chromium VS termux-packages

One of the unexpected use of shadow DOMs for me was a document generated for image resource URLs [1], because the HTML standard apparently specifies the exact DOM structure of the generated document except for the `` element [2].

[1] https://github.com/chromium/chromium/blob/f02ca73/third_part...

[2] https://html.spec.whatwg.org/multipage/document-lifecycle.ht...

Recently my favorite open source mouse gestures extension SmartUp Gestures was taken over by some shady entity (with github no longer being updated of course).

I opened Chrome ticket that they should ask to re-enable extension when ownership changes. They just closed the ticket replying with this link:

https://chromium.googlesource.com/chromium/src/+/main/extens...

:(

Hmm. It looks like files with the .lnk or .pif file extension can only be downloaded on a user gesture: https://chromium.googlesource.com/chromium/src/+/39841e54180...

So it can't be done silently. Although, I do wish the type was marked "DANGEROUS" a la dll files.

On Linux, Chromium uses setuid or user namespaces to restrict the access of sandboxed components and seccomp-bpf to reduce the kernel attack surface.

Check out the Chromium docs on this topic: https://chromium.googlesource.com/chromium/src/+/HEAD/docs/l...

You can also disable JIT in Firefox by setting javascript.options.baselinejit to false in about:config, although you won't get CET.

[1] https://github.com/chromium/chromium/blob/12c232c43ce7324d30...

Chromium targets iOS already: https://chromium.googlesource.com/chromium/src/+/main/docs/i...

For the sake of completeness, I've traced the evolution of the notice over time:

From 2008-07-26: "Going incognito doesn't affect the behavior of other people, servers, or software. Be wary of: / • Websites that collect or share information about you / • Internet service providers or employers that track the pages you visit / • Malicious software that tracks your keystrokes in exchange for free smileys / • Surveillance by secret agents / • People standing behind you" (https://chromium.googlesource.com/chromium/src/+/09911bf300f...)

From 2013-12-07: "Going incognito doesn't affect the behavior of other people, servers, software, or people standing behind you." (https://chromium.googlesource.com/chromium/src/+/c5e36c57178...)

From 2013-12-13: "However, you aren't invisible. Going incognito doesn't hide your browsing from your employer, your internet service provider, or the websites you visit." (https://chromium.googlesource.com/chromium/src/+/70821506825...)

From 2014-02-27: "However, you aren't invisible. Going incognito doesn't hide your browsing from your employer, your internet service provider, governments and other sophisticated attackers, or the websites you visit." (https://chromium.googlesource.com/chromium/src/+/ab54bd65701...)

From 2014-04-29: "Going incognito doesn't hide your browsing from your employer, your internet service provider, or the websites you visit." (https://chromium.googlesource.com/chromium/src/+/eb09a62ef40...)

From 2016-01-15: "However, you aren't invisible. Going incognito doesn’t hide your browsing from your employer, your internet service provider, or the websites you visit." (https://chromium.googlesource.com/chromium/src/+/b7dac1a6a79...)

From 2017-02-27: "Your activity might still be visible to: / • Websites you visit / • Your employer / • Your internet service provider" (https://chromium.googlesource.com/chromium/src/+/cfe102adddc...)

From 2017-03-29: "Your activity might still be visible to: / • Websites you visit / • Your employer or school / • Your internet service provider" (https://chromium.googlesource.com/chromium/src/+/7ca3ccf74e8...)

(Note that some of these were behind a feature flag for a few months.) Also, it looks like they've been intending to modify the new-tab page text for Incognito windows for some time, as part of the "Revamped Incognito NTP" project. You can view the modified text with 'chromium --enable-features=IncognitoNtpRevamp':

From 2021-08-13: "What Incognito doesn't do / Incognito does not make you invisible online: / • Sites know when you visit them / • Employers or schools can track browsing activity / • Internet service providers may monitor web traffic" (https://chromium.googlesource.com/chromium/src/+/e6ae57ba385...)

From 2022-01-25: "What Incognito doesn't do / Incognito does not make you invisible online: / • Sites and the services they use can see visits / • Employers or schools can track browsing activity / • Internet service providers can monitor web traffic" (https://chromium.googlesource.com/chromium/src/+/8b349f6c984...)

Blink can now be compiled for iOS, but without JIT or WASM:

https://chromium.googlesource.com/chromium/src/+/main/docs/i...

https://bugs.chromium.org/p/chromium/issues/detail?id=141170...

I think its weird that Vercel has this limit. There is no practical reason I can think of for having such a limit on URL characters that is so small. Chrome suggests a 2MB limit[0] for example. The platform itself doesn't have one, and Firefox I believe if memory serves (I can't find the source for this claim atm) is 1 MB effectively, and I don't think Safari is any lower than that either (and may well be more inline with Chrome on this, at 2 MB)

[0]: https://chromium.googlesource.com/chromium/src/+/master/docs...

usbredirect, USB drives/disks, Termux, termux-usb, QEMU, and Alpine Linux in action in April 2024 on an Android 11 phone that is not rooted --> Update-6, Update-7, Update-8, Update-9, Update-10 at https://github.com/termux/termux-packages/issues/19635

"USB Network Redirection protocol description version 0.7 (19 May 2014)": https://gitlab.freedesktop.org/spice/usbredir/-/blob/main/do... (gitlab.freedesktop.org/spice/usbredir/-/blob/main/docs/usb-redirection-protocol.md)

"How to use Spice "Open remote computing"" Hans de Goede "@ T-DOSE 2011, Eindhoven": https://www.youtube.com/watch?v=e1fC3GOTHOY (www.youtube.com/watch?v=e1fC3GOTHOY)

Phone (not rooted) running Android 11 and Termux doing superuser/root operations on a USB flash drive connected to the phone, for example "cryptsetup luksFormat /dev/sda1" and "mkfs.ext4 /dev/mapper/v1" --> Update-6 through Update-8 and "Connecting a USB device to QEMU using termux, termux-usb, usbredirect" at https://github.com/termux/termux-packages/issues/19635 (see also Update-9, Update-10, Update-11).

Done on a phone that is not rooted running Termux, termux-usb, usbredirect, and QEMU --> "cryptsetup luksFormat /dev/sda1" and "cryptsetup luksOpen /dev/sda1 v1" and "mkfs.ext4 /dev/mapper/v1" and "mount /dev/mapper/v1 /root/1" where "/dev/sda1" is a partition on a USB flash drive ("dev/sda") plugged in the phone: https://github.com/termux/termux-packages/issues/19635 (github.com/termux/termux-packages/issues/19635'cryptsetup)

Yes. Even without enabling root, you can install Termux[1] and have a full Linux cli environment with ssh.

> don't understand not more people want to access their DCIM folder via sshfs

I agree. I sync my camera folder with Syncthing[1], so as soon as I take a photo it is available on my laptop.

1: https://termux.dev/

As usual don't forget that Android/Linux isn't GNU/Linux,

https://github.com/termux/termux-packages/wiki/Termux-and-An...

https://developer.android.com/ndk/guides/stable_apis

https://android.googlesource.com/platform/bionic/+/master/an...

With this, I was able to cross compile lone for x86_64 from within the Termux environment of my aarch64 smartphone. All I had to do was obtain the Linux user space API headers for x86_64.

I made a Termux package request for multiplatform Linux UAPI headers specifically so I could cross compile lone but unfortunately it was rejected.

https://github.com/termux/termux-packages/issues/16069

I wonder how far you could get with the git client in termux. I got vim running at one point.

[1] https://termux.dev/

[2] https://packages.termux.dev/apt/termux-main/pool/main/g/git/

Crystal can be installed with just pkg install crystal. If you have Docker, you could also clone the build environment and try building Crystal locally with scripts/run-docker.sh scripts/build-package.sh -I -a aarch64 crystal.