Posts
Cool. But…, could you name those explicitly?
Thanks for checking out! No, because it would be a PITA to keep that up to date over time, especially when rewriting for new context each time. They are covered in release notes and commit log^1^ for the curious ^^
This is a relevant example.
^1^: Can click the commit hash for a release under /releases and then xxx commits to list commits for specific release
View full thread on discuss.tchncs.de
0
1
0
Update: Readme has been updated to be less out of date and that diff list is now more closely resembling current state of differences. In particular, local full-page translations are now supported feature, unlike the readme previously stated.
View full thread on discuss.tchncs.de
0
0
0
It would certainly be nice to be able to pre-download language pair models without selecting to and from and then actually initiating a translation using the model i don’t have yet.
Agreed that would be nice. Closest you get conveniently from inside browser today is to switch temporarily to “Basic Features” preset for model downloads (then maybe restart for good measure) and switch back to “Core Security” preset for actual use.
re: getting uBlock externally, i also see the attraction of that approach but unfortunately Debian’s package was last updated in October (from 1.62 to 1.67) while AMO has a release from January (1.69) :/
I don’t think it will be directly bundled due to the list updates and some users will not want it so it should remain optional. That being said, will already be looking at packaging for NoScript so when that happens I think should be reasonable to do the same with up-to-date uBO.
are there plans to distribute Konform via flathub?
Answered this here.
Officially can’t/won’t due to Github being both unreasonable and a supply-chain risk. You or anyone else are free to do so independently, however. If done in responsible and reasonable way (don’t introduce breaking patches or leave users hanging weeks without security updates plz) would be supportive of such initiative whether done indepently or via Konform Codeberg.
View full thread on discuss.tchncs.de
0
0
0
Oh, thanks for bringing that up - it’s out of date and no longer true so I guess I do need to update the readme. While you are correct, the offline translations feature in Firefox won’t work when blocking its access to RemoteSettings. As Konform Browser does have a strict policy of not initiating connections to “trusted” servers on its own, it made more sense to remove it than leaving UI for a completely broken feature.
Since that was written:
That bug was fixed in Konform so translations do work fully offline now (if models are available locally)
An about:welcome “onboarding” screen was introduced where user has 4 presets to choose from. 3 of them (all but Purely Private 🔒️) enable translations feature and 2 (✳️Basic Functionality and 🦊Just Make It Work) enable the automatic downloads of models from Mozilla server like in FF.
So in reality I would say offline local translations actually work better in Konform than in upstream and other forks.
In the future hoping to improve this further by redistributing the models as packages for separate installation on system. Then you can use them without needing the browser itself to download anything at all. Similarly to how it’s already done for spelling dictionaries and uBlock Origin.
View full thread on discuss.tchncs.de
0
2
0
Care to comment on the actual content rather than the superficial branding? This isn’t c/logodesign? 🙄
View full thread on discuss.tchncs.de
0
2
0
While that section in readme is not entirely up to date, it’s still valid and combining that with release notes should hopefully give decent idea. Let me know if you have remaining questions after returning from those!
View full thread on discuss.tchncs.de
0
1
0
Some day, someone is going to have to explain this one…
There is a third visual reference in the logo that may be a bit less obvious.
View full thread on discuss.tchncs.de
0
2
0
LibreWolf, on the other hand, works by spoofing a different fingerprint every session.
Is that true? I think it’s not that much of a fundamental difference in strategy as you say. While LW (like MB) does randomization of e.g. WebGL and Canvas fingerprints, in general other fingerprintables are also kept static. From my perspective it’s more a difference in degrees than direction. Have you checked how your font fingerprint persist?
I believe both Mullvad Browser and LibreWolf come with uBlockOrigin pre-installed
Not exactly. LW comes without the addon but is configured to download and install uBlock Origin from addons.mozilla.org the very first thing it does. This is in contrast with Mullvad Browser (which does bundle the addon) and Konform Browser (which will load locally installed system uBO from known path if installed from distribution package manager).
If you’re looking for something to use with actual accounts (like banking), use hardened Firefox (with arkenfox) or a hardened chromium browser.
Konform Browser is intended to support that use-case and also worthy for consideration. Would be curious to hear if you agree or how you think it falls short!
View full thread on discuss.tchncs.de
0
1
0
LibreWolf doesn’t work to give you a non-unique fingerprint. Use Mullvad Browser for that (without changing anything other than the safety level).
Konform Browser also provides stronger protection against fingerprinting compared to vanilla FF or LW. Similarly (and in no small part thanks) to MB and TB.
Identification via enumeration and rendering differences of fonts is a major factor that’s often overlooked. Those three browsers bundle and enforce the same fonts and fontconfig to make that less reliable as fingerprinting method.
View full thread on discuss.tchncs.de
0
0
0
Konform Browser 140.8.0-106 - Security- and privacy oriented open source web browser
I would like to invite all of you Linux users to check out the latest release of Konform Browser.
Konform Browser is a free/libre and open-source (FLOSS) fork of Firefox with the primary goals of security, privacy, and user freedom. Hoping to be an example of how these three goals don’t have to be at odds but support each other and work in harmony. Would love to hear your feedback on if it’s in the right direction and what can be improved.
Been posting on and off the lemmies about the project during 2026. Below are major highlights since 140.8.0-103 update from a week and a half back:
Bundling and enforcing use of bundled fonts. Konform Browser now carries the same font-loading patches and bundled fonts as Tor Browser and Mullvad Browser. While this does increase download- and installation sizes, it has two clear benefits:
Significantly improved resistance against font fingerprinting used by tracking scripts. Konform Browser should now be more robust against this attack by having shared global font fingerprint.
All languages and scripts should render as expected regardless of what fonts you have installed on system.
Also bundled is now Multi-Account Containers Lite addon. It’s a debloated^1^ fork of Firefox Multi-Account Containers so you can utilize Container Tabs and set per-container proxies without installing addon for it.
While “AI chatbot” feature was already disabled and hidden by default, it was previously still possible to trigger activation of proprietary networked centralized cloudbots by setting pref browser.ml.chat.enabled=true. These have now been fully removed and replaced by a single provider utilizing locally running llamafile instance.
Ported a bunch of security fixes and improvement on fingerprinting protection from FF Rapid Release and Tor Browser which didn’t make it into upstream FF ESR.
For details and references see linked release notes. For even more details I hope the commit log is digestible.
Packages available for most Linux distributions.
AUR source package
Releases
Konform Browser is also on Mastodon where followers make me happy: https://techhub.social/@konform
^1^: Similarly as rest of Konform Browser: Removal and disabling of telemetry, analytics, ads, touting, nags (“call-to-actions”), and integrations with centralized proprietary service (Mozilla VPN in this case).
Cross-post. Original Thread @ discuss.tchncs.de/post/56107349
View on discuss.tchncs.de
65
24
1
No they do not. Where did you get this idea?
Cape say they donate a little bit to GrapheneOS development (which anyone can do; their payment information is public). That’s a not a partnership.
View full thread on discuss.tchncs.de
0
0
0
What are some of your goals, motivations, restrictions, and threat model?
Hard to give great advice without knowing more.
I would encourage to check out Konform Browser! (am dev)
It’s significantly more relevant for privacy than Firefox without compromising on functionality.
In any case a benefit of QubesOS is that you can easily use several in different AppVMs so you can mix and match. Regardless of whatever else you use I guess you will always have Tor Browser on the side to, for example.
View full thread on discuss.tchncs.de
0
0
0
Hi all!
Latest version of Konform Browser just dropped and now I come here to share with y’all about what’s been cooking.
If you are new to Konform Browser, dev writing and previously posted on Lemmy introducing the project here.
Highlights since last time:
Latest security fixes from up to most recent Firefox ESR 140.7.1.
A new welcome screen (pictured) where user can quickly choose between how private vs integrated experience they want, from a locked down “Purely Private” all the way to an unleashed “Just Make It Work” (affectionately referred to as “yolo mode”)
The “Show detailed information” link leads to a table showing exactly what settings will be impacted by each preset so user can make educated decision and understand impact before choosing.
Improvements around privacy and fingerprinting. In particular: Closed a significant vector of identity leaks and fingerprinting from unique IDs sent in Origin headers of HTTP requests by addons. This is a previously known issue (1405971) that has been considered wontfix by upstream for 6 years now.
To my knowledge, Konform Browser is the only Firefox derivative which protects against this under defaults and improves over status quo in chromium too. Attempts are being made to reach out and see if the patch can also be of interest and benefit for Tor Browser.
New user pref network.http.addonOriginBehavior can be tweaked to further change behavior and work around any breaking addons.
A future update might change default to 3 (random), which could make browser choice less fingerprintable. The current default is not set in stone and I’d be very curious about what breaks and what doesn’t if anyone plays around with this.
Now also publishing binary packages for easy installation and updates from Alpine Linux and Arch Linux package repos, alongside deb/rpm ones. All builds and releases are produced by Codeberg CI. Building from source is of course still supported.
Various improvements and fixes for optional features unlocked by “Just Make It Work” preset
There is also now a more official fedi account on Mastodon where an abbreviated version of this post is already shared with a couple of screenshots of the new onboarding: @konform@techhub.social^1^.
As always, installation and build instructions can be found from release notes and doors are open on Codeberg for issue reports and merge requests alike.
codeberg.org/konform-browser/source/releases
^1^: Still figuring out how crossposting works or doesn’t across the fedis! In case federation clients botcher the link:
https://techhub.social/@konform
Cross-post. Original Thread @ discuss.tchncs.de/post/54998565?scrollToComments=…
View on discuss.tchncs.de
0
0
0
Hi all!
Latest version of Konform Browser just dropped and now I come here to share with y’all about it what’s been cooking.
If you are new to Konform Browser, dev here and previously posted on this community introducing the project here.
Highlights since last time:
Latest security fixes from up to recently dropped Firefox ESR 140.7.1.
A new welcome screen (pictured) where user can quickly choose between how private vs integrated experience they want, from a locked down “Purely Private” all the way to an unleashed “Just Make It Work” (affectionately referred to as “yolo mode”)
The “Show detailed information” link leads to a table showing exactly what settings will be impacted by each preset so user can make educated decision and understand impact before choosing.
Improvements around privacy and fingerprinting. In particular: Closed a significant vector of identity leaks and fingerprinting from unique IDs sent in Origin headers of HTTP requests by addons. This is a previously known issue (1405971) that has been considered wontfix by upstream for 6 years now.
To my knowledge, Konform Browser is the only Firefox derivative which protects against this under defaults and improves over status quo in chromium too. Attempts are being made to reach out and see if the patch can also be of interest and benefit for Tor Browser.
New user pref network.http.addonOriginBehavior can be tweaked to further change behavior and work around any breaking addons.
A future update might change default to 3 (random), which could make browser choice less fingerprintable. The current default is not set in stone and I’d be very curious about what breaks and what doesn’t if anyone plays around with this.
Now also publishing binary packages for easy installation from Alpine Linux and Arch Linux package repos, alongside existing deb/rpm ones. Building from source is of course still supported.
Various compatibility improvements and fixes for optional features unlocked by “Just Make It Work” mode
There is also now a more official fedi account on Mastodon where an abbreviated version of this post is already shared with a couple of screenshots of the new onboarding: @konform@techhub.social. Since I couldn’t figure out how to crosspost Mastodon -> Lemmy you get me rambling here instead 😘
As always, installation and build instructions can be found from release notes and doors are open on Codeberg for issue reports and merge requests alike.
codeberg.org/konform-browser/source/releases
View on discuss.tchncs.de
0
0
1