RE: Hardening browser

2020-03-09 Thread zeurkous
Haai, "Tomasz Rola" wrote: > On Thu, Mar 05, 2020 at 12:25:56PM +0100, zeurk...@volny.cz wrote: >> > > I use lynx a lot, very nice tool. It also helped me to restart my > browsing of gopher sites. There was plenty of them 20+ years ago, now > it is just a handful of servers. But still, better

Re: Hardening browser

2020-03-08 Thread Tomasz Rola
On Sat, Mar 07, 2020 at 11:55:59AM -0700, Luke A. Call wrote: > On 03-07 19:19, whistlez...@riseup.net wrote: [...] > > As I know many sites without js doesn't work. Anyway I don't understand > > how switching off js defend you from 0day browser bug. > > Maybe you mean that because many 0day

Re: Hardening browser

2020-03-08 Thread Tomasz Rola
On Thu, Mar 05, 2020 at 12:25:56PM +0100, zeurk...@volny.cz wrote: > Me's been following this discussion w/ some interest. > > Personally, meuses lynx(1) (w/o the ports patches, as they interfere w/ > text field editing among other things), in image_links mode w/ feh(1). > Works like a charm :)

Re: Hardening browser

2020-03-07 Thread Luke A. Call
On 03-07 19:19, whistlez...@riseup.net wrote: > On Thu, Mar 05, 2020 at 07:32:36AM -0700, Luke A. Call wrote: > > I just leave javascript off for usual browsing, with a tab sitting open > > in chromium or iridium to turn it on for the occasional temporary need, > > or added to the browser's

Re: Hardening browser

2020-03-07 Thread whistlez-ml
On Thu, Mar 05, 2020 at 07:32:36AM -0700, Luke A. Call wrote: > On 03-05 04:18, Tomasz Rola wrote: > > On Wed, Mar 04, 2020 at 02:06:40AM +0100, whistlez...@riseup.net wrote: > > > Hi, > > > in the following message: > > > https://marc.info/?l=openbsd-misc=158110613210895=2 > > > Theo discourages

Re: Hardening browser

2020-03-07 Thread whistlez-ml
On Wed, Mar 04, 2020 at 03:28:35PM +, Kevin Chadwick wrote: > On 2020-03-04 11:38, Ottavio Caruso wrote: > > Probably not what you were looking for but, back in the days when I > > was ultra paranoid about my web browsing, I used to use stripped down > > live usb installations of Linux distros

Re: Hardening browser

2020-03-05 Thread whistlez-ml
On Wed, Mar 04, 2020 at 11:38:40AM +, Ottavio Caruso wrote: > On Wed, 4 Mar 2020 at 01:06, wrote: > > > > Hi, > > in the following message: > > https://marc.info/?l=openbsd-misc=158110613210895=2 > > Theo discourages to use unveil instead of chroot. > > I asked if he suggests the same for the

Re: Hardening browser

2020-03-05 Thread Luke A. Call
On 03-05 04:18, Tomasz Rola wrote: > On Wed, Mar 04, 2020 at 02:06:40AM +0100, whistlez...@riseup.net wrote: > > Hi, > > in the following message: > > https://marc.info/?l=openbsd-misc=158110613210895=2 > > Theo discourages to use unveil instead of chroot. > > I asked if he suggests the same for

RE: Hardening browser

2020-03-05 Thread zeurkous
Me's been following this discussion w/ some interest. Personally, meuses lynx(1) (w/o the ports patches, as they interfere w/ text field editing among other things), in image_links mode w/ feh(1). Works like a charm :) Mecan only agree with the sentiment that if something does not work in a

Re: Hardening browser

2020-03-04 Thread Tomasz Rola
On Thu, Mar 05, 2020 at 04:18:00AM +0100, Tomasz Rola wrote: [...] > As a side note, I sometimes get a bit obsessed upon seeing a program > which "sits idle" but scratches my disk every n seconds (and/or loads > my cpu with empty loops). A daemon can be hunted down and nailed. No > big deal. But a

Re: Hardening browser

2020-03-04 Thread Tomasz Rola
On Wed, Mar 04, 2020 at 02:06:40AM +0100, whistlez...@riseup.net wrote: > Hi, > in the following message: > https://marc.info/?l=openbsd-misc=158110613210895=2 > Theo discourages to use unveil instead of chroot. > I asked if he suggests the same for the browser but he asked that chroot > is onlye

Re: Hardening browser

2020-03-04 Thread Luke A. Call
On 03-04 12:03, Luke A. Call wrote: > Partly as a possible approach, and partly for feedback/suggestions on > it: [] > multiple user logins and their corresponding X sessions running > at the same time, among which I would switch with Ctrl-Alt-F* keys, > hoping that if one account (where I

Re: Hardening browser

2020-03-04 Thread Luke A. Call
On 03-04 02:06, whistlez...@riseup.net wrote: > in the following message: > https://marc.info/?l=openbsd-misc=158110613210895=2 > Theo discourages to use unveil instead of chroot. > I asked if he suggests the same for the browser but he asked that chroot > is onlye for *root*. > Then what should I

Re: Hardening browser

2020-03-04 Thread Kevin Chadwick
On 2020-03-04 11:38, Ottavio Caruso wrote: > Probably not what you were looking for but, back in the days when I > was ultra paranoid about my web browsing, I used to use stripped down > live usb installations of Linux distros (DSL was one of them that I > remember). I ignore if OpenBSD comes with

Re: Hardening browser

2020-03-04 Thread Ottavio Caruso
On Wed, 4 Mar 2020 at 01:06, wrote: > > Hi, > in the following message: > https://marc.info/?l=openbsd-misc=158110613210895=2 > Theo discourages to use unveil instead of chroot. > I asked if he suggests the same for the browser but he asked that chroot > is onlye for *root*. > Then what should I

Re: Hardening browser

2020-03-04 Thread Kevin Chadwick
On 2020-03-04 01:06, whistlez...@riseup.net wrote: > in the following message: > https://marc.info/?l=openbsd-misc=158110613210895=2 > Theo discourages to use unveil instead of chroot. > I asked if he suggests the same for the browser but he asked that chroot > is onlye for *root*. I thought that

Hardening browser

2020-03-03 Thread whistlez-ml
Hi, in the following message: https://marc.info/?l=openbsd-misc=158110613210895=2 Theo discourages to use unveil instead of chroot. I asked if he suggests the same for the browser but he asked that chroot is onlye for *root*. Then what should I do to hardening the most exposed piece of code that