Thanks Mike. As a long term ff-esr user I've transitioned over to iridium in recent weeks and love it. Running under OpenBSD - its Pledged (so additional checks to trash out anything that looks suspect). In Oct/Nov when OBSD 6.4 is released unveil will also be available in stable (veils the complete filesystem and then selectively unveils what is permissible). Iridium is like chromium, but with even more controls over phoning home. Works really well with googledocs. Primarily it is my dektop now (using cwm, so generally you launch things via the exec key and type the first 2 or 3 letters of the program you want to run and press enter). Hope the bookmarks bar remains, as that is in effect my launcher. I also have a local html/javascript file to show the date and time in the tab title (I add my bookmarks to the content of that web page). behind that, the desktop, just a picture.Mike Walsh wrote:From version 66 onward, Google started becoming really strict about security.
For data isolation I login at the console and run tmux and mc in one of those windows. Nice and colourful and enables scrolling etc. So fundamentally running all internet facing as userid user, all data stored under root (I further store data files in a encrypted file filesystem)
I do notice that periodically google trashes a aw-snap message apparently as it detects dubious web page content. However the more google tightens up on general browser and browsing security the better IMO. Its great for viewing pdf's, watching videos, etc. I even have a local html/javascript file for a calculator that meets my needs. Pretty much base OpenBSD + iridium + mc ... is my full desktop installation although I do have a few other small programs installed on top of that such as ddclient that provides static domain name to dynamic IP redirection i.e. to my OpenBSD httpd server (base OBSD comes with httpd, mail server, X ...etc all included, and all with sensible secure defaults so pretty much minimal configuration required).