Readit News logoReadit News
cap10morgan · 3 years ago
Important caveat with Firefox: You can run your own Firefox Account server (see https://mozilla-services.readthedocs.io/en/latest/howtos/run...) and then e.g. connect to it over a VPN to mitigate a lot of this.
WirelessGigabit · 3 years ago
Problem with this is that it needs the sync server:

> Since the Mozilla-hosted sync servers will not trust assertions issued by third-party accounts servers, you will also need to run your own sync-1.5 server.

The tutorial refers to the old unmaintained version: https://github.com/mozilla-services/syncserver, see https://github.com/mozilla-services/syncserver/commit/8d9804...

The alternative is https://github.com/mozilla-services/syncstorage-rs which is ridiculously hard to set up.

3np · 3 years ago
I've posted on this a few times. Rehashing[0]:

> https://github.com/mozilla-services/syncserver/pull/294

> So basically they stopped running the older version themselves but don't consider the newer version production-ready yet. What a mess.

This doesn't seem to have improved much since...

Some of my experience self-hosting the whole stack previously:

https://news.ycombinator.com/item?id=30315816

https://news.ycombinator.com/item?id=30727935

[0]: https://news.ycombinator.com/item?id=30728966

JetSpiegel · 3 years ago
> The alternative is https://github.com/mozilla-services/syncstorage-rs which is ridiculously hard to set up.

https://github.com/mozilla-services/syncstorage-rs/issues/49...

This is the issue to watch, supporting SQLite. This makes it feasible to run a simple sync server for a single user or a small group. But this is not moving forward.

asabla · 3 years ago
I got stuck with the new one as well last time I tried. But it seems like there is an docker option now, which seems to make things a lot easier
Daril · 3 years ago
There are solutions external to the browsers that work pretty well and where you have control on your data :

Floccus for bookmarks (https://floccus.org/) : it works also on mobile devices : a great plus ! You need only a webdav server (or a Nextcloud account), I use Dave (https://github.com/micromata/dave)

Vaultwarden for the passwords (https://github.com/dani-garcia/vaultwarden)

A huge advantage of this solution is that you can have synchronization also between different browsers and on mobile devices.

l1n · 3 years ago
https://bugzilla.mozilla.org/show_bug.cgi?id=1320222, doesn't seem conclusive to me wrt Firefox Sync safety
aodj · 3 years ago
This article is from 2018, and contains a single update from 2020. I would think the terrain has shifted in the last 3 years, so take the article with an appropriate pinch of salt.
aodj · 3 years ago
Digging around there appears to be a newer article (which probably prompted the original thread) is here https://palant.info/2023/08/29/chrome-sync-privacy-is-still-... which has it's own HN thread here
jeffbee · 3 years ago
Isn't it somewhat hilarious that the author of Adblock Plus, far and away the largest privacy risk faced by anyone, throws this much shade on Google's privacy protections? ABP gets unfettered, full and complete access to all your data no matter how sensitive and only the publisher's OpSec stands between the user and total exposure.
andrewmutz · 3 years ago
> Update (2020-06-10): The issue has been resolved in Chrome 80. The key derivation algorithm used now is scrypt with N=8192, r=8, p=11. These values are sane and should make attacks against most passwords unrealistic.
palant · 3 years ago
Note: I am the author of this article.

Yes, they fixed this particular issue (and a few more), the article mentions it. But the update I published today explains why Chrome Sync is still very bad privacy-wise (as opposed to outright horrible which it was back in 2018). https://palant.info/2023/08/29/chrome-sync-privacy-is-still-...

dang · 3 years ago
Recent and related:

Google moderates Google Collections items - https://news.ycombinator.com/item?id=37301600 - Aug 2023 (38 comments)

insanitybit · 3 years ago
(2018)
jeffbee · 3 years ago
2018.