From c062d8374c0aec5d05e6fe8702ca97e37f2b6dd4 Mon Sep 17 00:00:00 2001 From: Daniel Gray Date: Mon, 8 Apr 2024 10:58:32 +0000 Subject: [PATCH] Add Mull (Mobile Browser) #2460 --- docs/device-integrity.md | 2 +- docs/mobile-browsers.md | 51 ++++++++++++++++++++++++---- docs/tools.md | 1 + theme/assets/img/browsers/mull.webp | Bin 0 -> 3926 bytes 4 files changed, 46 insertions(+), 8 deletions(-) create mode 100644 theme/assets/img/browsers/mull.webp diff --git a/docs/device-integrity.md b/docs/device-integrity.md index 0501a602ea..d9aa70b70d 100644 --- a/docs/device-integrity.md +++ b/docs/device-integrity.md @@ -206,7 +206,7 @@ Using these apps is insufficient to determine that a device is "clean", and not
Downloads -- [:simple-android: F-Droid](https://f-droid.org/packages/us.spotco.malwarescanner) +- [:simple-fdroid: F-Droid](https://f-droid.org/packages/us.spotco.malwarescanner)
diff --git a/docs/mobile-browsers.md b/docs/mobile-browsers.md index 128224a73d..69c36cf84d 100644 --- a/docs/mobile-browsers.md +++ b/docs/mobile-browsers.md @@ -40,8 +40,6 @@ These are our currently recommended mobile web browsers and configurations for s ## Android -On Android, Firefox is still less secure than Chromium-based alternatives: Mozilla's engine, [GeckoView](https://mozilla.github.io/geckoview), has yet to support [site isolation](https://hacks.mozilla.org/2021/05/introducing-firefox-new-site-isolation-security-architecture) or enable [isolatedProcess](https://bugzilla.mozilla.org/show_bug.cgi?id=1565196). - ### Brave
@@ -130,6 +128,45 @@ Brave allows you to select additional content filters within the internal `brave [Brave Sync](https://support.brave.com/hc/articles/360059793111-Understanding-Brave-Sync) allows your browsing data (history, bookmarks, etc.) to be accessible on all your devices without requiring an account and protects it with E2EE. +### Mull + +
+

Danger

+ +Firefox (Gecko)-based browsers on Android [lack per-site process isolation](https://bugzilla.mozilla.org/show_bug.cgi?id=1565196), a powerful security feature that offers additional protection against a malicious website exploiting a security vulnerability. Missing this feature likely won't pose an issue for low-risk web browsers who keep their browser up-to-date, but those visiting higher-risk sites or at risk of targeted/0-day attacks should strongly consider a Chromium-based browser like [Brave](#brave) instead. + +
+ +
+ +![Mull logo](assets/img/browsers/mull.webp){ align=right } + +**Mull** is a privacy oriented and deblobbed Android browser based on Firefox. Compared to Firefox, it offers much greater fingerprinting protection out of the box, and disables JavaScript Just-in-Time (JIT) compilation for enhanced security. It also removes all proprietary elements from Firefox, such as replacing Google Play Services references. + +[:octicons-home-16: Homepage](https://divestos.org/pages/our_apps#mull){ .md-button .md-button--primary } +[:octicons-eye-16:](https://divestos.org/pages/privacy_policy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://divestos.org/pages/browsers#tuningFenix){ .card-link title=Documentation } +[:octicons-code-16:](https://codeberg.org/divested-mobile/mull-fenix){ .card-link title="Source Code" } + +
+Downloads + +- [:simple-fdroid: F-Droid](https://f-droid.org/en/packages/us.spotco.fennec_dos/) + +
+ +
+ +Enable DivestOS's [F-Droid Repo](https://divestos.org/fdroid/official/) to receive updates directly from the developer. Downloading Mull from the default F-Droid repo will mean your updates could be delayed by a few days or longer. + +Mull enables many features upstreamed by the [Tor uplift project](https://wiki.mozilla.org/Security/Tor_Uplift) using preferences from [Arkenfox](desktop-browsers.md#arkenfox-advanced). Proprietary blobs are removed from Mozilla's code using the scripts developed for Fennec F-Droid. + +#### Recommended Mull Configuration + +We would suggest installing [uBlock Origin](browser-extensions.md#ublock-origin) as a content blocker if you want to block trackers within Mull. + +Mull comes with privacy protecting settings configured by default. You might consider configuring the **Delete browsing data on quit** options in Mull's settings if you want to close all your open tabs when quitting the app automatically, or clear other data such as browsing history and cookies automatically. + ## iOS On iOS, any app that can browse the web is [restricted](https://developer.apple.com/app-store/review/guidelines) to using an Apple-provided [WebKit framework](https://developer.apple.com/documentation/webkit), so there is little reason to use a third-party web browser. @@ -152,7 +189,9 @@ On iOS, any app that can browse the web is [restricted](https://developer.apple. #### Recommended Safari Configuration -These options can be found in :gear: **Settings** → **Safari** +We would suggest installing [AdGuard](browser-extensions.md#adguard) as a content blocker if you want to block trackers within Mull. + +The following privacy/security-related options can be found in the :gear: **Settings** app → **Safari** ##### Profiles @@ -215,8 +254,6 @@ If you use iCloud with Advanced Data Protection disabled, we also recommend chec ### Minimum Requirements - Must support automatic updates. -- Must receive engine updates in 0-1 days from upstream release. +- Must receive engine updates from upstream releases quickly. +- Must support content blocking. - Any changes required to make the browser more privacy-respecting should not negatively impact user experience. -- Android browsers must use the Chromium engine. - - Unfortunately, Mozilla GeckoView is still less secure than Chromium on Android. - - iOS browsers are limited to WebKit. diff --git a/docs/tools.md b/docs/tools.md index 41df2a3753..f5532c9328 100644 --- a/docs/tools.md +++ b/docs/tools.md @@ -45,6 +45,7 @@ For more details about each project, why they were chosen, and additional tips o
- ![Brave logo](assets/img/browsers/brave.svg){ .twemoji } [Brave (Android)](mobile-browsers.md#brave) +- ![Mull logo](assets/img/browsers/mull.webp){ .twemoji } [Mull (Android)](mobile-browsers.md#mull) - ![Safari logo](assets/img/browsers/safari.svg){ .twemoji } [Safari (iOS)](mobile-browsers.md#safari)
diff --git a/theme/assets/img/browsers/mull.webp b/theme/assets/img/browsers/mull.webp new file mode 100644 index 0000000000000000000000000000000000000000..b3b04cde0ed95cc4ac0b65e6fbf7a4a2dc5a1088 GIT binary patch literal 3926 zcmV-c52^4{Nk&Fa4*&pHMM6+kP&il$0000G0001=005r=06|PpNc;x?00E$e{S)Cx zsw8WhXWO=I+t%7U_pEK(w!J&dcn2BYc#+%jPKLpB*N1evyQ-4=cuz!30Q^5p>kUu5 z_xp$uW2Q|TGvc?OK7Hw~el0^!>#H7klB4(HiLLebs1URm!&U zpWfd-6m)s)+v$58m(j$_2d>gOhJ?*o%RlTM%(}fXFTsn1M>MWQY9)R^@1SJ4dUT3{ z)K~lcNrs5-)i(wm%Uzqj$nZD6tsD?Nv)Tujo=d&Ra+6;k55)Y3f{69SVr2Rc0N8w7 z(ETYv+uL6KWy+>~Clk_(OLEepPH&z5*E{!iHP7~K6LR(10Io*9>Nqp3H+?eWR2iE5 z@2R=p-q*^6mSYv<+aKU5Mu?*fw0U7hqzlR2F_WHaqp!tO zj{ZesdP4v6$a@OFVrF<~lN+_G>iE>xXdrsFokZpf0oHTV9myvi<*o(TEhwE&j-Xut z#|5cHTrQ}Bjsrvr!f-Bj6dVO`M$$!vhjK~MX@C=wFq20PNm1&1nC)GmN6qA-?25{ljkFjrOthd5cY07lEo<4_`NIKcO^lv+BMD(f47 zH)UZ8odadR2Jn!ua5}rN2LO5si=|5z)*S#UWEIezmsJJ;5H8EtNab#pb;@tDEX<|K zN7>{3UJ({Ul_=~bzt%Of!l~@CYFhch8d)(^NwQXg=8Zm44yqhc%{OboI8mik)uP5h zKOH$w`;thRGJJyDLp`c=i_qhG>LMKbpoT7VIC>r zG_g`VLoHz9y%GN%BJKv0-*$+Irb!f$@iq`Xy~E8ffhLWgd*{sZulqAzv^T6FHI%8<~PZ1bRqkC8V@_Hy@9ArDhl*bcu-(!8=9pkv7W*u z0hf?`gd!^`%0=Mk1UI;3T%>TysK3QD+tyg8h(d~D5v57nZDtKaL}yfD1G^lGJa&z# z@ui43%%q!}P_x0F+|0{Ckxr3W09?gG7mnE419o1wh6b`bQ zY$Qy!=y@GU3!PNy6j@Z|MM(OJo+uhD{f8)%B8RBB6lo)LJc86U88o>Rc{JHBq<$#S z1~PP&krYrAl2o{md~JX(4RlydQbJKeQib%5-LwWGM}^`dg_A--jsvuk0+e|vNJ}Zo zC`i5K0TMN?M?|bz{no=LP-rcMO9-BN?Bgvph^SuYHyZKWZ|&fX8WgH36h0~FdL6nB zcOs7Tvn$iu0sO9@)OsX!OF`v#fbNTw7y#&8_9_7UqN3PRnkq4<{sLh8xV$sK{Wk!> zCo0MF0vu&` z)=(Bro}mnOhoPODomyh#JdM-HMU`Ds+ov#~FJ;%vKYm@GqmW^Q5f@FJkys>G@-__^ zvfzNj7XY6au2DGc2T?5edo%!c9hHgdltbN=9 z0KM1ykZH0WX9|)#oO;rbsc&O10BG^TRxje_1kc=l;QvJ>vW?aeUyTfF5_BYRL9F~7 z0Kjtn3U9)W8^FKS8f0AK)2fd`rtuA0UKbz4)hz)4EO+m;fPc#a$U0r4Bp=xp6>DT6 z>-{ak-vXK&k#~e&k_#EvCi~fW;YJPZLC8ECQ3+R(wHm7+<}t%Rb==gX!FIAovfsa8yL#_wM?J1i`0%G}Lo@_afPZwPb(H8WQJ`fyv&-{tXN zH#^P1xU(qGk&I?u+V;njT|j@wCkJiF(ZJ&Yo+S^At?tSWZtRBQ0@*Luvx|i2%*<{BzUe1C9p`sdv2^&8*=`j7b^|NVu2fFHJ=tpD*pZaxQpZ9j26rGNkRfN;q^?OjWGQ_T0{eK}^+ zk@D*IbdAy^PN9hU&s=rs9t-+%hJQwfy&|mxoInI%Ig!3|jC?T<`P_Ozv zjC{oa(YjG}SSQpnzzk^_OM*#}G$tkNNp7Gzf$BOQeW+`>zp!F~w#mOvVx$vER%26 z2*M*XDQ`wOkQy^*zC2_eq0e*_RYg~Bv69veN58W`FTwx-{_h*8)OFzgtsJnXt|NqV z(SKU%r^0}QT>P*q0*At9@JW-5vG7UZ66H9P9VhP^k&YpsPlLXY)@^YM+Cd^1agR`~ zI9MdfJ+H87^ogs*jG`$!fBaGn1oVM=7qnAAf#tA#a>wDDmdabsu;io1>-qef{7U!u z#)~;he#!5+{1>ET2pPQN)1@|c4xp@B-nC=Uy6ZQz|L?dXGe`aBo9GbDROC{i3so(O zFhRW_zp;Mhcty9*^DFtb*IG6Yl+J%L9luqSQb4rWrqP zgEL3S^}SS$TPCb!q_})a=@Kd~382@K7fFyF5-YofO#JB=SVHBXR{G0UuR@a&-rYFa zZQ6$T@Q`{!&hJb~n1|6(Q0Mw^x%7j}&ucu=)FPb|Xsn6Rz0ACjG*p(%v>4!L3+=0g zfLd%o1PXY_`!0ln?`TZK<(-S^R1THKq^zv!%7@L)#F${84Fx0PG;VKeuMC>x4uF&n zL#C8DEQO=jB4R2wn$1?GZadfEksz`!xK*}+MC;ETi4dx(qefz4#4YEm z+C5?8n`so!z+2g-oaExT7tuXPky5M7d#{jg-{wgKo3fMyNz7ks&KCT5!}+7Uh-EPp zwB&I-;__xW@)ug&t5()byo|PkFK7-4ya6<-U-h%08t05+Z%CzNXhUIhs{A@@M5lQ*z=Y+g?A7`EQP z(GJ*V41QlW`|!7L?&AngrMLsYyQlUZSxxY-@)0}<4 zmdOy!@g^{1^{$I!lWu@Q!Wx3@*!@kf4>51u7CKmXEqJ?YM{$HkBe77nU#VlU@4I8Bp9n&6se zhmbbB4iDd;P)a={Iq>l5h+wRVcGII?tUBO!elb1fVlmNB5=6D2=l~~jdm?2c!T`a} zehtnxnuYup*RtM}wadzufOC%?={*;CN_vdcbSWzkP|@JIFKEFBE2wnPvTZ zpWf)jGRAWD7FE2U{cFgo0T6j;xM8A!vY2`N%qy%)w~vJN?yNGTf14EiilK$Eolu&l)cj&xDK)Oj&9rBB_Wn z^Ep?>?T&*|uB5X^{~>wlW^4wJMd}Iz(27@Imx0^g7|qrVGgF~xe#L)up~UU|8hOCp zT7)D3MggUM9Yy|%NG}VG-E|ewMUFq4nS_no{151M`xAW_qhmGxZ;+N(s_&Dok<7Id z#}L7!54-z9poy*oDJjddG{!LbIVF~PH_WmZ=@u&(N^A-e%mHK5mD*GcG30bgW_>}mGI>g~>U^CCFe0v}wbO5fyuj5n~L_rRorSw!< zpO9k9sQGs|QA}QNgb73>07$d)PaK03rZ2uaIn?#(Y9*2$4n^qRc88x@_+4_j*ne`2 z(1x^NbV17WW&Ea@*oP#wLJ)8~JjL(-IQ#Xt(PmHgzU^`lJ9xYbm4^!XY8oDY