Hacker News Reader

Comment by gkya | Hacker News Reader

For a truly minimalistic browser with support for modern HTML and a serious orientation towards security, see xombrero at https://opensource.conformal.com/wiki/xombrero . It provides fine-grained whitelisting for plugins, js and cookies, and options for enabling/disabling many other security/privacy-critical features, like 3rd party cookies, referrers, etc. The same guys also have made AdSuck, which blocks ads at the DNS level.

These tools do not have the eye-candy that Min has though. Kudos for the design, it's indeed lovely.

View on HN

Xombrero seems to be unmaintained and has severe security problems. It's HTTPS implementation is vulnerable to MitM script injection.

See my post here: https://rya.nc/https-script.html

For a truly truly minimal browser (albeit without support for modern HTML) check out the Dillo browser [1], in active development since 1999 [2]!

If all you need is to render HTML, it's tiny and fast. It supports HTTPS and no JavaScript (so you don't need NoScript for that ;)

[1] http://www.dillo.org [2] http://hg.dillo.org/dillo/raw-file/default/ChangeLog

IMHO the truly one because of it's render engine (not webkit/gecko/blink-based).

I really enjoyed "dwb" until the author abandoned it late 2014. Now they seem to have picked up development again(!):

http://portix.bitbucket.org/dwb/

It's fully keyboard driven (to the extent possible) and has a decent amount of extensions, including ad blocking and a great requestpolicy manager for controlling 3rd party requests.

I found uzbl after I told a friend about xombrero:

http://www.uzbl.org/

If you like Vim keybindings, check out qutebrowser, which currently has a crowdfunding campaign to update it to make use of the newer QtWebEngine backend https://www.indiegogo.com/projects/qutebrowser-a-keyboard-fo...

They want my email and name in order to merely show me the page, even on vanilla Chromium: http://imgur.com/QVH4AeV

It's not their fault, that's indiegogo. Here is the GitHub repo: https://github.com/The-Compiler/qutebrowser

xombrero depends on webkit. truly minimal? right. oriented towards security? have you not seen how WebKit does security? they wait for dozens of reported vulns before patching/disclosing. nothing that depends on webkit can ever be considered "oriented towards security"

Reply on news.ycombinator.com