💾 Archived View for bbs.geminispace.org › u › norayr › 14276 captured on 2024-08-18 at 21:19:04. Gemini links have been rewritten to link to archived content
⬅️ Previous capture (2024-07-09)
-=-=-=-=-=-=-
Re: "How do you install your Internet browsers?"
i just have this general trust in repository software. i believe it is much much harder to have malicious code in them, than in, of course, let's say nodejs or rust repos. and in waterfox tar.gz binary files that i was downloading.
and sometimes, when i have no other choice than to try something binary, i try it from chroot, or at least from other user.
i became paranoid a little bit too much than it worth it, after using waterfox, and rebuilt every single package i had. though i only ran waterfox as user, but i thought, well, maybe it used some vulnerability to get root privileges and contaminate something in the system. well i realized that's not probable. but still rebuilt everything.
Jan 23 · 7 months ago
1. Download binaries and place them in a standard path for programs
██▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 8%
2. Download binaries and place them in a custom path
██▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 10%
3. Download installer pack
███▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 12%
4. Via repository
████████████▁▁▁▁▁▁▁▁▁▁▁▁ 50%
5. Via flatpak
██▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 8%
6. Via snap
█▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 5%
7. Via AppImage
█▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 3%
8. Download source and compile
█▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ 3%
60 votes were cast.
🐙 norayr · 2024-01-23 at 13:06:
and if it contaminated the compiler - it would not save me anyway, since the contaminated compiler would compile malicious code in to newer binaries.
— see compiler backdoor section.
LibreWolf is apparently still not available on Ubuntu Jammy repositories (long-time Kubuntu user here), so I install the AppImages on my $HOME, sometimes also wrap them around "firejail --private=<dir> --appimage" for a bit of extra security.
🌧️ miragearchitect · 2024-01-25 at 06:57:
I add it to the nixos config...
📷 sjlxndr · 2024-01-25 at 17:48:
"via repository" but sometimes that means manually adding repositories, not just the OS defaults
🐙 norayr · 2024-01-30 at 01:00:
librewolf is surprisingly lightweight.
How do you install your Internet browsers?