this post was submitted on 04 Dec 2024
18 points (90.9% liked)

Privacy

32442 readers
772 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

I already know that it's spyware but in the case that I need to use it for work and school on my Linux laptop, do I need to worry about configuring something so that it won't have access to my whole system like it does on Windows? I'm on ZorinOS/Ubuntu. Thanks in advance

all 12 comments
sorted by: hot top controversial new old
[–] [email protected] 17 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

Try Flathub for some isolation, but I would suggest using chromium.

[–] [email protected] 3 points 2 weeks ago (4 children)

Ok thanks. Are flatpaks better for isolation than snaps? I see many people avoid snaps.

[–] [email protected] 9 points 2 weeks ago* (last edited 2 weeks ago)

IIRC the flapak packaging system is completely open source while snap does not release the server code.

Also, snaps were forced to the users, had terrible performance at the start, thus, making them unpopular.

[–] [email protected] 8 points 2 weeks ago* (last edited 2 weeks ago)

Neither isolates everything. Both have some isolation features. The features enabled by default vary from package to package, so you would have to look at the permissions on each package to find out.

For a bit more isolation than a flatpak/snap, I suggest creating a separate user account for running chromium (or any other moderately nosy software). Note that linux lets you log in to two accounts at the same time, each with its own desktop, and switch between them. Check out your desktop environment's "switch user" function.

For even more isolation, you could run chromium in a hypervisor-based virtual machine.

[–] [email protected] 6 points 2 weeks ago

I just use chromium when needed. Not ideal but usually works in place of chrome.

[–] [email protected] 1 points 2 weeks ago

If you don't like flatpak there is also firejail which you can run to isolate browsers or many other programmes.

There is also a programme to run your browser from ram and commit changes to disk when it closes, which I've used for a year or so and can recommend. I have to look up the name later at home, if you are interested.

Browsers write to disk every couple odd seconds per default settings (I think up to 20gb a day), which eats away on an ssds life cycle. in Firefox this can be changed, but the in ram option makes it smappier as well as a benefit.

[–] [email protected] -4 points 2 weeks ago (1 children)

You could try Qubes OS? Portable version maybe? That's quite easy and sucure.

https://www.qubes-os.org/

[–] [email protected] 8 points 2 weeks ago (1 children)

Why would suggest a jump from Ubuntu to qubes?

[–] [email protected] 7 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

Afaik Qubes runs all software in containers,
which isolates them from each other,
which is great for privacy.

However, OP only asked for Chrome,
and I assume the jump to Qubes might be too big.

To only isolate Chrome,
I'd recommend a Flatpak instead.

Or even better Ungoogled-Chromium.

[–] [email protected] 2 points 2 weeks ago

Oh, I just figured that a portable version of an isolated OS would be a decent alternative. Bit you're right maybe a bit too much