According to Grapheneos mod on Grapheneos discuss, the attack is unpreventable on vanadium (if I’m reading this right):
"Reducing the number of ads by blocking known patterns does not completely eliminate ads or especially overall third party content. Third party content can also be included server side.
Vanadium has default enabled ad blocking so adding DNS filtering won’t generally improve much for the default browser. The in-browser filtering can block more than DNS filtering."
As I understand it, the whole supposed reasoning for Vanadium to not have a strict addblocker (like Mozilla) is so that it will be identified by internet systems to appear as chromium and move smoother. I find more sites work on vanadium (for me) than on ironfox.
But now it seems all JavaScript advertisemens are a liability.
Are we at the point where we need a set up where java should almost always be off?
Are we at the point where we need a set up where java should almost always be off?
I think so, if you are vigilant about your privacy. That’s what I’ve been doing for the past decade. I use uMatrix with IronFox configured with everything off by default, and I manually approve page elements. Occasionally it slows me down when filling out forms I need or something, but generally it’s fine.
I think uMatrix cannot be used with Vanadium. I would personally recommend IronFox over Vanadium. GrapheneOS devs have recommended avoiding Firefox browsers in the past, but that may have changed ever since Firefox added per-site isolation to Android.
This is why extensions like noscript are essential
Came here to say this, no script slows me down sometimes, but I’m sure it saved me a lot more than it’s inconvenience me, especially with this no click bullshit going around.
