Reminder to anyone using Mull browser: it is no longer supported and will be missing updates for these android specific CVEs

https://www.mozilla.org/en-US/security/advisories/mfsa2025-01/

cross-posted from: https://lemm.ee/post/51967762

248 points · 21 comments · view on lemmy.world

21 Comments

haroldstork@lemm.ee · 30 pts · 1y (9 replies)

Thank you! Is fennec the goto now?

mac@lemm.ee · 19 pts · 1y (7 replies)

That's presently what I'm using, but I have added the mull version of the arkenfox user.js via Firefox devtools.

Fennec does release updates a bit slower than mull did via DivestOS's repo, unfortunately, and doesn't have a build up for these CVE's as of yet. Granted, I don't think FF android has these updates yet, but I feel like I remember Mull's updates making it to my device faster than FF's even, as they didn't need to go through external review processes.

shortwavesurfer@lemmy.zip · 20 pts · 1y (4 replies)

I think somebody forked it and is calling it IronFox. So you might want to take a look and see if that's correct.

kusivittula@sopuli.xyz · 2 pts · 1y (3 replies)

yeah but couldn't find a way to install it

Blaze@sopuli.xyz · 6 pts · 1y (1 reply)

I got it using Obtainium

kusivittula@sopuli.xyz · 2 pts · 1y

worked, thanks! never heard of this one.

shortwavesurfer@lemmy.zip · 1 pts · 1y

Oh, that's annoying. I hadn't actually tried it myself. I had only heard about it.

Hellmo_Luciferrari@lemm.ee · 6 pts · 1y (1 reply)

Could you lendna little help to adding Mulls user.JS please? I haven't had luck in ways I've tried. I am rooted.

mac@lemm.ee · 8 pts · 1y

I'm not rooted, but I used this guide with mulls user.js

https://github.com/yokoffing/Betterfox/issues/240

kekmacska@lemmy.zip · 1 pts · 1y

Either that or Cromite. Cromite has releases WEEKLY

Album@lemmy.ca · 25 pts · 1y (1 reply)

The dev that supported Mull also made significant contribution to fennec, though it still has it's maintainer, So I'm nervous about fennec's long term suitability.

https://www.reddit.com/r/fossdroid/comments/1hlg8zx/seeking_collaborators_for_mull_browser_fork/m3tsp0p/?context=3

AnarchistArtificer@slrpnk.net · 2 pts · 1y

Yeah, I had similar concerns based on how long Fennec took to be updated to patch a CVE recently (The issue was possibly linked to the fdroid version and might not have applied if I were using Obtainium, I don't remember)

countrypunk@slrpnk.net · 15 pts · 1y (5 replies)

Hm...what's the best choice to switch to then? I was under the impression that fennec is less private and secure than mull.

communism@lemmy.ml · 30 pts · 1y (4 replies)

Someone forked and is maintaining Mull: https://gitlab.com/ironfox-oss/IronFox

Will have to see long-term if this is a good option of course, as it's not been long.

countrypunk@slrpnk.net · 17 pts · 1y (2 replies)

I wonder if it'll be added to fdroid or not.

communism@lemmy.ml · 13 pts · 1y

I'm just using Obtainium, but I assume they probably will put it on F-Droid soon.

kixik@lemmy.ml · 13 pts · 1y
AnarchistArtificer@slrpnk.net · 1 pts · 1y

Thanks for this rec

gortbrown@lemmy.sdf.org · 3 pts · 1y

Thanks for the heads up, didn't know this!

kekmacska@lemmy.zip · 1 pts · 1y (1 reply)

I now use Cromite for clearnet, Tor browser for dark web

mac@lemm.ee · 1 pts · 1y

Chromium based browsers are more secure but less private on android.

I get a unique fingerprint when I check EFF "cover your tracks" on cromite.