Is Chromium safe?

If none of the more specific forums is the right place to ask

Re: Is Chromium safe?

Postby MagicPoulp » 2019-03-14 10:49

Probably because they try to do very unstable things with the graphics card. And certain graphics card or drivers would not support it.

Chrome got a lot of popularity because it was known to be faster than other browsers.
MagicPoulp
 
Posts: 197
Joined: 2018-11-05 21:30

Re: Is Chromium safe?

Postby shep » 2019-03-14 15:16

Maybe Chromium is save, but why then did it freeze my system like I described in a earlier post? Chrome didn't do that ever, just Firefox and only once.


You may be able to mitigate some of this behavior. Under settings Advanced: Disable anything that sends data to Google/Web services, web cam access, microphone access, resolution of navigation errors, payment methods, content settings, and the ability to run background apps when chrome is closed.

The iridium project essentially tries to remove all these features from chromium source.

https://iridiumbrowser.de/

Unfortunately, they develop deb packages in Ubuntu and the debian packages have not worked, without backporting libfontconfig, for some time.
shep
 
Posts: 306
Joined: 2011-03-15 15:22

Re: Is Chromium safe?

Postby Head_on_a_Stick » 2019-03-14 18:56

MagicPoulp wrote:
Head_on_a_Stick wrote:...which includes `rm -rf`


How can such a system be considered secured?

Security is assured by APT's insistence on authenticating the repositories: https://wiki.debian.org/SecureApt

This is in contrast to, for example, Arch Linux wherein the AUR packages can be installed without any checks at all.
User avatar
Head_on_a_Stick
 
Posts: 10382
Joined: 2014-06-01 17:46
Location: /dev/chair

Re: Is Chromium safe?

Postby No_windows » 2019-03-14 20:29

debiandonder wrote:My thought exactly! How can one program freeze a whole system in this day and age?


I assume by tying up resources... that happens on my old laptop all the time. Sometimes it's only the browser, other times everything stalls.
No_windows
 
Posts: 465
Joined: 2015-08-05 03:03

Re: Is Chromium safe?

Postby MagicPoulp » 2019-03-15 09:05

Head_on_a_Stick wrote:
MagicPoulp wrote:
Head_on_a_Stick wrote:...which includes `rm -rf`


How can such a system be considered secured?

Security is assured by APT's insistence on authenticating the repositories: https://wiki.debian.org/SecureApt

This is in contrast to, for example, Arch Linux wherein the AUR packages can be installed without any checks at all.


Install scripts or scriptlets are not always used. I don't udnerstand why there is not an option to install packages while disabling install scripts, or making sure no install scripts is used.

On Windows, a program install cannot do whatever it wants ever with root priviledges (UAC). Sorry for the reference to Windows. Maybe I don't understand why it must be the way it is on linux.
MagicPoulp
 
Posts: 197
Joined: 2018-11-05 21:30

Re: Is Chromium safe?

Postby debiandonder » 2019-03-15 16:51

No_windows wrote:
debiandonder wrote:My thought exactly! How can one program freeze a whole system in this day and age?


I assume by tying up resources... that happens on my old laptop all the time. Sometimes it's only the browser, other times everything stalls.


That is true and I have had that before. When the browser started acting up and consumed all my 8 gigs of RAM and started to use the SWAP file. Everything slowed down to slow motion. I was able to close the program in the system monitor and everything returned to normal.

The last incident I had was with Chromium 72, latest version in the Debian repository. IT completely froze everything solid. Later I switched to Chrome 73 and no problem.

I am using the latest version of Firefox 65 now and so far so good.
debiandonder
 
Posts: 128
Joined: 2019-02-11 17:22

Re: Is Chromium safe?

Postby Head_on_a_Stick » 2019-03-15 19:15

MagicPoulp wrote:Install scripts or scriptlets are not always used. I don't udnerstand why there is not an option to install packages while disabling install scripts, or making sure no install scripts is used.

Because any install scripts that are provided are usually necessary for the package to work correctly.

And as I already mentioned systemd unit files can also be used maliciously and will be enabled and started automatically by APT so that wouldn't remove the risk completely.

MagicPoulp wrote:On Windows, a program install cannot do whatever it wants ever with root priviledges (UAC).

That's because Windows users don't have official package repositories from which software can be safely installed so they end up downloading software from random websites, which is *very* risky indeed. And I think most users just click away the UAC crap without even reading it...

MagicPoulp wrote:Maybe I don't understand why it must be the way it is on linux.

Doug Gwyn wrote:UNIX was not designed to stop its users from doing stupid things, as that would also stop them from doing clever things.
User avatar
Head_on_a_Stick
 
Posts: 10382
Joined: 2014-06-01 17:46
Location: /dev/chair

Re: Is Chromium safe?

Postby debiandonder » 2019-03-17 16:42

Great! Debian 9 froze again today and this time it was 0 A.D. Last week it was chromium.

Solid freeze, no input devices work.

Ubuntu did not freeze that much.

Simple setup, with no graphics card and only using opensource drivers.
debiandonder
 
Posts: 128
Joined: 2019-02-11 17:22

Re: Is Chromium safe?

Postby Head_on_a_Stick » 2019-03-17 17:21

https://packages.debian.org/stretch/memtester?

Sounds like a hardware problem to me.

Or mixed sources.
User avatar
Head_on_a_Stick
 
Posts: 10382
Joined: 2014-06-01 17:46
Location: /dev/chair

Re: Is Chromium safe?

Postby stevepusser » 2019-03-17 19:05

shep wrote:
Maybe Chromium is save, but why then did it freeze my system like I described in a earlier post? Chrome didn't do that ever, just Firefox and only once.


You may be able to mitigate some of this behavior. Under settings Advanced: Disable anything that sends data to Google/Web services, web cam access, microphone access, resolution of navigation errors, payment methods, content settings, and the ability to run background apps when chrome is closed.

The iridium project essentially tries to remove all these features from chromium source.

https://iridiumbrowser.de/

Unfortunately, they develop deb packages in Ubuntu and the debian packages have not worked, without backporting libfontconfig, for some time.


The MX 17 Linux version is built on and should work with vanilla Stretch, ASFAIK:

http://mxrepo.com/mx/repo/pool/main/i/iridium-browser/

You can see from the size of the source why I'm a bit reluctant to burden the OBS with a separate build, but anyone else is welcome to give it a go. It needs a lot of RAM to build, I seem to remember--the OBS uses eight threads by default.
The MX Linux repositories: Backports galore! If we don't have something, just ask and we'll try--we like challenges. New packages: Calibre 3.48.0, QMPlay2 19.09.03, wine-staging 4.16, Telegram-desktop 1.8.8, Pale Moon 28.7.1, Waterfox 56.2.14
User avatar
stevepusser
 
Posts: 11098
Joined: 2009-10-06 05:53

Re: Is Chromium safe?

Postby debiandonder » 2019-03-17 21:10

Head_on_a_Stick wrote:https://packages.debian.org/stretch/memtester?

Sounds like a hardware problem to me.

Or mixed sources.


The thing is that both programs that froze my system came from the Debian stable repository. I will try the 0 A.D. from he backports version that's more up to date.
debiandonder
 
Posts: 128
Joined: 2019-02-11 17:22

Re: Is Chromium safe?

Postby Head_on_a_Stick » 2019-03-17 21:12

It won't matter which program you run if the problem is a broken memory chip.
User avatar
Head_on_a_Stick
 
Posts: 10382
Joined: 2014-06-01 17:46
Location: /dev/chair

Re: Is Chromium safe?

Postby debiandonder » 2019-03-17 21:48

Head_on_a_Stick wrote:It won't matter which program you run if the problem is a broken memory chip.


Might be, but it doesn't seem to be broken when I use Chrome instead of Chromium.
debiandonder
 
Posts: 128
Joined: 2019-02-11 17:22

Re: Is Chromium safe?

Postby Head_on_a_Stick » 2019-03-17 21:56

Faults caused by broken memory chips are intermittent in nature, run the memtester program to which I linked earlier.
User avatar
Head_on_a_Stick
 
Posts: 10382
Joined: 2014-06-01 17:46
Location: /dev/chair

Re: Is Chromium safe?

Postby debiandonder » 2019-03-17 23:43

Head_on_a_Stick wrote:Faults caused by broken memory chips are intermittent in nature, run the memtester program to which I linked earlier.


I installed the memtester program from the package manager, but can't find it anywhere. The previous distro had a boot loader with that function but I only have Debian now and have overwritten Windows 7.

How to I access that program?
debiandonder
 
Posts: 128
Joined: 2019-02-11 17:22

PreviousNext

Return to General Questions

Who is online

Users browsing this forum: No registered users and 9 guests

fashionable
cron