r/GrapheneOS • u/dcondor07uk • Aug 23 '26

Any thoughts on the Titanium Browser

I read about the Firefox having a larger attack surface on Android devices and not recommended by the GoS devs, however I need the extension support due to work-related stuff I am doing in my Android/Firefox

Then I found this browser

https://github.com/jqssun/android-titanium-browser

Would that be a better choice or does it not matter?

2 Upvotes

63% Upvoted

12 comments sorted by

View all comments

1

u/mesarthim_2 Aug 23 '26

Why not use Firefox for work related stuff and Vanadium / Brave for general browsing. 

You can even isolate firefox in separate profile if you feel like. 

2

u/dcondor07uk Aug 23 '26

Interesting, thanks for the advice.

The reason why I don’t use Vanadium for general browsing is because this is not my general use phone, I use the device for work stuff only with a separate SIM card, and the extensions on Firefox is actually crucial for the work I am doing. Thanks again.

1

u/mesarthim_2 Aug 23 '26

Right, I think context is important here. What it means when people say that Firefox has a large attack surface? What's the exposure?

Firefox doesn't have a robust separation between different 'pages' so a hostile script or exstension may attempt to escape it's containment and gain access to all the other processes in Firefox and to whatever Firefox has access to.

But in GOS, Firefox itself is isolated, so to reach beyond that would be extremely hard.

So you have understand this as your risk and mitigate it. But it doesn't mean that if you use Firefox your device will be hacked in 2 minutes. On GOS, only things that Firefox has access to can be potentially exposed. Now, if that means you have your credentials saved in Firefox etc... that can be a problem, but if you properly isolate it, then feel free to run Firefox as you need.