114.0.5735.199: new stable chromium version

[uazo]

@romain-hunault @TheScarastic @althafvly

this is what I am going to do. 1) new commit with the new version https://github.com/uazo/bromite/commit/e6055a94eb376f3201b808d0a7bfae659e46cc75 2) launching the script for the autorebase https://github.com/uazo/bromite/actions/runs/5386731562 automatically generates this pull https://github.com/uazo/bromite/pull/61 3) manually check each change 4) lauch the build https://github.com/uazo/bromite-buildtools/actions/runs/5386896434

and we'll talk about it in 12 hours :)

[romain-hunault]

@uazo great, thanks!

and we'll talk about it in 12 hours :)

Is it the time for build? That's huge! We can provide you access to a faster build servers (we build an architecture in ~30mn).

[uazo]

Is it the time for build? That's huge!

yes, for x64, windows and arm64 :) And I had started from a build of a few days....

We can provide you access to a faster build servers

wow, that would be great!

however, I use docker in docker, which was also the original reason why this repo was created.

because the objective is

• to show everyone the build process (but the hash verification is a to-do, is still missing here), because, you can check the sources, but you should also be able to check the result that you install
• publish a docker image to make available to everyone for the build, with everything you need and no need for an active network (this is there, at least until dockerhub realises I'm using tons of gigs and doesn't kick me out :)
• start a reproducible build process, which I saw that google is working on, but at least I have the infrastructure ready

[uazo]

commit: https://github.com/uazo/bromite/commit/e98862df61c0c2244b4bedb51af13d661affdf53 builder: https://github.com/uazo/bromite-buildtools/actions/runs/5386896434 release: https://github.com/uazo/bromite-buildtools/releases/tag/v114.0.5735.199-e98862df61c0c2244b4bedb51af13d661affdf53 docker image: uazo/bromite-build:114.0.5735.199-e98862df61c0c2244b4bedb51af13d661affdf53

changes:

• bump to 114.0.5735.199

[romain-hunault]

@uazo you can find the dockerfile we are using at https://gitlab.e.foundation/e/os/browser/-/blob/master/Dockerfile

Promising goals :)

To share a more powerful build server, we would need a private discussion channel (mail, Telegram...) to discuss the topic and grant access. Which one would you prefer?

[uazo]

you can find the dockerfile we are using at https://gitlab.e.foundation/e/os/browser/-/blob/master/Dockerfile

interesting, I will take a look at it

To share a more powerful build server, we would need a private discussion channel

Do you mind if I think about it a little bit first? Maybe I got a little carried away yesterday, the opportunity is fascinating (you blinded me with the 30-minute build :), but I wouldn't want to get tied down to anyone just yet. you'll have to excuse me, but I don't know who you are and what you do (but that's not your fault)

[romain-hunault]

@uazo I understand. We are speaking about collaboration, no "to get tied down to" Murena. :slightly_smiling_face:

If you are looking for a more official way to reach me, you can contact the company I'm working for, via this form: https://murena.com/contact-us/

[uazo]

I thank you for your patience, but this is all new to me, I will definitely contact you.

[Infinitytreacher]

@uazo this latest version still doesn't pass https://www.bromite.org/detect with 39/9 fingerprints out of the box

[uazo]

this latest version still doesn't pass https://www.bromite.org/detect with 39/9 fingerprints out of the box

I do not know exactly what you mean. That site detects some (not all, unfortunately) values used for device fingerprinting, it does not make any evaluations. If you try it twice you will see different values:

there is no public test that can say that one browser is better than the others with respect to fingerprinting protection, if you find it, please tell us.

[Infinitytreacher]

Bromite official 108 :

Details


Uazo bromite latest :

Details


[Infinitytreacher]

Yes, I know that no test is absolute but I believe this one was made specifically for bromite and hence any further iterations of bromite should be expected to hold good in this test.

P.S. - thanks for continuing bromite

[uazo]

thanks for the report. i tried the windows version thinking it behaved like the android version. however, it seems to be an android-specific problem https://github.com/uazo/bromite-buildtools/issues/281

[uazo]

commit: https://github.com/uazo/bromite/commit/268fc830e0c4583e83e5a31669905914e661bc03 builder: https://github.com/uazo/bromite-buildtools/actions/runs/5445330761 release: https://github.com/uazo/bromite-buildtools/releases/tag/v114.0.5735.199-268fc830e0c4583e83e5a31669905914e661bc03 docker image: uazo/bromite-build:114.0.5735.199-268fc830e0c4583e83e5a31669905914e661bc03

changes:

• https://github.com/uazo/cromite/issues/335 Added log in calls without TrafficAnnotationTag to understand whether they are active in daily navigation
• https://github.com/uazo/bromite-buildtools/issues/278 remove securitypolicyviolation event
• remove unnecessary code: removed code in Enable-native-Android-autofill.patch not used (checked in https://github.com/uazo/bromite-buildtools/issues/77)
• https://github.com/uazo/bromite-buildtools/issues/261 fix crash in recent tabs
• https://github.com/uazo/bromite-buildtools/issues/269 Remove support for device memory and cpu recovery
• https://github.com/uazo/bromite-buildtools/issues/209#issuecomment-1618253847 remove 00Remove-dangling-attributes-in-some-html-elements.patch: by checking https://github.com/uazo/bromite-buildtools/issues/279, i have discovered that the use of the dangling iframe name trick is exploited by ads libraries such as google's to protect the user from possible privacy issues by dynamically generating an iframe that is separate from the parent with different permissions and without access to the parent's cookies. for this reason, this patch is potentially harmful and i have removed it.

[uazo]

please open a new issue. PS: For the record, I do not give any support for non-open source projects/extensions.

[sankhababu]

this latest version still doesn't pass https://www.bromite.org/detect with 39/9 fingerprints out of the box

I do not know exactly what you mean. That site detects some (not all, unfortunately) values used for device fingerprinting, it does not make any evaluations. If you try it twice you will see different values:

there is no public test that can say that one browser is better than the others with respect to fingerprinting protection, if you find it, please tell us.

I've tested in the latest release. Every time the canvas, audio etc. fingerprint data is changing. That is, randomization is active. 👍 This is clearly expressed at the beginning of the test, score is not much important, refresh and test again to see difference every time - randomized fingerprints.

Even if we test with 'cover your tracks', the result is - 'you are unique'. Same result with 'am I unique' test. But when we repeat the test and see the individual values, they change every time. 👍 So this build is still on the right path.

[uazo]

commit: https://github.com/uazo/bromite/commit/af55aa0ddfc47fbaffafd60c385d4c43c7c5ad0c builder: https://github.com/uazo/bromite-buildtools/actions/runs/5510909401 release: https://github.com/uazo/bromite-buildtools/releases/tag/v114.0.5735.199-af55aa0ddfc47fbaffafd60c385d4c43c7c5ad0c docker image: uazo/bromite-build:114.0.5735.199-af55aa0ddfc47fbaffafd60c385d4c43c7c5ad0c

changes:

• connected bromite's standard adblock to site settings (previously it was always active even with ads allowed by ui) https://github.com/uazo/bromite/commit/a0874d05857203cb2a0eefd0519ea3393963c11f
• https://github.com/uazo/bromite-buildtools/issues/285 fix timezone site setting in android https://github.com/uazo/bromite/commit/1a2cb88ecfef920f2dadf45bb9fc161252699b80
• https://github.com/uazo/bromite-buildtools/issues/284 Enable "max-connections-per-host" flag in windows https://github.com/uazo/bromite/commit/41f20e3e4f4d1faffe98ec6420813d32ef9fb9f9
• https://github.com/uazo/bromite-buildtools/issues/209 Log dangling attributes in some html elements https://github.com/uazo/bromite/commit/33623cd26f938f6f162b634abea2e4f31569b59a changed to only log, added enable-log-dangling-attributes flag in about:flags
• https://github.com/uazo/bromite-buildtools/issues/84 https://github.com/uazo/bromite-buildtools/issues/198 modified the adblock plus patch, with
  • site setting 'block ads' connected
  • added flag allowing the activation of the anti-circumvention list and thus of snippets. The only list allowed is the official adblock plus list. The json-override, simulate-event-poc, simulate-mouse-event snippets have been deactivated while only defined constants are allowed for override-property-read.
  • disabled the use of filters with the header and csp options. the reason is that there is no control over the parameters defined by the lists (e.g. there is no guarantee that the csps defined by the subscription are more constraining than the current ones, indeed, they often allow inline scripts and eval).
  • the ui has been redesigned, displaying information such as status, version and date of last update and making it functionally equal between the windows and android version
  • added possibility of forced launch of subscription update
  • added a random value (-30 +30 minutes) between one scheduled update and the next (which by default is 24 hours)
  • updated snippets to v0.7.0 https://gitlab.com/eyeo/snippets/-/commit/d7c80795567d9f9c44a6ebaa789baceab85f31f9

[uazo]

next version https://github.com/uazo/bromite-buildtools/issues/286