I didn’t read it in full (it seems a proper sophisticated one, it deserves full attention), but “just” firewall rules won’t help you without also disturbing other services you may use later on.ĭespite whatever browser vendors say and do about “security”, overall JS is a bigger risk today than it was in early 00’s to install native programs. This attack requires the NAT/firewall to support ALG (Application Level Gateways), which are mandatory for protocols that can use multiple ports (control channel + data channel) such as SIP and H323 (VoIP protocols), FTP, IRC DCC, etc.īasically, yes: An adblocker/jsblocker a day keeps the malware away. Additionally, new techniques for local IP address discovery are included. This attack takes advantage of arbitrary control of the data portion of some TCP and UDP packets without including HTTP or other headers the attack performs this new packet injection technique across all major modern (and older) browsers, and is a modernized version to my original NAT Pinning technique from 2010 (presented at DEFCON 18 + Black Hat 2010). As it’s the NAT or firewall that opens the destination port, this bypasses any browser-based port restrictions. NAT Slipstreaming exploits the user’s browser in conjunction with the Application Level Gateway (ALG) connection tracking mechanism built into NATs, routers, and firewalls by chaining internal IP extraction via timing attack or WebRTC, automated remote MTU and IP fragmentation discovery, TCP packet size massaging, TURN authentication misuse, precise packet boundary control, and protocol confusion through browser abuse. Wow, it took me a while to find the original post there as it has been moved (archived) to a different thread… I’d really like to stick to Firefox as it does basically everything i need/want. I might have to invest some time this weekend to do a proper Performance analysis and get down to the bottom of this. Websites just seem to feel “smoother” and faster in chromium Browsers to me. Maybe i’m just imagining stuff and Firefox is equal to chrome in terms of Performance. uBlock, a Password Manager and Sideberry for Vertical Tabs. Other than that, i’d say i run pretty light on extensions. Certainly not Firefox’s Problem per-se, but it leads to several sites basically requiring Chrome to work as intended. There’s some weired Keyboard stuff going on that leads to Letters being swapped. One example is the Browser Console for Nutanix. I feel like a lot of sites do optimize for Chrome though and this leads to some issues in Firefox. I run it on both Windows and Linux, and Firefox seems to be getting faster over time, not slower. Since that won’t happen, what’s your opinion? What Browser is the best option at the moment? Ideally, i’d take the new Edge (chromium engine, vertical tabs) but without Microsoft. Vertical Tabs in any Chrome Browser are a sh*tshow. Installing Extensions is a bit of a hassle, but bitwarden, keypass and ublock luckily all have their Extension up on Github. Having to manage Updates myself is a bit of a downer and in the end, they also depend on Mozillas direction for Firefox. Librewolf: Looks like a great Project so far.But trading Google for Microsoft isn’t exactly what i’m looking for. Edge(ium): I really enjoy the new Edge.Opera also has the tendency to come with a million features i don’t need or want. Opera GX: Works well, but the UI is… different.Pages take seconds until they start loading and anything above 20 Tabs get’s more or less unusable (with 32G of Ram…) I’m just not certain what’s going on in the background there. Might be remedied, but i won’t try that again. Brave: There was some at least questionable stuff going on in the beginning.Also, every release seems to get slower and slower Firefox: Mozilla’s direction for Firefox just isn’t what it used to be.Chrome: Great Browser, but Google, so, nope.The least amount of Corporate tie-in/Tracking possibleĪnd all of that with great performance please.At least an Ad-Blocker and Bitwarden or Keepass Integration (Native or Extension).Vertical Tabs (Native or Extension, but ideally hides the original tabs).I’ve now been on a 3 or 4 year Browser Hunt and one seems to be worse than the next.īut since only complaining doesnt help, i’d like to maybe get your suggestion for what the “best” Browser to use. Ok, probably a bit of hyperbole here, but it’s seriously bugging me.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |