is exactly what leads me to consider them untrustworthy so I'm just curious what else you're thinking of.

Re:My next main browser: a review of Orion by stuu99 on Thursday March 10, 2022 @05:51AM (#30625474)
>In what way are Google not a trustworthy company in your view?

Google "snowden nsa revelations" see all the companies sucking up all your data, the NSA and google and all the tech commpanies have removed everyones privacy. It's called "total information awareness".

Re:My next main browser: a review of Orion by dewey on Thursday March 10, 2022 @06:03AM (#30625578)
I thought the outcome of these leaks were that Google realized that the NSA is tapping into their data and dark fiber and started encrypting these?
Re:My next main browser: a review of Orion by lioeters on Thursday March 10, 2022 @07:58PM (#30634849)
Re:My next main browser: a review of Orion by scientism on Thursday March 10, 2022 @07:19AM (#30626092)
Adtech and to a large extent Google are untrustworthy by definition. Read above about the Mastercard-Google deal, here is a non-paywall source https://www.warc.com/newsandopinion/news/google-and-masterca...

That's only the tip of the iceberg.

Re:My next main browser: a review of Orion by coffeeblack on Thursday March 10, 2022 @05:04AM (#30625172)
And the same applies to browser extensions.
Re:My next main browser: a review of Orion by kkjjkgjjgg on Thursday March 10, 2022 @03:53AM (#30624731)
Did you mean to say "I can be reasonably certain they are looking into what I'm doing"?
Re:My next main browser: a review of Orion by d3nj4l on Thursday March 10, 2022 @03:58AM (#30624760)
That's funny, but Google has extremely powerful incentives to not snoop on me while I check my bank balance.
Re:My next main browser: a review of Orion by mekster on Thursday March 10, 2022 @04:32AM (#30625005)
If your definition of being snooped on is whether confidential information is leaked or nothing is happening, that is short sighted.

Google analytics is ubiquitous and you're tracked to your bones especially if you're logged into your Google account and while they don't read your Gmail email content, they put you in the social graph according to any email address or URL in your email and they have better idea about your past more than you do.

I still use Google search as there aren't better alternatives but I never use Gmail nor Chrome as I have plenty of alternatives for those.

Re:My next main browser: a review of Orion by d3nj4l on Thursday March 10, 2022 @04:40AM (#30625053)
I'm not happy about tracking (I personally use Firefox + uBlock) but with the state of the web as is, I'll settle for the browser not stealing confidential info, thanks.
Re:My next main browser: a review of Orion by d110af5ccf on Thursday March 10, 2022 @06:06AM (#30625595)
> while they don't read your Gmail email content

Depends on what you mean by "read". Google (and MS, and likely others) certainly parse the content. For example pulling out times for upcoming flights you've booked without you needing to click into the email.

Obviously I have no way to know if they actually do anything else internally with the result of parsing. I have to assume that they do though.

Re:My next main browser: a review of Orion by kkjjkgjjgg on Thursday March 10, 2022 @04:22AM (#30624929)
Are they committed to not snooping, or just to trying to not do something too outrageous or obvious with the data they gather?
Re:My next main browser: a review of Orion by hansel_der on Thursday March 10, 2022 @04:08AM (#30624829)
like what?
Re:My next main browser: a review of Orion by d3nj4l on Thursday March 10, 2022 @04:19AM (#30624906)
Chrome's entire reason for existing is that Google wants control over the client, so they can control the capabilities of the web. If they are snooping on the data of webpages or what you type, they will lose that. Also the fact that millions of eyeballs are on it, including security researchers who would be more than happy to report it.
Re:My next main browser: a review of Orion by gigel82 on Thursday March 10, 2022 @12:02PM (#30629229)
There are dozens of "phone home" features in Chrome that by default leak everything from what you type to every single url you visit. Check out https://github.com/Eloston/ungoogled-chromium to see the extent of patching they need to do to shut some of those pipes off.
Re:My next main browser: a review of Orion by ipaddr on Thursday March 10, 2022 @09:01AM (#30626965)
They are doing it now. Maybe this comment needs to go back to 2011 when no one knew better.