Hacker News new | ask | show | jobs
by Terretta 1058 days ago
In case you are interested in a wrapper for WebKit instead of for Chromium, but one that lets you use your favorite Chrome and Firefox extensions:

Orion Browser by Kagi: Very fast. Zero telemetry.

Lightweight, natively built with WebKit, made for you and your Mac. Industry-leading battery life, privacy respecting by design and native support for web extensions.

Orion supports Firefox and Chrome browser extensions natively. Whether you prefer getting them from the Chrome Web Store or Firefox Add-Ons... as well as bringing support for as many as we can to iOS…

https://browser.kagi.com/

5 comments

> Zero telemetry.

Q: Is Orion open-source?

A: We’re working on it!...[0]

Q: Is Orion truly safe if it’s not open-source?

A: The idea that "open-source = trustworthy" only goes so far...[1]

[0] https://browser.kagi.com/faq.html#oss

[1] https://browser.kagi.com/faq.html#ossprivacy

You can use a network capture util and will find that there is no telemetry. There’s an update check but you can disable it.

Don’t think it’s much different to use a closed source application than it is to use an open source app that somebody else compiled and put into your systems package repository.

Orion and Kagi (subscription search engine) are both great products, been using them for over a year, though I main FF.

>Don’t think it’s much different to use a closed source application than it is to use an open source app that somebody else compiled and put into your systems package repository.

What about the fact that in the case of the open source application, there are people not directly motivated to not mention problems for the good of the company, with the ability to look at the source code?

AKA they are 100% using telemetry.
Anyone, including you, can check that is not true. That is the beauty of a zero-telemetry claim.
its closed source...
Imagine being more eager to review a thousand lines of code, which of course you can follow all the code paths, rather than just pull up the gui of a network monitor.
yes, but you can analyze the traffic from the app if you cared too. the point is that you absolutely can verify their claims.
I’ve worked on projects that logged locally and only transmitted every ~60 days when they detected the right network (eg public wifi). So unless you monitor it continuously and permanently this isn’t true.
Can't wait for Orion to support Linux. As a Kagi subscriber it makes me feel salty, even though i understand focusing initial scope haha.
Try Falkon[0] by KDE.

[0] https://www.falkon.org/

It's really hard to see why would anyone use it. At least epiphany is getting a lot of new features.
Try Palemoon - it is a decent multi-platform hard fork of Firefox with better privacy preserving options.
This is great, with the one big annoyance that they don't use the actual native iCloud password keychain (and so, for example, can't interop with how that's also used to auto-fill passwords for apps on iOS, not just websites).
Orion does use native Keychain for passwords (and also uses iCloud to sync them).
It uses its own separate keychain entries (whatever the term is), not the stuff that's used by the iOS system level functionality.
That is by design of Keychain, apps can not access each others keychain, otherwise it would not be secure. There is no "iOS system level keychain" but all apps use a bucket in keychain - Safari uses one and Orion uses one.
The design of “passwords” on the Mac and iOS doesn’t make it seem like anything is a “safari” password.

You save a password to the keychain in safari, and then you go to the “passwords” system preferences panel and you see those passwords. Or the other way around—creating a password from system preferences makes it accessible in browser. It appears on the surface to just be a password app, not a safari bucket.

It also works this way if you use the iCloud passwords app from windows. All of your saved passwords show up there as well, despite the absence of safari.

I’m pretty sure the new Chrome extension also shares your existing passwords.

I think it’s a reasonable assumption that when an app claims to use the keychain that you will have access to all your previously saved passwords.

Safari uses the Apple bucket, that is also exposed through the Apple's Chrome extension and also when you go to System preferences Passwords pane.

When you view passwords in Orion, you are also viewing passwords saved on Keychain, just in this case Orion's bucket.

There are various system API's that allow apps to read from each other's bucket (obviously all Apple apps have access to Apple's keychain bucket). This is how you can autofill passwords from different keychains in Orion (for example Apple's - which I call Safari's because this is how typically passwords land in it).

That is a deal breaker for me. I use auto-fill extensively and my browsing is 50/50 Mac and iPad so having a separate set of passwords on Mac and iPad is super annoying.
I use Orion on macOS, iOS and iPadOS and it is the same set of passwords everywhere.
I tried Orion a while ago: in that version background tabs with YouTube on pause made the bottom of my m1 air get very hot. I really liked that it supported chrome extensions but battery life was not great. I’ll give it another go now that I’ve been using arc for some time.
I use both actually, Arc and Orion. I love its support for tree-view of tabs and Chrome/firefox extensions. Arc is my main browser now.